diff --git a/pkgs/by-name/au/authentik/outposts.nix b/pkgs/by-name/au/authentik/outposts.nix
index f1d5181609ad..b251368a2869 100644
--- a/pkgs/by-name/au/authentik/outposts.nix
+++ b/pkgs/by-name/au/authentik/outposts.nix
@@ -1,5 +1,6 @@
 { callPackage }:
 {
   ldap = callPackage ./ldap.nix { };
+  proxy = callPackage ./proxy.nix { };
   radius = callPackage ./radius.nix { };
 }
diff --git a/pkgs/by-name/au/authentik/proxy.nix b/pkgs/by-name/au/authentik/proxy.nix
new file mode 100644
index 000000000000..a11adf539aa0
--- /dev/null
+++ b/pkgs/by-name/au/authentik/proxy.nix
@@ -0,0 +1,21 @@
+{
+  buildGoModule,
+  authentik,
+}:
+
+buildGoModule {
+  pname = "authentik-proxy-outpost";
+  inherit (authentik) version src;
+
+  vendorHash = "sha256-FyRTPs2xfostV2x03IjrxEYBSrsZwnuPn+oHyQq1Kq0=";
+
+  env.CGO_ENABLED = 0;
+
+  subPackages = [ "cmd/proxy" ];
+
+  meta = authentik.meta // {
+    description = "Authentik proxy outpost which is used for HTTP reverse proxy authentication";
+    homepage = "https://goauthentik.io/docs/providers/proxy/";
+    mainProgram = "proxy";
+  };
+}