diff --git a/flake.nix b/flake.nix
index 1625f88..b60c05d 100644
--- a/flake.nix
+++ b/flake.nix
@@ -88,7 +88,11 @@
       };
     } // flake-utils.lib.eachDefaultSystem (system:
       let
-        pkgs = serokell-nix.lib.pkgsWith nixpkgs.legacyPackages.${system} allOverlays;
+        pkgsAllowUnfree = import nixpkgs {
+          inherit system;
+          config.allowUnfreePredicate = pkg: builtins.elem (pkg.pname) [ "terraform" ];
+        };
+        pkgs = serokell-nix.lib.pkgsWith pkgsAllowUnfree allOverlays;
 
         tfConfigAst = terranix.lib.terranixConfigurationAst {
           inherit system pkgs;
diff --git a/servers/alzirr/platform.nix b/servers/alzirr/platform.nix
index 8ab9591..eba1c0b 100644
--- a/servers/alzirr/platform.nix
+++ b/servers/alzirr/platform.nix
@@ -44,12 +44,11 @@
   # machines irrespective of host names.
   # We do not worry about plugging disks into the wrong machine because
   # we will never exchange disks between machines.
-  environment.etc."mdadm.conf".text = ''
-    HOMEHOST hetzner
-  '';
   # The RAIDs are assembled in stage1, so we need to make the config
   # available there.
-  boot.swraid.mdadmConf = config.environment.etc."mdadm.conf".text;
+  boot.swraid.mdadmConf = ''
+    HOMEHOST hetzner
+  '';
 
   # Default mdmonitor service does not work, fix it by directing events to the log.
   # See https://github.com/NixOS/nixpkgs/issues/72394