diff --git a/machines/core-security/default.nix b/machines/core-security/default.nix
index 9beb169..529ef84 100644
--- a/machines/core-security/default.nix
+++ b/machines/core-security/default.nix
@@ -166,6 +166,8 @@
 
   systemd.services."step-ca".after = [ "keycloak.service" ];
 
+  nixpkgs.config.permittedInsecurePackages = [ "keycloak-23.0.6" ];
+
   security.pki.certificates = [
     ''
       -----BEGIN CERTIFICATE-----