diff --git a/flake.nix b/flake.nix
index 59f9f73..0a6b284 100644
--- a/flake.nix
+++ b/flake.nix
@@ -29,7 +29,7 @@
       lib' = import ./lib {inherit inputs lib';};
     in
       import ./hosts {inherit inputs lib';};
-    packages = eachSystem (pkgs: import ./pkgs pkgs);
+    packages = eachSystem (pkgs: import ./pkgs {inherit inputs pkgs;});
     deploy.nodes = import ./nodes {inherit self inputs;};
   };
   inputs = {
diff --git a/pkgs/default.nix b/pkgs/default.nix
index 876d93b..0cf4299 100644
--- a/pkgs/default.nix
+++ b/pkgs/default.nix
@@ -1,4 +1,15 @@
-pkgs: {
+{
+  inputs,
+  pkgs,
+  ...
+}: {
   mcuxpresso = import ./mcuxpresso pkgs;
-  bolt-launcher = pkgs.callPackage ./bolt-launcher.nix {};
+  # this is unfortunately needed since bolt-launcher makes use of openssl-1.1.1w, and since it is not part of hosts, we have to add it this way
+  bolt-launcher =
+    (import inputs.nixpkgs {
+      inherit (pkgs) system;
+      config.permittedInsecurePackages = ["openssl-1.1.1w"];
+    })
+    .callPackage
+    ./bolt-launcher.nix {};
 }