diff --git a/pkgs/development/interpreters/lua-5/sec.nix b/pkgs/development/interpreters/lua-5/sec.nix
new file mode 100644
index 00000000000..97e9f51ac1b
--- /dev/null
+++ b/pkgs/development/interpreters/lua-5/sec.nix
@@ -0,0 +1,27 @@
+{ stdenv, fetchurl, lua5, lua5_sockets, openssl }:
+
+stdenv.mkDerivation rec {
+  version = "0.5";
+  name = "lua-sec-${version}";
+  src = fetchurl {
+    url = "https://github.com/brunoos/luasec/archive/luasec-${version}.tar.gz";
+    sha256 = "08rm12cr1gjdnbv2jpk7xykby9l292qmz2v0dfdlgb4jfj7mk034";
+  };
+
+  buildInputs = [ lua5 openssl ];
+
+  preBuild = ''
+    makeFlagsArray=(
+      linux
+      LUAPATH="$out/lib/lua/${lua5.luaversion}"
+      LUACPATH="$out/lib/lua/${lua5.luaversion}"
+      INC_PATH="-I${lua5}/include"
+      LIB_PATH="-L$out/lib");
+  '';
+
+  meta = {
+    homepage = "https://github.com/brunoos/luasec";
+    platforms = stdenv.lib.platforms.linux;
+    maintainers = [ stdenv.lib.maintainers.flosse ];
+  };
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index f1a658512f4..8d472113a98 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -3478,6 +3478,7 @@ let
   lua5_sockets = callPackage ../development/interpreters/lua-5/sockets.nix {};
   lua5_expat = callPackage ../development/interpreters/lua-5/expat.nix {};
   lua5_filesystem = callPackage ../development/interpreters/lua-5/filesystem.nix {};
+  lua5_sec = callPackage ../development/interpreters/lua-5/sec.nix {};
 
   luarocks = callPackage ../development/tools/misc/luarocks {
      lua = lua5;