diff --git a/flake.nix b/flake.nix
index d82cf9e..ab4bc26 100644
--- a/flake.nix
+++ b/flake.nix
@@ -118,7 +118,9 @@
       channels-config = {
         # Allow unfree packages.
         allowUnfree = true;
-
+        permittedInsecurePackages = [
+          "mbedtls-2.28.10" # needed for haxe 4.3.6
+        ];
         # # Allow certain insecure packages
         # permittedInsecurePackages = [
         #   "firefox-100.0.0"