{
  allowUnfree = true;
  permittedInsecurePackages = [
    "libressl-3.4.3"
  ];
}