diff --git a/common.nix b/common.nix
index a82e7a0..e7f2931 100644
--- a/common.nix
+++ b/common.nix
@@ -125,6 +125,12 @@
   # Allow unfree packages
   nixpkgs.config.allowUnfree = true;
 
+  # allow specific insecure packages
+  nixpkgs.config.permittedInsecurePackages = [
+    # needed for archivebox. Maintainer says that none of the cve are in code paths used by archivebox
+    "python3.11-django-3.1.14"
+  ];
+
   # List packages installed in system profile. To search, run:
   # $ nix search wget
   environment.systemPackages = with pkgs; [
diff --git a/home.nix b/home.nix
index bec1f17..62e4136 100644
--- a/home.nix
+++ b/home.nix
@@ -68,6 +68,8 @@ in {
       nh
       nix-output-monitor
       alejandra
+      # archiving
+      archivebox
     ];
 
     file = {