diff --git a/.changelog/8602.txt b/.changelog/8602.txt
new file mode 100644
index 000000000..49f2c74ce
--- /dev/null
+++ b/.changelog/8602.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Allow for the client to use TLS over a Unix domain socket.
+```
diff --git a/api/api.go b/api/api.go
index 7b00be967..38a4e98fb 100644
--- a/api/api.go
+++ b/api/api.go
@@ -607,9 +607,11 @@ func NewClient(config *Config) (*Client, error) {
 			trans.DialContext = func(_ context.Context, _, _ string) (net.Conn, error) {
 				return net.Dial("unix", parts[1])
 			}
-			config.HttpClient = &http.Client{
-				Transport: trans,
+			httpClient, err := NewHttpClient(trans, config.TLSConfig)
+			if err != nil {
+				return nil, err
 			}
+			config.HttpClient = httpClient
 		default:
 			return nil, fmt.Errorf("Unknown protocol scheme: %s", parts[0])
 		}