diff --git a/patches/default.nix b/patches/default.nix
index 304d783..e0e15f4 100644
--- a/patches/default.nix
+++ b/patches/default.nix
@@ -33,6 +33,26 @@ in
       _type = "static";
       path = ./04-crabfit-karla.patch;
     }
+
+    # nixos/kanidm: add basic provisioning
+    {
+      id = 251598;
+      excludes = [ "pkgs/by-name/ka/kanidm/package.nix" ];
+      hash = "sha256-z4b1ljwapfj4KpXEEAMmhYKogstKtURyq+hoJcfEXiw=";
+    }
+
+    # kanidm-provision: 1.1.1 -> 1.1.2
+    {
+      id = 336836;
+      hash = "sha256-4ihpxYdLp559RIcKRC6GPt5flLCohFiPGp0k9h1s1hs=";
+    }
+
+    # nixos/kanidm: fix systemd service type
+    {
+      id = 337527;
+      excludes = [ ".git-blame-ignore-revs" ];
+      hash = "sha256-ca7CsPuWJqucC77ejsvoDAt+wxWLUP30IdXtZQVQrko=";
+    }
   ];
 
   "nixos-unstable" = [