{ lib
, tlsclient
, stdenv
, pkg-config
, pam
}:

stdenv.mkDerivation {
  inherit (tlsclient) src version enableParallelBuilding;

  pname = "pam_dp9ik";

  strictDeps = true;
  nativeBuildInputs = [ pkg-config ];
  buildInputs = [ pam ];

  makeFlags = [ "pam_p9.so" ];
  installPhase = ''
    install -Dm755 -t $out/lib/security/ pam_p9.so
  '';

  meta = with lib; {
    description = "dp9ik pam module";
    longDescription = "Uses tlsclient to authenticate users against a 9front auth server";
    homepage = "https://git.sr.ht/~moody/tlsclient";
    license = licenses.mit;
    maintainers = with maintainers; [ moody ];
    platforms = platforms.linux;
  };
}