{ inputs, symlinkJoin, dash, hectic, ssh-to-age, stdenv }:
let
  shell = "${dash}/bin/dash";
  bashOptions = [
    "errexit"
    "nounset"
  ];

  deploy = hectic.writeShellApplication {
    inherit shell bashOptions;
    name = "deploy";
    runtimeInputs = [
      ssh-to-age
      inputs.nixos-anywhere.packages.${stdenv.hostPlatform.system}.nixos-anywhere
    ];

    text = ''
      ${builtins.readFile hectic.helpers.posix-shell.log}
      ${builtins.readFile ./deploy.sh}
    '';
  };
in
symlinkJoin {
  name = "deploy";
  paths = [ deploy ];
}