fix PDS auto-update build

hosts/asusmini/auto-update.nix

@@ -7,6 +7,7 @@
       git
       nix
       openssh
+      dnscontrol
     ];
 
     serviceConfig = {
@@ -48,6 +49,9 @@
         exit 1
       fi
 
+      echo "Applying DNS configuration..."
+      dnscontrol push --config dns/dnscontrol.js --creds dns/creds.json
+
       echo "Auto-update completed successfully"
     '';
   };

hosts/asusmini/default.nix

@@ -67,7 +67,11 @@
   };
 
   # Allow unfree packages
-  nixpkgs.config.allowUnfree = true;
+  nixpkgs.config = {
+    allowUnfree = true;
+    # PDS v0.4.219 uses a pnpm 9 lockfile; pnpm is build-only here.
+    permittedInsecurePackages = [ "pnpm-9.15.9" ];
+  };
 
   # List packages installed in system profile. To search, run:
   # $ nix search wget