{ pkgs, ... }:

pkgs.buildGoModule rec {
  name = "dnsupdate";
  src = ./.;
  vendorSha256 = "sha256-DQ/kYC/EZpcOKk0Y+DvwJtAPZpamxvEl7gKk8uEB2Ls=";
  nativeBuildInputs = with pkgs; [ go ];

  push = pkgs.writers.writeBashBin "dns-push" ''
    set -ueo pipefail

    cd $(git rev-parse --show-toplevel)/tools/dnsupdate

    export TS_API_KEY=$(pass api/api.tailscale.com)
    export GOOGLE_APPLICATION_CREDENTIALS=/run/agenix/gcloud/world-nix

    go run .
  '';
}