Move permittedInsecurePackages to channels module

* Move permittedInsecurePackages option to channels module so all channels consider the modified insecure package rules
evanjs · Dec 6, 2020 · 6845506 · 6845506
1 parent 05a59a9
commit 6845506
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 5 deletions.
diff --git a/config/new-modules/channels.nix b/config/new-modules/channels.nix
@@ -1,9 +1,16 @@
 { config, pkgs, lib, ... }:
+let
+  permittedInsecurePackages = [
+    # what requires cryptography for python 2.7?
+    "python2.7-cryptography-2.9.2"
+  ];
+in
 with lib; {
 
   config.nixpkgs.config = {
     # Allow proprietary packages
     allowUnfree = true;
+    inherit permittedInsecurePackages;
 
     # Create an alias for the unstable channel
     packageOverrides = pkgs: rec {

diff --git a/config/new-modules/profiles/desktop.nix b/config/new-modules/profiles/desktop.nix
@@ -330,11 +330,6 @@ in {
       services.fstrim.enable = true;
 
       mine.prometheus.export.enable = true;
-
-      # what requires cryptography for python 2.7?
-      nixpkgs.config.permittedInsecurePackages = [
-        "python2.7-cryptography-2.9.2"
-      ];
     })
   ];
 }