move insecure packages from overlays to the service that needs it

flake.nix

@@ -59,10 +59,6 @@
       import pkgs {
         inherit system;
         config.allowUnfree = true;
-        config.permittedInsecurePackages = [
-          "dotnet-sdk-6.0.428"
-          "aspnetcore-runtime-6.0.36"
-        ];
         overlays = extraOverlays ++ (lib.attrValues self.overlays);
       };
     pkgs = mkPkgs nixpkgs [self.overlays.default nix-minecraft.overlay flux.overlays.default];

modules/system/services/media.nix

@@ -34,6 +34,12 @@ in
       yt-dlp
     ];
 
+    # need to permit these outdated packages until servarr finally upgrades at some point...
+    permittedInsecurePackages = [
+      "dotnet-sdk-6.0.428"
+      "aspnetcore-runtime-6.0.36"
+    ];
+
     users = {
       users.${user} = {
         isSystemUser = true;