infrastructure/machines/vault01/k-radius/packages/rlm_python.nix

{
  stdenv,
  fetchFromGitHub,
  python3,
  pykanidm,
}:

let
  pythonPath = with python3.pkgs; makePythonPath [ pykanidm ];
in
stdenv.mkDerivation rec {
  pname = "rlm_python";
  version = "1.1.0-rc.15";

  src = fetchFromGitHub {
    owner = "kanidm";
    repo = "kanidm";
    rev = "v${version}";
    hash = "sha256-0y8juXS61Z9zxOdsWAQ6lJurP+n855Nela6egYRecok=";
  };

  patches = [ ./python_path.patch ];

  postPatch = ''
    substituteInPlace rlm_python/mods-available/python3 \
      --replace "@kanidm_python@" "${pythonPath}"
  '';

  installPhase = ''
    mkdir -p $out/etc/raddb/
    cp -R rlm_python/{mods-available,sites-available} $out/etc/raddb/
  '';

  phases = [
    "unpackPhase"
    "patchPhase"
    "installPhase"
  ];

  passthru = {
    inherit pythonPath;
  };

  preferLocalBuild = true;
}