infra/dev/shell.nix

{ inputs', pkgs, ... }:
{
  devShells = {
    default =
      with pkgs;
      mkShellNoCC {
        packages = [
          inputs'.agenix.packages.default
          jq
          python3.pkgs.deploykit
          python3.pkgs.invoke
          sops
          ssh-to-age
        ];
      };
    sotp =
      with pkgs;
      mkShellNoCC {
        packages = [
          (buildGoModule rec {
            pname = "sotp";
            version = "e7f7c804b1641169ce850d8352fb07294881609e";
            src = pkgs.fetchFromGitHub {
              owner = "getsops";
              repo = "sotp";
              rev = version;
              hash = "sha256-Cu8cZCmM19G5zeMIiiaCwVJee8wrBZP3Ltk1jWKb2vs=";
            };
            vendorHash = "sha256-vQruuohwi53By8UZLrPbRtUrmNbmPt+Sku9hI5J3Dlc=";
            ldflags = [
              "-s"
              "-w"
            ];
            doCheck = false;
          })
        ];
      };
  };
}