{ inputs, self, ... }:
{
  perSystem =
    { pkgs, system, ... }:
    {
      devShells.infra =
        let
          treefmt = pkgs.callPackage ./_treefmt.nix { treefmt-nix = inputs.treefmt-nix; };
        in
        pkgs.mkShellNoCC {
          name = "infra";
          inputsFrom = [ self.devShells."${system}".common ];
          packages = [
            # keep-sorted start
            pkgs.sops
            treefmt
            # keep-sorted end
          ];

          shellHook = ''
            export TREEFMT_WORKING_DIR="$("${pkgs.git}/bin/git" rev-parse --show-toplevel)/infra"
          '';
        };
    };
}