diff --git a/pkgs/by-name/au/authentik/outposts.nix b/pkgs/by-name/au/authentik/outposts.nix
index c10ace799611b..46ee9a55c6155 100644
--- a/pkgs/by-name/au/authentik/outposts.nix
+++ b/pkgs/by-name/au/authentik/outposts.nix
@@ -1,4 +1,5 @@
 { callPackage }: {
   ldap = callPackage ./ldap.nix { };
+  proxy = callPackage ./proxy.nix { };
   radius = callPackage ./radius.nix { };
 }
diff --git a/pkgs/by-name/au/authentik/proxy.nix b/pkgs/by-name/au/authentik/proxy.nix
new file mode 100644
index 0000000000000..267f7747cd8c7
--- /dev/null
+++ b/pkgs/by-name/au/authentik/proxy.nix
@@ -0,0 +1,18 @@
+{ lib, buildGoModule, authentik }:
+
+buildGoModule {
+  pname = "authentik-proxy-outpost";
+  inherit (authentik) version src;
+
+  vendorHash = "sha256-hxtyXyCfVemsjYQeo//gd68x4QO/4Vcww8i2ocsUVW8=";
+
+  CGO_ENABLED = 0;
+
+  subPackages = [ "cmd/proxy" ];
+
+  meta = authentik.meta // {
+    description = "Authentik proxy outpost which is used for HTTP reverse proxy authentication.";
+    homepage = "https://goauthentik.io/docs/providers/proxy/";
+    mainProgram = "proxy";
+  };
+}