so I have a pi zero, running cups like this

  services.ipp-usb.enable = true;
  services.avahi.enable = pkgs.lib.mkForce false;
  services.printing = {
    enable = true;
    listenAddresses = [ "*:631" ];
    allowFrom = [ "all" ];
    browsing = true;
    stateless = true;
    defaultShared = true;
    openFirewall = true;
    drivers = [
      x86Pkgs.gutenprint
      (import (builtins.getFlake "github:matthewcroughan/nixpkgs/3899aabdacb26c465fecd5e799448ea319341890") { system = "i686-linux"; config.allowUnfree = true; }).cnijfilter_4_00
    ];

    extraConf = ''
      ServerAlias *
      DefaultEncryption Never
      DefaultAuthType Basic
      WebInterface Yes

      <Location />
        Order allow,deny
        Allow all
        Encryption Never
      </Location>

      <Location /admin>
        Order allow,deny
        Allow all
        Encryption Never
      </Location>
    '';
  };