{

  buildGoModule,
  fetchFromGitHub,

}: buildGoModule rec {

  pname = "nebula";

  # If this changes, remember to change:
  # - the AppDir/etc/daemon.yml vpn.firewall docs
  # - the version imported in go-workspace
  version = "1.4.0";

  src = fetchFromGitHub {
    owner = "slackhq";
    repo = pname;
    rev = "v${version}";
    sha256 = "lu2/rSB9cFD7VUiK+niuqCX9CI2x+k4Pi+U5yksETSU=";
  };

  vendorSha256 = "p1inJ9+NAb2d81cn+y+ofhxFz9ObUiLgj+9cACa6Jqg=";

  subPackages = [ "cmd/nebula" "cmd/nebula-cert" ];
}