From 066eea2999c2270c2afb66f3bdd46d43562e911d Mon Sep 17 00:00:00 2001
From: John Ogle <john@ogle.fyi>
Date: Sun, 7 Dec 2025 21:11:25 -0800
Subject: [PATCH] [kodi] Fix lib.warn syntax for insecure package warning

Fix syntax error by wrapping permittedInsecurePackages list with
lib.warn function call. The warning now properly displays during
evaluation about qtwebengine-5.15.19 being required for
jellyfin-media-player until it migrates to qt6.
---
 roles/kodi/default.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/roles/kodi/default.nix b/roles/kodi/default.nix
index 4db1141..5b8ef9a 100644
--- a/roles/kodi/default.nix
+++ b/roles/kodi/default.nix
@@ -56,6 +56,12 @@ in
         firefox
       ] ++ optional cfg.appLauncherServer.enable pkgs.custom.app-launcher-server;
 
+      nixpkgs.config.permittedInsecurePackages = lib.warn
+        "Allowing insecure package qtwebengine-5.15.19 as a jellyfin-media-player dependency. Remove this once jellyfin is updated to use qt6"
+        [
+          "qtwebengine-5.15.19"
+        ];
+
       programs.kdeconnect.enable = true;
 
       systemd.user.services = mkIf cfg.appLauncherServer.enable {