diff --git a/pkgs/default.nix b/pkgs/default.nix
index a128332..b539709 100644
--- a/pkgs/default.nix
+++ b/pkgs/default.nix
@@ -8,6 +8,7 @@
   advcpmv = pkgs.callPackage ./advcpmv { };
   circom = pkgs.callPackage ./circom { };
   circom-lsp = pkgs.callPackage ./circom-lsp { };
+  envsub = pkgs.callPackage ./envsub { };
   fennel-language-server = pkgs.callPackage ./fennel-language-server { };
   parinfer-rust = pkgs.callPackage ./parinfer-rust { };
   pest-ide-tools = pkgs.callPackage ./pest-ide-tools { };
diff --git a/pkgs/envsub/default.nix b/pkgs/envsub/default.nix
new file mode 100644
index 0000000..387b060
--- /dev/null
+++ b/pkgs/envsub/default.nix
@@ -0,0 +1,33 @@
+{ lib, fetchFromGitHub, rustPlatform, openssl, pkg-config, libxkbcommon }:
+
+rustPlatform.buildRustPackage rec {
+  pname = "envsub";
+  version = "0.1.3";
+
+  src = fetchFromGitHub {
+    owner = "stephenc";
+    repo = pname;
+    rev = "refs/tags/${version}";
+    sha256 = "sha256-DYfGH/TnDTaG5799upg4HDNFiMYpkE64s2DNXJ+1NnE=";
+  };
+
+  cargoSha256 = "sha256-1b0nhfbk7g2XiplOeVB25VQV2E3Z7B9tqANYvhOO6AQ=";
+
+  nativeBuildInputs = [
+    pkg-config
+  ];
+
+  buildInputs = [ ];
+
+  PKG_CONFIG_PATH = "${openssl.dev}/lib/pkgconfig";
+  LD_LIBRARY_PATH = lib.makeLibraryPath buildInputs;
+
+  doCheck = false;
+
+  meta = with lib; {
+    description = "zkSnark circuit compiler";
+    homepage = "https://github.com/iden3/circom";
+    license = licenses.isc;
+    maintainers = with maintainers; [ reo101 ];
+  };
+}