upgrade

modules/nixos/nixpkgs.nix

@@ -11,6 +11,11 @@ in {
   config = lib.mkIf cfg.enable {
     nixpkgs.config.allowUnfree = true;
 
+    # Dependency of Zotero.
+    nixpkgs.config.permittedInsecurePackages = [
+      "firefox-esr-140-bin-unwrapped-140.17.0esr"
+    ];
+
     nix = {
       settings = {
         allow-import-from-derivation = true;