{ pkgs, ... }:
# AUTO-UPDATE: nix-update --flake oidcwarden
# FIXME: https://github.com/dani-garcia/vaultwarden/pull/3899
pkgs.rustPlatform.buildRustPackage (finalAttrs: {
  pname = "oidcwarden";
  version = "2025.8.1-1";

  src = pkgs.fetchFromGitHub {
    owner = "Timshel";
    repo = "OIDCWarden";
    rev = "v${finalAttrs.version}";
    hash = "sha256-yH2qewIV79hBDRn0KFj2mULpD2tTm5+8E2kIN8uMWHM=";
  };

  cargoHash = "sha256-ZPCRFBaISCIlPY/x3lTqxuePgZXcOLvgyOrw2XVcAVw=";

  env.VW_VERSION = finalAttrs.version;

  nativeBuildInputs = with pkgs; [ pkg-config ];
  buildInputs = with pkgs; [
    openssl
    libpq
  ];

  buildFeatures = [ "postgresql" ];

  passthru = with pkgs.vaultwarden; {
    inherit webvault updateScript;
    tests = pkgs.nixosTests.vaultwarden;
  };

  meta.mainProgram = "oidcwarden";
})