diff --git a/third_party/default.nix b/third_party/default.nix
index 51d2ba5833..764ab72676 100644
--- a/third_party/default.nix
+++ b/third_party/default.nix
@@ -9,6 +9,8 @@ let
     checkMeta = false;
     permittedInsecurePackages = [
       "nodejs-16.20.2"  # for openvscode-server
+      "envoy-1.27.3"
+      "envoy-1.27.3-deps.tar.gz"
 
       # for authentik?
       "python3.10-requests-2.29.0"