diff --git a/machines/renge/services/matrix/default.nix b/machines/renge/services/matrix/default.nix
index 75b389c..3a47caa 100644
--- a/machines/renge/services/matrix/default.nix
+++ b/machines/renge/services/matrix/default.nix
@@ -8,4 +8,9 @@
     ./mautrix-whatsapp.nix
     ./go-neb.nix
   ];
+
+  # required by mautrix-whatsapp and go-neb
+  nixpkgs.config.permittedInsecurePackages = [
+    "olm-3.2.16"
+  ];
 }