From 19243ffcb2c17557e4a91c4d7a957719c6e0832b Mon Sep 17 00:00:00 2001
From: Tom Sydney Kerckhove <syd@cs-syd.eu>
Date: Fri, 13 Mar 2026 11:42:58 +0100
Subject: [PATCH] Add Nix flake

---
 flake.lock | 27 +++++++++++++++++++++++++++
 flake.nix  | 37 +++++++++++++++++++++++++++++++++++++
 2 files changed, 64 insertions(+)
 create mode 100644 flake.lock
 create mode 100644 flake.nix

diff --git a/flake.lock b/flake.lock
new file mode 100644
index 0000000..284b915
--- /dev/null
+++ b/flake.lock
@@ -0,0 +1,27 @@
+{
+  "nodes": {
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1773222311,
+        "narHash": "sha256-BHoB/XpbqoZkVYZCfXJXfkR+GXFqwb/4zbWnOr2cRcU=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "0590cd39f728e129122770c029970378a79d076a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-25.11",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "nixpkgs": "nixpkgs"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}
diff --git a/flake.nix b/flake.nix
new file mode 100644
index 0000000..1d6d543
--- /dev/null
+++ b/flake.nix
@@ -0,0 +1,37 @@
+{
+  description = "sshgate - forwarding-only SSH server with policy-based connection control";
+
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.11";
+  };
+
+  outputs = { self, nixpkgs }:
+    let
+      system = "x86_64-linux";
+      pkgs = nixpkgs.legacyPackages.${system};
+    in
+    {
+      packages.${system} = {
+        sshgate = pkgs.buildGoModule {
+          pname = "sshgate";
+          version = "0.0.1";
+          src = ./.;
+          vendorHash = "sha256-6cbbplKEuMK9pt4/1IYfEQ6ue8QPVLDCBSebYSk+fHU=";
+        };
+        default = self.packages.${system}.sshgate;
+      };
+
+      checks.${system} = {
+        sshgate = self.packages.${system}.sshgate;
+        devShell = self.devShells.${system}.default;
+      };
+
+      devShells.${system}.default = pkgs.mkShell {
+        buildInputs = [
+          pkgs.go
+          pkgs.gopls
+          pkgs.gotools
+        ];
+      };
+    };
+}