tailscale-nginx-auth: re-use most from tailscale package

{ lib, stdenv, buildGoModule, fetchFromGitHub }:

{ lib, stdenv, buildGoModule, tailscale }:

let

  version = "1.68.1";

in

buildGoModule {

  pname = "tailscale-nginx-auth";

  inherit version;

  src = fetchFromGitHub {

    owner = "tailscale";

    repo = "tailscale";

    rev = "v${version}";

    hash = "sha256-ZAzro69F7ovfdqzRss/U7puh1T37bkEtUXabCYc5LwU=";

  };

  vendorHash = "sha256-SUjoeOFYz6zbEgv/vND7kEXbuWlZDrUKF2Dmqsf/KVw=";

  inherit (tailscale) version src vendorHash ldflags;

  CGO_ENABLED = 0;

  subPackages = [ "cmd/nginx-auth" ];

  ldflags = [

    "-w"

    "-s"

    "-X tailscale.com/version.longStamp=${version}"

    "-X tailscale.com/version.shortStamp=${version}"

  ];

  postInstall = lib.optionalString stdenv.isLinux ''

    mv $out/bin/nginx-auth $out/bin/tailscale.nginx-auth

    sed -i -e "s#/usr/sbin#$out/bin#" ./cmd/nginx-auth/tailscale.nginx-auth.service