{
  lib,
  pkgs,
  sources ? import ../npins,
  ...
}:
pkgs.stdenv.mkDerivation {
  name = "tf-repo";
  src =
    with lib.fileset;
    toSource {
      root = ../.;
      # don't copy ignored files
      fileset = intersection (gitTracked ../.) ../.;
    };
  buildInputs = [
    (import ./tf.nix { inherit lib pkgs; })
    (import ./setup.nix { inherit lib pkgs sources; })
  ];
  buildPhase = ''
    runHook preBuild
    pushd infra
    setup
    popd
    runHook postBuild
  '';
  installPhase = ''
    runHook preInstall
    cp -r . $out
    runHook postInstall
  '';
}