{ pkgs ? import <nixpkgs> { } }:
let inherit (pkgs) lib; in
pkgs.mkShell {
  buildInputs = [
    pkgs.git
    pkgs.niv
  ];
  shellHook = ''
    PASSWORD_STORE_DIR=${lib.escapeShellArg (toString ./.)}/secrets; export PASSWORD_STORE_DIR
    HETZNER_DNS_API_TOKEN=$(pass show hetznerdns-api-token); export HETZNER_DNS_API_TOKEN
  '';
}