From 5b6e098e68a1de486f59451497de1365b91069bc Mon Sep 17 00:00:00 2001
From: Karol Broda <karol.broda@titanom.com>
Date: Tue, 23 Dec 2025 10:45:23 +0100
Subject: [PATCH] fix: add darwin SDK frameworks for macOS 12+ compatibility

---
 flake.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/flake.nix b/flake.nix
index f9426f8..db0ae0e 100644
--- a/flake.nix
+++ b/flake.nix
@@ -60,6 +60,12 @@
           # darwin requires cgo for libproc, linux uses pure go with /proc
           env.CGO_ENABLED = if isDarwin then "1" else "0";
           env.GOTOOLCHAIN = "local";
+          # go 1.25 crypto/x509 uses SecTrustCopyCertificateChain (macOS 12+)
+          env.MACOSX_DEPLOYMENT_TARGET = pkgs.lib.optionalString isDarwin "12.0";
+          buildInputs = pkgs.lib.optionals isDarwin [
+            pkgs.darwin.apple_sdk.frameworks.Security
+            pkgs.darwin.apple_sdk.frameworks.CoreFoundation
+          ];
           ldflags = [
             "-s"
             "-w"