diff --git a/ops/nixos/totoro/default.nix b/ops/nixos/totoro/default.nix
index 3f6ff90d41..4619f7057c 100644
--- a/ops/nixos/totoro/default.nix
+++ b/ops/nixos/totoro/default.nix
@@ -589,5 +589,13 @@ in {
 
   boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
 
+  services.openvscode-server = {
+    enable = true;
+    user = "lukegb";
+    withoutConnectionToken = true;
+    host = "100.122.86.11";
+    port = 3002;
+  };
+
   system.stateVersion = "22.11";
 }
diff --git a/third_party/default.nix b/third_party/default.nix
index da2bb90e80..cb2025e4b3 100644
--- a/third_party/default.nix
+++ b/third_party/default.nix
@@ -8,7 +8,7 @@ let
     allowUnfree = true;
     checkMeta = false;
     permittedInsecurePackages = [
-      "p7zip-16.02"
+      "nodejs-16.20.2"  # for openvscode-server
     ];
     packageOverrides = pkgs: {
       factorio = pkgs.factorio.override depot.ops.secrets.factorio;