flake.nix

{
  description = "vault auth plugin for remote attestation of TEEs";

  inputs = {
    nixsgx-flake.url = "github:matter-labs/nixsgx";
    nixpkgs.follows = "nixsgx-flake/nixpkgs";
    flake-utils.url = "github:numtide/flake-utils?tag=v1.0.0";
  };

  outputs = { self, nixpkgs, flake-utils, nixsgx-flake }:
    flake-utils.lib.eachSystem [ "x86_64-linux" ]
      (system:
        let
          pkgs = import nixpkgs {
            inherit system;
            overlays = [
              nixsgx-flake.overlays.default
              self.overlays.default
            ];
            config.allowUnfree = true;
          };
          vault-auth-tee = pkgs.callPackage ./packages/vault-auth-tee.nix { };
        in
        {
          formatter = pkgs.nixpkgs-fmt;

          packages = {
            inherit vault-auth-tee;
            default = vault-auth-tee;
          };

          devShells = {
            default = pkgs.mkShell {
              inputsFrom = [ vault-auth-tee ];
            };
          };
        }) // {
      overlays.default = final: prev: { vat = { inherit (self.packages.${prev.system}) vault-auth-tee; }; };
    };

}