diff --git a/overlays/default.nix b/overlays/default.nix
index 2c1323bb..116b888d 100644
--- a/overlays/default.nix
+++ b/overlays/default.nix
@@ -7,11 +7,13 @@ in rec {
   default = nixlib.composeManyExtensions [
     barcodebuddy
     krb5
+    nfs
     nginx
     samba
   ];
   barcodebuddy = import ./barcodebuddy.nix;
   krb5 = import ./krb5.nix;
+  nfs = import ./nfs.nix;
   nginx = import ./nginx.nix;
   samba = import ./samba.nix;
   deploy-rs = inputs.deploy-rs.overlays.default or inputs.deploy-rs.overlay;
diff --git a/overlays/nfs.nix b/overlays/nfs.nix
new file mode 100644
index 00000000..8cac3cdd
--- /dev/null
+++ b/overlays/nfs.nix
@@ -0,0 +1,14 @@
+final: prev: {
+  # https://github.com/NixOS/nixpkgs/pull/286793
+  nfs-utils-ldap = prev.nfs-utils.overrideAttrs (old: {
+    buildInputs = old.buildInputs ++ [
+      final.openldap
+      (final.cyrus_sasl.override {
+        openssl = final.openssl_legacy;
+      })
+    ];
+    configureFlags = old.configureFlags ++ [
+      "--enable-ldap"
+    ];
+  });
+}