diff --git a/nix/pkgs/authentik/default.nix b/nix/pkgs/authentik/default.nix
index 677f3340e9..1857cecc7a 100644
--- a/nix/pkgs/authentik/default.nix
+++ b/nix/pkgs/authentik/default.nix
@@ -1,12 +1,12 @@
 { pkgs, ... }@args:
 
 let
-  version = "2022.12.2-lukegb";
+  version = "2023.2.3-lukegb";
   src = pkgs.fetchFromGitHub {
     owner = "lukegb";
     repo = "authentik";
-    rev = "895a2c2ccf47f6466dc0c5e6dcee57664a2a352e";
-    hash = "sha256:1xxz6a6h4axfchapgx35wvippm4y0jwmalsn62lbdhnqs0mzinaa";
+    rev = "fcd42c76723cdef7d4c316588ba15b41e628d69a";
+    hash = "sha256:0r3mzmf1vpmhd2sx1y37vcbix4im26fn5r5msw2w50iya28jkg6s";
   };
   subargs = args // { inherit src version; };
 in rec {
diff --git a/nix/pkgs/authentik/docs/default.nix b/nix/pkgs/authentik/docs/default.nix
index fe6865cee4..a3900a2f99 100644
--- a/nix/pkgs/authentik/docs/default.nix
+++ b/nix/pkgs/authentik/docs/default.nix
@@ -6,7 +6,7 @@ pkgs.buildNpmPackage rec {
 
   sourceRoot = "source/website";
 
-  npmDepsHash = "sha256:0adw7kvxxdbnicba8h160x8dl40r692az06ij6d9z2pbqk72kfl7";
+  npmDepsHash = "sha256:00ih8nfiiwggbhbx3kcr6iids16zql1ad2zx6kd5i84j0ncsxwrk";
   npmBuildFlags = "-- --config docusaurus.docs-only.js";
 
   dontNpmInstall = true;
diff --git a/nix/pkgs/authentik/goserver/default.nix b/nix/pkgs/authentik/goserver/default.nix
index a2548aa75f..4f1b84d0dc 100644
--- a/nix/pkgs/authentik/goserver/default.nix
+++ b/nix/pkgs/authentik/goserver/default.nix
@@ -4,6 +4,6 @@ pkgs.buildGoModule {
   pname = "authentik-server";
   inherit src version;
 
-  vendorSha256 = "082iina5xs7xd9f6pi2gqfrdjdh8rj91h94xawmn4v3qmg2pgc71";
+  vendorSha256 = "1wvbbr2z85anbsk8dlv6004mmvn6mlp958m0h8lxbgpk9avvjxgw";
   subPackages = "cmd/server";
 }
diff --git a/nix/pkgs/authentik/pythonapp/default.nix b/nix/pkgs/authentik/pythonapp/default.nix
index 498d2165c6..a72c9b329c 100644
--- a/nix/pkgs/authentik/pythonapp/default.nix
+++ b/nix/pkgs/authentik/pythonapp/default.nix
@@ -58,6 +58,12 @@ let
       });
       watchfiles = self.callPackage ../../../../third_party/nixpkgs/pkgs/development/python-modules/watchfiles/default.nix { CoreServices = null; };
       selenium = null;
+
+      cryptography = super.cryptography.overridePythonAttrs (old: {
+        cargoDeps = old.cargoDeps.overrideAttrs ({ outputHash, ... }: {
+          outputHash = "01wylp2zv4bxg77jmklz2lfac8hir23vk5aa44r3373kl8i8l7yk";
+        });
+      });
     });
 
     buildInputs = [ pkgs.bash ];
diff --git a/nix/pkgs/authentik/webui/default.nix b/nix/pkgs/authentik/webui/default.nix
index 4c336aa465..b8f40d2ab5 100644
--- a/nix/pkgs/authentik/webui/default.nix
+++ b/nix/pkgs/authentik/webui/default.nix
@@ -6,7 +6,7 @@ pkgs.buildNpmPackage {
 
   sourceRoot = "source/web";
 
-  npmDepsHash = "sha256:0vnw31fd5in01jmhm4lx58z4l2lrficycipcxwn9xw2widi1g9xf";
+  npmDepsHash = "sha256:12isrjcrldz1zyccdy46cr8x6bxjlf5603g8m1yg8dar3ajp4b6h";
 
   dontNpmInstall = true;
   installPhase = ''