From de3e1d4bcb33526797839efa8ec91ea5286bd8b8 Mon Sep 17 00:00:00 2001
From: Jon Seager <jon@sgrs.uk>
Date: Thu, 5 Feb 2026 12:34:57 +0000
Subject: [PATCH] fix(nix): add openssl build inputs for webauthn-rs

webauthn-rs-core unconditionally depends on openssl for X.509 and
signature verification. Add pkg-config and openssl to the nix build
so the package builds in the sandbox.
---
 flake.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/flake.nix b/flake.nix
index 6663fbf..96ca16f 100644
--- a/flake.nix
+++ b/flake.nix
@@ -50,6 +50,9 @@
               src = lib.cleanSource ./.;
               cargoLock.lockFile = ./Cargo.lock;
 
+              nativeBuildInputs = [ pkgs.pkg-config ];
+              buildInputs = [ pkgs.openssl ];
+
               meta = {
                 description = "Log your favourite roasters, roasts, brews and cafes!";
                 homepage = "https://github.com/jnsgruk/brewlog";