# SPDX-FileCopyrightText: 2020 Luke Granger-Brown <depot@lukegb.com>
#
# SPDX-License-Identifier: Apache-2.0

{ lib
, buildGoModule
, fetchFromGitHub
}:

buildGoModule rec {
  pname = "vault-acme";
  version = "0.0.8";

  src = fetchFromGitHub {
    owner = "remilapeyre";
    repo = pname;
    rev = "v${version}";
    sha256 = "sha256:0vbi5i0m5rifh4ayd4y949kh94zgirviv6xiy2a11a4frrn24fyf";
  };

  vendorSha256 = "sha256:07bqapnrf1fdyaxkna14s5calgj71sk2qysigd32hxl673zd06ic";

  subPackages = [
    "cmd/acme"
    "cmd/sidecar"
  ];

  postInstall = ''
    mkdir -p $out/libexec/vault
    mv $out/bin/acme $out/libexec/vault/acme
    mv $out/bin/sidecar $out/bin/vault-acme-sidecar
  '';

  meta = with lib; {
    description = "Vault secret engine to retrieve TLS certificates from an ACME provider";
    homepage = "https://github.com/remilapeyre/vault-acme";
    license = licenses.mpl20;
    maintainers = with maintainers; [ lukegb ];
    platforms = platforms.linux ++ platforms.darwin;
  };
}