diff --git a/manifest.dhall b/manifest.dhall
index 128497e40696531750fb21bad38f2013d56d4d7c..d728739805ffd47f203a816aba21ce408b46a107 100644
--- a/manifest.dhall
+++ b/manifest.dhall
@@ -401,6 +401,7 @@ in  [ callHackage "Cabal" "3.8.1.0"
     , callHackage "mono-traversable" "1.0.15.3"
     , callHackage "mwc-random" "0.15.0.2"
     , callHackage "network-byte-order" "0.1.6"
+    , callHackage "network-conduit-tls" "1.3.2"
     , callHackage "network-uri" "2.6.4.1"
     , callHackage "network" "3.1.2.7"
     , callHackage "newtype-generics" "0.6.2"
diff --git a/overlay.nix b/overlay.nix
index e742bb3a5f66d254c69c2a1b49ce4e244f42d7d7..e808f0b1ffeaf76b639f647d3eb0ebbe3b148292 100644
--- a/overlay.nix
+++ b/overlay.nix
@@ -533,6 +533,8 @@ final: prev: with pkgs.haskell.lib; {
 
   network-byte-order = prev.callPackage (./pkgs/network-byte-order.nix) { };
 
+  network-conduit-tls = prev.callPackage (./pkgs/network-conduit-tls.nix) { };
+
   network-uri = prev.callPackage (./pkgs/network-uri.nix) { };
 
   newtype-generics = prev.callPackage (./pkgs/newtype-generics.nix) { };
diff --git a/pkgs/network-conduit-tls.nix b/pkgs/network-conduit-tls.nix
new file mode 100644
index 0000000000000000000000000000000000000000..4db47eac0268cd6d2a709904244f20e8101b7c93
--- /dev/null
+++ b/pkgs/network-conduit-tls.nix
@@ -0,0 +1,57 @@
+{ mkDerivation
+, base
+, bytestring
+, conduit
+, conduit-extra
+, connection
+, data-default-class
+, HUnit
+, lib
+, mtl
+, network
+, streaming-commons
+, tls
+, transformers
+, unliftio-core
+}:
+mkDerivation {
+  pname = "network-conduit-tls";
+  version = "1.3.2";
+  sha256 = "ecfd60e162de3993a71906293dcf2ec8bd4c794471eb8dca13746c1d8fd3ad7f";
+  isLibrary = true;
+  isExecutable = false;
+  enableSeparateDataOutput = false;
+  libraryHaskellDepends = [
+    base
+    bytestring
+    conduit
+    conduit-extra
+    connection
+    data-default-class
+    network
+    streaming-commons
+    tls
+    transformers
+    unliftio-core
+  ];
+  testHaskellDepends = [
+    base
+    bytestring
+    conduit
+    conduit-extra
+    connection
+    HUnit
+    mtl
+  ];
+  enableLibraryProfiling = false;
+  enableExecutableProfiling = false;
+  doHaddock = false;
+  jailbreak = true;
+  doCheck = false;
+  doBenchmark = false;
+  hyperlinkSource = false;
+  homepage = "https://github.com/snoyberg/conduit";
+  description = "Create TLS-aware network code with conduits";
+  license = lib.licenses.mit;
+  broken = false;
+}