diff --git a/flake.lock b/flake.lock
new file mode 100644
index 0000000..2155089
--- /dev/null
+++ b/flake.lock
@@ -0,0 +1,27 @@
+{
+  "nodes": {
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1758427187,
+        "narHash": "sha256-pHpxZ/IyCwoTQPtFIAG2QaxuSm8jWzrzBGjwQZIttJc=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "554be6495561ff07b6c724047bdd7e0716aa7b46",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "nixpkgs": "nixpkgs"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}
diff --git a/flake.nix b/flake.nix
index 917110b..9b979ec 100644
--- a/flake.nix
+++ b/flake.nix
@@ -7,7 +7,7 @@
     nixpkgs,
   } @ inputs: let
     system = "x86_64-linux";
-    pkgs = nixpkgs.legacyPackages."${system}";
+    pkgs = import nixpkgs { inherit system; config.allowUnfree = true;};
   in {
     packages."${system}".default = pkgs.writeShellApplication {
       name = "hello_world";
diff --git a/scanbuddy.bash b/scanbuddy.bash
index 54b57e0..0fd8e4c 100755
--- a/scanbuddy.bash
+++ b/scanbuddy.bash
@@ -103,9 +103,9 @@ case "$1" in
       "${PAPERLESS_URL}/api/documents/post_document/") || FAILED=1
 
     if [ -v FAILED ]; then
-      echo "Paperless failed with message:\n$PAPERLESS_STATUS"
+      printf "Paperless failed with message:\n%s" "$PAPERLESS_STATUS"
     else
-      echo "Paperless consumption job: '$PAPERLESS_STATUS'"
+      printf "Paperless consumption job: %s\n" "$PAPERLESS_STATUS"
     fi
     ;;
   *)