From 43d40cc6d06a3943e75bda6419a43272498dd0f6 Mon Sep 17 00:00:00 2001
From: Don Harper <duck@duckland.org>
Date: Tue, 5 May 2026 16:23:16 -0500
Subject: [PATCH] Use a dedicated citrix package set with
 permittedInsecurePackages

---
 home/work/citrix.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/home/work/citrix.nix b/home/work/citrix.nix
index d68e0a3..0d77bfe 100644
--- a/home/work/citrix.nix
+++ b/home/work/citrix.nix
@@ -1,11 +1,11 @@
 { lib, config, pkgs, inputs, outputs, home-manager, ... }:
 with lib; let
   cfg = config.roles.citrix;
+  citrixPkgs = import inputs.nixpkgs { system = pkgs.system; config = pkgs.config // { permittedInsecurePackages = ["libsoup-2.74.3"]; }; };
 in {
   options.roles.citrix = {enable = lib.mkEnableOption "citrix tools";};
   config = mkIf cfg.enable {
-    home-manager.users.don.home.packages = with pkgs; [citrix_workspace];
-    nixpkgs.config.permittedInsecurePackages = ["libsoup-2.74.3"];
+    home-manager.users.don.home.packages = with citrixPkgs; [citrix_workspace];
     home-manager.users.don.nixpkgs.config.permittedInsecurePackages = ["libsoup-2.74.3"];
     home-manager.users.don.home.file."ICAClient" = {
       recursive = true;