diff --git a/default.nix b/default.nix
new file mode 100644
index 0000000..2ae452c
--- /dev/null
+++ b/default.nix
@@ -0,0 +1,47 @@
+{
+  sources ? import ./npins,
+  pkgs ? import sources.nixpkgs { },
+}:
+
+let
+  nix-pkgs = import sources.nix-pkgs { inherit pkgs; };
+
+  python3 = pkgs.python3.override {
+    packageOverrides = _: _: {
+      inherit (nix-pkgs)
+        django-autoslug
+        django-cas-ng
+        loadcredential
+        markdown-icons
+        ;
+    };
+  };
+in
+
+{
+  devShell = pkgs.mkShell {
+    name = "gestiojeux.dev";
+
+    packages = [
+      (python3.withPackages (ps: [
+        ps.django
+        ps.django-autoslug
+        ps.loadcredential
+        ps.django-cas-ng
+        ps.django-cleanup
+        ps.django-haystack
+        ps.django-markdownx
+        ps.django-tables2
+        ps.pillow
+        ps.whoosh
+
+        # Django haystack is drunk
+        ps.setuptools
+      ]))
+    ];
+
+    env = {
+      DJANGO_SETTINGS_MODULE = "gestiojeux.settings";
+    };
+  };
+}
diff --git a/npins/default.nix b/npins/default.nix
new file mode 100644
index 0000000..4a7c372
--- /dev/null
+++ b/npins/default.nix
@@ -0,0 +1,47 @@
+# Generated by npins. Do not modify; will be overwritten regularly
+let
+  data = builtins.fromJSON (builtins.readFile ./sources.json);
+  version = data.version;
+
+  mkSource = spec:
+    assert spec ? type; let
+      path =
+        if spec.type == "Git" then mkGitSource spec
+        else if spec.type == "GitRelease" then mkGitSource spec
+        else if spec.type == "PyPi" then mkPyPiSource spec
+        else if spec.type == "Channel" then mkChannelSource spec
+        else builtins.throw "Unknown source type ${spec.type}";
+    in
+    spec // { outPath = path; };
+
+  mkGitSource = { repository, revision, url ? null, hash, ... }:
+    assert repository ? type;
+    # At the moment, either it is a plain git repository (which has an url), or it is a GitHub/GitLab repository
+    # In the latter case, there we will always be an url to the tarball
+    if url != null then
+      (builtins.fetchTarball {
+        inherit url;
+        sha256 = hash; # FIXME: check nix version & use SRI hashes
+      })
+    else assert repository.type == "Git"; builtins.fetchGit {
+      url = repository.url;
+      rev = revision;
+      # hash = hash;
+    };
+
+  mkPyPiSource = { url, hash, ... }:
+    builtins.fetchurl {
+      inherit url;
+      sha256 = hash;
+    };
+
+  mkChannelSource = { url, hash, ... }:
+    builtins.fetchTarball {
+      inherit url;
+      sha256 = hash;
+    };
+in
+if version == 3 then
+  builtins.mapAttrs (_: mkSource) data.pins
+else
+  throw "Unsupported format version ${toString version} in sources.json. Try running `npins upgrade`"
diff --git a/npins/sources.json b/npins/sources.json
new file mode 100644
index 0000000..983b82d
--- /dev/null
+++ b/npins/sources.json
@@ -0,0 +1,22 @@
+{
+  "pins": {
+    "nix-pkgs": {
+      "type": "Git",
+      "repository": {
+        "type": "Git",
+        "url": "https://git.hubrecht.ovh/hubrecht/nix-pkgs"
+      },
+      "branch": "main",
+      "revision": "337a188b1798f2aeac911eaad91817910e4c93b6",
+      "url": null,
+      "hash": "0vk15v7rfajvwp6kf21c9y3qw09yx5p2da7n73357wgh11xn9v0z"
+    },
+    "nixpkgs": {
+      "type": "Channel",
+      "name": "nixpkgs-unstable",
+      "url": "https://releases.nixos.org/nixpkgs/nixpkgs-24.05pre623501.ac34158a823c/nixexprs.tar.xz",
+      "hash": "18c85kldmxhfmsdr44plmxi60ddz9lrfrh0bdmxvpr0n0j2fx6yb"
+    }
+  },
+  "version": 3
+}
\ No newline at end of file
diff --git a/shell.nix b/shell.nix
new file mode 100644
index 0000000..d6d21cf
--- /dev/null
+++ b/shell.nix
@@ -0,0 +1 @@
+(import ./. { }).devShell