{ pkgs
, sops-import-keys-hook
}:

with pkgs;
mkShellNoCC {
  sopsPGPKeyDirs = [
    "./keys"
  ];

  buildInputs = [
    (terraform.withPlugins (
      p: [
        p.cloudflare
        p.null
        p.external
        p.hydra
      ]
    ))
    jq
    sops
    (python3.withPackages (
      p: [
        p.deploykit
        p.invoke
      ]
    ))
    rsync

    sops-import-keys-hook
  ];
}