Packaging everything inside nixpkgs. Everybody can read nix? No. Everybody can understand what the hell is going on inside nixpkgs? No. People can hop easily in and tweak things to make it free? No. Is it possible to create or bypass paid limitations? Yes.
Creating private repo dedicated to paid apps distribution. Users will get access as soon as they have ssh key to access private repo via nix and they get it through account management system, which generates key pairs for users and registers it to make it available on our forgejo.

Basically there are 2 ways of doing this: 1. Packaging everything inside nixpkgs. Everybody can read nix? No. Everybody can understand what the hell is going on inside nixpkgs? No. People can hop *easily* in and tweak things to make it free? No. Is it possible to create or bypass paid limitations? Yes. 2. Creating private repo dedicated to paid apps distribution. Users will get access as soon as they have ssh key to access private repo via nix and they get it through account management system, which generates key pairs for users and registers it to make it available on our forgejo.