permittedInsecurePackages does not work in nixos flake

I want to use a package in nur called netease music.But permittedInsecurePackages does not work.
Here is my minimal config:

{
  description = "A very basic flake";

  inputs = {
    nixpkgs.url = "github:nixos/nixpkgs?ref=nixos-unstable";
    nur.url = "github:nix-community/NUR";
  };

  outputs = { self, nixpkgs ,nur,...}: {
    nixosConfigurations.art = nixpkgs.lib.nixosSystem {
      system = "x86_64-linux";
      modules = [
     	 ./configuration.nix
      	 nur.nixosModules.nur
      ];
    };
  };
}
{ config, lib, pkgs, ... }:

{
  imports =
    [ # Include the results of the hardware scan.
      ./hardware-configuration.nix
    ];

  # Use the systemd-boot EFI boot loader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  networking.hostName = "virt"; # Define your hostname.
  # Pick only one of the below networking options.
  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
  networking.networkmanager.enable = true;  # Easiest to use and most distros use this by default.

  # Set your time zone.
  time.timeZone = "Asia/Shanghai";

  # Select internationalisation properties.
  i18n.defaultLocale = "en_US.UTF-8";

  # Define a user account. Don't forget to set a password with ‘passwd’.
  users.users.finger = {
    isNormalUser = true;
    extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
    packages = with pkgs; [
    ];
  };

  # List packages installed in system profile. To search, run:
  # $ nix search wget
  environment.systemPackages = with pkgs; [
    config.nur.repos.xddxdd.netease-cloud-music
    vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
    wget
    just
    git
  ];

  # Enable the OpenSSH daemon.
  services.openssh.enable = true;

  system.stateVersion = "24.11"; # Did you read the comment?
  nixpkgs.config.allowUnfree = true;
  nixpkgs.config.permittedInsecurePackages = [
	"openssl"
  ];
  nix = {
    settings = {
      experimental-features = [
        "nix-command"
        "flakes"
      ];
      substituters = [
        "https://mirror.sjtu.edu.cn/nix-channels/store"
        "https://mirrors.tuna.tsinghua.edu.cn/nix-channels/store"
        "https://mirrors.ustc.edu.cn/nix-channels/store"
      ];
    };
    channel.enable = false; # remove nix-channel related tools & configs, we use flakes instead.
    # registry.nixpkgs.flake = nixpkgs;
  };


}

Try adding a follows to nur to use your nixpkgs

nur doesn’t have a nixpkgs input: NUR/flake.nix at c5b737c8ecc08954333f60f42907e743aa24c6ae · nix-community/NUR · GitHub

Besides, follows doesn’t deduplicate the nixpkgs evaluated by NixOS, does it? The repo this is from correctly uses the pkgs input, too, so I don’t think anything’s wrong here.

I’m pretty sure you need to specify the version and not just the pname though:

nixpkgs.config.permittedInsecurePackages = [
  "openssl-1.1.1w"
];

You are right,though I have no idea why error message didn’t contain a version string.