From ee21434d86b97e0e07244fde4579e99d06f0c62c Mon Sep 17 00:00:00 2001
From: K900 <me@0upti.me>
Date: Wed, 25 Feb 2026 10:31:26 +0300
Subject: [PATCH] kdePackages.plasma-nm: clean up patch, add strongswan

Co-authored-by: Achmad Fathoni <fathoni.id@gmail.com>
---
 .../plasma-nm/0002-openvpn-binary-path.patch  | 13 ----------
 pkgs/kde/plasma/plasma-nm/default.nix         |  7 +++--
 .../kde/plasma/plasma-nm/hardcode-paths.patch | 26 +++++++++++++++++++
 3 files changed, 31 insertions(+), 15 deletions(-)
 delete mode 100644 pkgs/kde/plasma/plasma-nm/0002-openvpn-binary-path.patch
 create mode 100644 pkgs/kde/plasma/plasma-nm/hardcode-paths.patch

diff --git a/pkgs/kde/plasma/plasma-nm/0002-openvpn-binary-path.patch b/pkgs/kde/plasma/plasma-nm/0002-openvpn-binary-path.patch
deleted file mode 100644
index c32e73bc2c6c..000000000000
--- a/pkgs/kde/plasma/plasma-nm/0002-openvpn-binary-path.patch
+++ /dev/null
@@ -1,13 +0,0 @@
-diff --git a/vpn/openvpn/openvpnadvancedwidget.cpp b/vpn/openvpn/openvpnadvancedwidget.cpp
-index 2f11ba1d..310f11b4 100644
---- a/vpn/openvpn/openvpnadvancedwidget.cpp
-+++ b/vpn/openvpn/openvpnadvancedwidget.cpp
-@@ -75,7 +75,7 @@ OpenVpnAdvancedWidget::OpenVpnAdvancedWidget(const NetworkManager::VpnSetting::P
-     connect(m_ui->cmbProxyType, static_cast<void (QComboBox::*)(int)>(&QComboBox::currentIndexChanged), this, &OpenVpnAdvancedWidget::proxyTypeChanged);
- 
-     // start openVPN process and get its cipher list
--    const QString openVpnBinary = QStandardPaths::findExecutable("openvpn", QStringList{"/sbin", "/usr/sbin"});
-+    const QString openVpnBinary = "@openvpn@/bin/openvpn";
-     const QStringList ciphersArgs(QLatin1String("--show-ciphers"));
-     const QStringList versionArgs(QLatin1String("--version"));
- 
diff --git a/pkgs/kde/plasma/plasma-nm/default.nix b/pkgs/kde/plasma/plasma-nm/default.nix
index e143752476b3..edba027fc4b0 100644
--- a/pkgs/kde/plasma/plasma-nm/default.nix
+++ b/pkgs/kde/plasma/plasma-nm/default.nix
@@ -1,4 +1,5 @@
 {
+  lib,
   mkKdeDerivation,
   replaceVars,
   pkg-config,
@@ -7,13 +8,15 @@
   mobile-broadband-provider-info,
   openconnect,
   openvpn,
+  strongswan,
 }:
 mkKdeDerivation {
   pname = "plasma-nm";
 
   patches = [
-    (replaceVars ./0002-openvpn-binary-path.patch {
-      inherit openvpn;
+    (replaceVars ./hardcode-paths.patch {
+      openvpn = lib.getExe openvpn;
+      ipsec = lib.getExe' strongswan "ipsec";
     })
   ];
 
diff --git a/pkgs/kde/plasma/plasma-nm/hardcode-paths.patch b/pkgs/kde/plasma/plasma-nm/hardcode-paths.patch
new file mode 100644
index 000000000000..8b70b7848a01
--- /dev/null
+++ b/pkgs/kde/plasma/plasma-nm/hardcode-paths.patch
@@ -0,0 +1,26 @@
+diff --git a/vpn/l2tp/l2tpipsecwidget.cpp b/vpn/l2tp/l2tpipsecwidget.cpp
+index bcc92dfd6..6708128fa 100644
+--- a/vpn/l2tp/l2tpipsecwidget.cpp
++++ b/vpn/l2tp/l2tpipsecwidget.cpp
+@@ -387,7 +387,7 @@ bool L2tpIpsecWidget::hasIpsecDaemon()
+         return true;
+     }
+ 
+-    QString ipsecBinary = QStandardPaths::findExecutable(QStringLiteral("ipsec"), QStringList() << QStringLiteral("/sbin") << QStringLiteral("/usr/sbin"));
++    QString ipsecBinary = "@ipsec@";
+ 
+     // On some Linux distributions, ipsec executable has been renamed strongswan
+     if (ipsecBinary.isEmpty()) {
+diff --git a/vpn/openvpn/openvpnadvancedwidget.cpp b/vpn/openvpn/openvpnadvancedwidget.cpp
+index a1c2c553d..111f6138c 100644
+--- a/vpn/openvpn/openvpnadvancedwidget.cpp
++++ b/vpn/openvpn/openvpnadvancedwidget.cpp
+@@ -102,7 +102,7 @@ OpenVpnAdvancedWidget::OpenVpnAdvancedWidget(const NetworkManager::VpnSetting::P
+     });
+ 
+     // start openVPN process and get its cipher list
+-    const QString openVpnBinary = QStandardPaths::findExecutable("openvpn", QStringList{"/sbin", "/usr/sbin"});
++    const QString openVpnBinary = "@openvpn@";
+     const QStringList ciphersArgs(QLatin1String("--show-ciphers"));
+     const QStringList versionArgs(QLatin1String("--version"));
+