From 68f11ad9550bd13b6a05cb3a88fbf57ad231271a Mon Sep 17 00:00:00 2001
From: June <june@jsts.xyz>
Date: Mon, 30 Sep 2024 23:20:06 +0200
Subject: [PATCH] mjolnir: allow use of deprecated, somewhat insecure libolm

Do this to be able to update the moderation bot and because the security
issues apparently aren't real world exploitable:
https://matrix.org/blog/2024/08/libolm-deprecation/
---
 config/hosts/mjolnir/mjolnir.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/config/hosts/mjolnir/mjolnir.nix b/config/hosts/mjolnir/mjolnir.nix
index c9534f6..91b184f 100644
--- a/config/hosts/mjolnir/mjolnir.nix
+++ b/config/hosts/mjolnir/mjolnir.nix
@@ -5,6 +5,11 @@
 { ... }:
 
 {
+  # Allow deprecated, apparently somewhat insecure libolm to be able to update
+  # the moderation bot.
+  # The security issues aren't real world exploitable apparently:
+  # https://matrix.org/blog/2024/08/libolm-deprecation/
+  nixpkgs.config.permittedInsecurePackages = [ "olm-3.2.16" ];
   services.mjolnir = {
     enable = true;
     homeserverUrl = "https://matrix.hamburg.ccc.de";