{ makeSetupHook, gnupg, sops, lib }:

let
  # FIXME: drop after 23.05
  propagatedBuildInputs = if (lib.versionOlder (lib.versions.majorMinor lib.version) "23.05") then "deps" else "propagatedBuildInputs";
in
(makeSetupHook {
  name = "sops-import-keys-hook";
  substitutions = {
    gpg = "${gnupg}/bin/gpg";
  };
  ${propagatedBuildInputs} = [ sops gnupg ];
} ./sops-import-keys-hook.bash)