1error:2 … while evaluating a branch condition3 at «string»:25:5:4 24| v:5 25| if !builtins.isAttrs v || isDrv v then6 | ^7 26| v89 … in the left operand of the OR (||) operator10 at «string»:25:28:11 24| v:12 25| if !builtins.isAttrs v || isDrv v then13 | ^14 26| v1516 … while evaluating the option `system.build.toplevel':1718 … while evaluating definitions from `/nix/store/8ak04fk7vigs495sxhxshyf7b9mlcmgb-source/nixos/modules/system/activation/top-level.nix':1920 … while evaluating the option `warnings':2122 … while evaluating definitions from `/nix/store/8ak04fk7vigs495sxhxshyf7b9mlcmgb-source/nixos/modules/system/boot/systemd.nix':2324 … while evaluating the option `systemd.services.pinchflat.serviceConfig':2526 … while evaluating definitions from `/nix/store/8ak04fk7vigs495sxhxshyf7b9mlcmgb-source/nixos/modules/services/misc/pinchflat.nix':2728 (stack trace truncated; use '--show-trace' to show the full, detailed trace)2930 error: Refusing to evaluate package 'pinchflat-2025.9.26' in /nix/store/8ak04fk7vigs495sxhxshyf7b9mlcmgb-source/pkgs/by-name/pi/pinchflat/package.nix:85 because it is marked as insecure3132 Known issues:33 - multiple CVEs in dependencies. consider `pinchflat-ngx` fork as an alternative3435 You can install it anyway by allowing this package, using the36 following methods:3738 a) To temporarily allow all insecure packages, you can use an environment39 variable for a single invocation of the nix tools:4041 $ export NIXPKGS_ALLOW_INSECURE=14243 Note: When using `nix shell`, `nix build`, `nix develop`, etc with a flake,44 then pass `--impure` in order to allow use of environment variables.4546 b) for `nixos-rebuild` you can add ‘pinchflat-2025.9.26’ to47 `nixpkgs.config.permittedInsecurePackages` in the configuration.nix,48 like so:4950 {51 nixpkgs.config.permittedInsecurePackages = [52 "pinchflat-2025.9.26"53 ];54 }5556 c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add57 ‘pinchflat-2025.9.26’ to `permittedInsecurePackages` in58 ~/.config/nixpkgs/config.nix, like so:5960 {61 permittedInsecurePackages = [62 "pinchflat-2025.9.26"63 ];64 }