{
  lib,
  stdenv,
  makeWrapper,
  installShellFiles,
  coreutils,
  findutils,
  gawk,
  rosenpass,
  wireguard-tools,
}:
stdenv.mkDerivation {
  inherit (rosenpass) version src;
  pname = "rosenpass-tools";

  nativeBuildInputs = [
    makeWrapper
    installShellFiles
  ];

  postInstall = ''
    install -D $src/rp $out/bin/rp
    installManPage $src/doc/rp.1
    wrapProgram $out/bin/rp \
      --prefix PATH : ${
        lib.makeBinPath [
          coreutils
          findutils
          gawk
          rosenpass
          wireguard-tools
        ]
      }
  '';

  meta = rosenpass.meta // {
    description = "Rosenpass tool `rp`, which is a script that wraps the `rosenpass` binary";
    mainProgram = "rp";
  };
}