From 1a57eb737cbc827e60abd837a0aaa1ce5b957413 Mon Sep 17 00:00:00 2001
From: mayor <mayor@gastown.local>
Date: Sat, 14 Feb 2026 14:49:09 -0800
Subject: [PATCH] Allow insecure qtwebengine for stremio in CI

qtwebengine-5.15.19 is marked insecure but stremio requires it.
Add to permittedInsecurePackages for the pkgsQt import.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 flake.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index d1fd09f..7a04bcc 100644
--- a/flake.nix
+++ b/flake.nix
@@ -247,7 +247,10 @@
         };
         pkgsQt = import inputs.nixpkgs-qt {
           inherit system;
-          config.allowUnfree = true;
+          config = {
+            allowUnfree = true;
+            permittedInsecurePackages = [ "qtwebengine-5.15.19" ];
+          };
         };
         # Version strings for flake input packages
         beadsRev = builtins.substring 0 8 (inputs.beads.rev or "unknown");