server/shell.nix

{ pkgs ? import <nixpkgs> {} }:

 pkgs.mkShell {
   packages = with pkgs; [
      # linters/typos/etc.
      pre-commit
      typos
      detect-secrets
      gitleaks
      ripsecrets

      # encrypting secrets
      agebox

      # generic utils
      just
   ];
}