From e293e87124d7c99fa5376bf35a1c694ecee0f67b Mon Sep 17 00:00:00 2001
From: Chris Kruining <c.kruining@4dotnet.nl>
Date: Wed, 23 Jul 2025 10:05:59 +0200
Subject: [PATCH] move insecure packages from overlays to the service that
 needs it

---
 flake.nix                         | 4 ----
 modules/system/services/media.nix | 6 ++++++
 2 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/flake.nix b/flake.nix
index c200d0d..7275c42 100644
--- a/flake.nix
+++ b/flake.nix
@@ -59,10 +59,6 @@
       import pkgs {
         inherit system;
         config.allowUnfree = true;
-        config.permittedInsecurePackages = [
-          "dotnet-sdk-6.0.428"
-          "aspnetcore-runtime-6.0.36"
-        ];
         overlays = extraOverlays ++ (lib.attrValues self.overlays);
       };
     pkgs = mkPkgs nixpkgs [self.overlays.default nix-minecraft.overlay flux.overlays.default];
diff --git a/modules/system/services/media.nix b/modules/system/services/media.nix
index 434f533..9ec8e5e 100644
--- a/modules/system/services/media.nix
+++ b/modules/system/services/media.nix
@@ -34,6 +34,12 @@ in
       yt-dlp
     ];
 
+    # need to permit these outdated packages until servarr finally upgrades at some point...
+    permittedInsecurePackages = [
+      "dotnet-sdk-6.0.428"
+      "aspnetcore-runtime-6.0.36"
+    ];
+
     users = {
       users.${user} = {
         isSystemUser = true;