depot/nix/pkgs/vault-acme/default.nix

# SPDX-FileCopyrightText: 2020 Luke Granger-Brown <depot@lukegb.com>
#
# SPDX-License-Identifier: Apache-2.0

{ lib
, buildGoModule
, fetchFromGitHub
}:

buildGoModule rec {
  pname = "vault-acme";
  version = "0.0.8+lukegb-1";

  src = fetchFromGitHub {
    owner = "lukegb";
    repo = pname;
    rev = "c93a5466c09e2198483928e4931e31f2a3cee753";
    sha256 = "sha256:1yik8vx4d9c8qcxrrab0j1vxzcs1qnfgpi62n6rqv2sy19k0kybz";
  };

  patches = [ ./just-add-a-sleep.patch ];

  vendorSha256 = "sha256:1c58470n843yh9jd010xxaqzg9lrpaw9w969ygqb6h3x8k1my7jp";

  subPackages = [
    "cmd/acme"
    "cmd/sidecar"
  ];

  postInstall = ''
    mkdir -p $out/libexec/vault
    mv $out/bin/acme $out/libexec/vault/acme
    mv $out/bin/sidecar $out/bin/vault-acme-sidecar
  '';

  meta = with lib; {
    description = "Vault secret engine to retrieve TLS certificates from an ACME provider";
    homepage = "https://github.com/remilapeyre/vault-acme";
    license = licenses.mpl20;
    maintainers = with maintainers; [ lukegb ];
    platforms = platforms.linux ++ platforms.darwin;
  };
}