diff --git a/nix/pkgs/appview-static-files.nix b/nix/pkgs/appview-static-files.nix
index 3b55bc1b..a4f2a71f 100644
--- a/nix/pkgs/appview-static-files.nix
+++ b/nix/pkgs/appview-static-files.nix
@@ -9,7 +9,13 @@
   tailwindcss,
   src,
 }:
-runCommandLocal "appview-static-files" {} ''
+runCommandLocal "appview-static-files" {
+  # TOOD(winter): figure out why this is even required after
+  # changing the libraries that the tailwindcss binary loads
+  sandboxProfile = ''
+    (allow file-read* (subpath "/System/Library/OpenSSL"))
+  '';
+} ''
   mkdir -p $out/{fonts,icons} && cd $out
   cp -f ${htmx-src} htmx.min.js
   cp -f ${htmx-ws-src} htmx-ext-ws.min.js