{ mkDerivation, async, base, bytestring, connection, containers
, directory, hpack, hspec, hspec-discover, hspec-expectations
, http-client, http-conduit, lens, lens-aeson, megaparsec, mtl
, optparse-applicative, parser-combinators, retry, lib, text
, unix, unordered-containers, utf8-string, fetchzip, dotenv
}:
mkDerivation rec {
  pname = "vaultenv";
  version = "0.13.3";

  src = fetchzip {
    url = "https://github.com/channable/vaultenv/archive/v${version}.tar.gz";
    sha256 = "sha256-17tdlqG8z4GviI7kkLbktC6SqnQFDdZhWtejscG0n48=";
  };

  buildTools = [ hpack ];

  prePatch = ''
    substituteInPlace package.yaml \
        --replace -Werror ""
  '';

  isLibrary = false;
  isExecutable = true;
  executableHaskellDepends = [
    async base bytestring connection containers http-client
    http-conduit lens lens-aeson megaparsec mtl optparse-applicative
    parser-combinators retry text unix unordered-containers utf8-string
    dotenv
  ];
  testHaskellDepends = [
    async base bytestring connection containers directory hspec
    hspec-discover hspec-expectations http-client http-conduit lens
    lens-aeson megaparsec mtl optparse-applicative parser-combinators
    retry text unix unordered-containers utf8-string
  ];
  preConfigure = "hpack";
  homepage = "https://github.com/channable/vaultenv#readme";
  description = "Runs processes with secrets from HashiCorp Vault";
  license = lib.licenses.bsd3;
  maintainers = with lib.maintainers; [ lnl7 manveru ];
}