{ pkgs, ... }:
# AUTO-UPDATE: nix-update --flake oidcwarden
# FIXME: https://github.com/dani-garcia/vaultwarden/pull/3899
pkgs.rustPlatform.buildRustPackage rec {
  pname = "oidcwarden";
  version = "2025.5.1-4";

  src = pkgs.fetchFromGitHub {
    owner = "Timshel";
    repo = "OIDCWarden";
    rev = "v${version}";
    hash = "sha256-OEKksnZlL6kkNkU1pu7y58++EmunN0yQHwJtZwt3Cbs=";
  };

  useFetchCargoVendor = true;
  cargoHash = "sha256-ZQ4Q5nD2WOkVX7OXEk1JTgN8zHvI6Cqmb1ifcHkXKp4=";

  env.VW_VERSION = version;

  nativeBuildInputs = with pkgs; [ pkg-config ];
  buildInputs = with pkgs; [
    openssl
    libpq
  ];

  buildFeatures = [ "postgresql" ];

  passthru = with pkgs.vaultwarden; {
    inherit webvault updateScript;
    tests = pkgs.lib.nixosTests.vaultwarden;
  };

  meta.mainProgram = "oidcwarden";
}