diff --git a/package/tubesync/nixos.nix b/package/tubesync/nixos.nix
index 53628cf2..8681edb9 100644
--- a/package/tubesync/nixos.nix
+++ b/package/tubesync/nixos.nix
@@ -179,5 +179,10 @@ in {
 
     ids.uids.tubesync = 101;
     ids.gids.tubesync = 101;
+
+    # package is local-only, will allow this for now
+    nixpkgs.config.permittedInsecurePackages = [
+      "python3.11-django-3.2.25"
+    ];
   };
 }