From 062e241e425f3457019a44e88f7664c10ed50ff4 Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Wed, 18 Dec 2024 09:05:00 -0800
Subject: add overlay for the hashi tool

---
 nix/users/fcuny/work.nix   | 10 ++++++++++
 overlays/default.nix       |  5 ++++-
 packages/hashi/default.nix | 35 +++++++++++++++++++++++++++++++++++
 3 files changed, 49 insertions(+), 1 deletion(-)
 create mode 100644 packages/hashi/default.nix

diff --git a/nix/users/fcuny/work.nix b/nix/users/fcuny/work.nix
index cc80104..20c49c4 100644
--- a/nix/users/fcuny/work.nix
+++ b/nix/users/fcuny/work.nix
@@ -9,5 +9,15 @@
 
     # for ssh
     sapi
+
+    # for tokens
+    hashi
   ];
+
+  programs.fish = {
+    shellAbbrs = {
+      "ssh-sign-chi" =
+        "${pkgs.hashi}/bin/hashi -e chi1 sign --key=/Users/fcuny/.ssh/id_ed25519.pub key";
+    };
+  };
 }
diff --git a/overlays/default.nix b/overlays/default.nix
index 305e8de..45d1d4e 100644
--- a/overlays/default.nix
+++ b/overlays/default.nix
@@ -1 +1,4 @@
-final: _: { sapi = final.callPackage ../packages/sapi { }; }
+final: _: {
+  sapi = final.callPackage ../packages/sapi { };
+  hashi = final.callPackage ../packages/hashi { };
+}
diff --git a/packages/hashi/default.nix b/packages/hashi/default.nix
new file mode 100644
index 0000000..54f71d1
--- /dev/null
+++ b/packages/hashi/default.nix
@@ -0,0 +1,35 @@
+{ stdenv, fetchurl, lib, ... }:
+let
+  url =
+    "https://artifactory.rbx.com:443/artifactory/generic-rbx-local/hashi/0.1.4/bin/hashi_darwin-amd64";
+in
+stdenv.mkDerivation rec {
+  pname = "hashi";
+  version = "0.1.4";
+  src = builtins.trace "Attempting to fetch: ${url}" fetchurl {
+    inherit url;
+    sha256 = "sha256-uX6AdOUfh6JEwS20kQwjp9Os12lVOGoCajOV9sYWXtA=";
+  };
+
+  installPhase = ''
+    mkdir -p $out/bin
+    cp $src $out/bin/hashi
+    chmod +x $out/bin/hashi
+  '';
+
+  dontUnpack = true;
+  dontStrip = true;
+  doInstallCheck = true;
+
+  installCheckPhase = ''
+    $out/bin/hashi -e sitetest3 version
+  '';
+
+  meta = with lib; {
+    description = "hashi command-line tool";
+    homepage = "http://go/hashicli";
+    license = licenses.unfree;
+    platforms = [ "x86_64-darwin" ];
+  };
+}
+
-- 
cgit 1.4.1