diff --git a/roles/kodi/default.nix b/roles/kodi/default.nix
index 4db1141..5b8ef9a 100644
--- a/roles/kodi/default.nix
+++ b/roles/kodi/default.nix
@@ -56,6 +56,12 @@ in
         firefox
       ] ++ optional cfg.appLauncherServer.enable pkgs.custom.app-launcher-server;
 
+      nixpkgs.config.permittedInsecurePackages = lib.warn
+        "Allowing insecure package qtwebengine-5.15.19 as a jellyfin-media-player dependency. Remove this once jellyfin is updated to use qt6"
+        [
+          "qtwebengine-5.15.19"
+        ];
+
       programs.kdeconnect.enable = true;
 
       systemd.user.services = mkIf cfg.appLauncherServer.enable {