{ pkgs, src, version, ... }:

pkgs.buildNpmPackage {
  pname = "authentik-webui";
  inherit src version;

  sourceRoot = "source/web";

  nativeBuildInputs = [ pkgs.python3 ];
  npmDepsHash = "sha256:1v69zmbksras3b3fggiqkfaj727gjb3v9x0a9ziyxamyb7vyrp2y";

  dontNpmInstall = true;
  installPhase = ''
    runHook preInstall
    mkdir $out
    cp -r robots.txt security.txt dist/ authentik/ $out
    runHook postInstall
  '';
}