{ stdenv, lib, naersk, lld, mold, typescript
, useWebAuthn ? false, openssl, zlib, pkg-config, protobuf
, usePostgres ? true, postgresql, postgresqlTestHook
, nixosTest }:

assert useWebAuthn -> openssl != null && pkg-config != null;
assert usePostgres -> postgresql != null && postgresqlTestHook != null;

let
  featureMatrix = features: lib.concatStringsSep " " (lib.attrNames (lib.filterAttrs (k: v: v) features));
in
naersk.buildPackage rec {
  pname = "kittybox";
  version = "0.1.0";

  src = lib.sources.sourceFilesBySuffices ./. [".rs" ".toml" ".sql" ".ts" ".css" ".html" ".lock" ".json"];

  doCheck = stdenv.hostPlatform == stdenv.targetPlatform;
  cargoBuildOptions = x: x ++ [
    "--no-default-features"
    "--features=\"${featureMatrix { webauthn = useWebAuthn; postgres = usePostgres; rustls = !useWebAuthn; }}\""
  ];
  cargoTestOptions = cargoBuildOptions;

  buildInputs = lib.optional useWebAuthn openssl;
  nativeBuildInputs = [ typescript ] ++ (lib.optional useWebAuthn pkg-config);

  nativeCheckInputs = lib.optionals usePostgres [
    postgresql postgresqlTestHook
  ];

  # Tests create arbitrary databases; we need to be prepared for that
  postgresqlTestUserOptions = "LOGIN SUPERUSER";
  postgresqlTestSetupPost = ''
    export DATABASE_URL="postgres://localhost?host=$PGHOST&user=$PGUSER&dbname=$PGDATABASE"
  '';

  passthru = {
    tests = {
      distributed = nixosTest ./nixos-tests/distributed-test.nix;
      smokeTest = nixosTest ./nixos-tests/smoke-test.nix;
    } // (lib.optionalAttrs usePostgres {
      webmention = nixosTest ./nixos-tests/webmention-test.nix;
      postgresSmokeTest = nixosTest ./nixos-tests/postgres-smoke-test.nix;
    });

    hasPostgres = usePostgres;
  };

  meta = with lib.meta; {
    maintainers = with lib.maintainers; [ vikanezrimaya ];
    platforms = ["aarch64-linux" "x86_64-linux"];
    mainProgram = "kittybox";
  };
}