{
  lib,
  buildDubPackage,
  fetchFromGitHub,
  zlib,
  openssl_1_1,
}:

buildDubPackage rec {
  pname = "anisette-v3-server";
  version = "unstable-2026-08-01";

  src = fetchFromGitHub {
    owner = "Dadoum";
    repo = "anisette-v3-server";
    rev = "2ef18d7da2abe3a6d070aa478f774538b947aaa2";
    hash = "sha256-G8loi2BTIRKamLeY8DiN4BLSrRxh13BNvs8bC2l9zNo=";
  };

  dubLock = ./dub-lock.json;

  # TEMP diagnostic: log the swallowed provisioning exception to find the real
  # cause of the silent provisioning failure.
  postPatch = ''
    patch -p1 < ${./log-provisioning-error.patch}
  '';

  buildInputs = [ zlib openssl_1_1 ];

  installPhase = ''
    runHook preInstall
    mkdir -p $out/bin
    install -Dm755 anisette-v3-server $out/bin/anisette-v3-server
    runHook postInstall
  '';

  meta = {
    description = "Anisette server implementing SideStore's anisette v3 protocol";
    homepage = "https://github.com/Dadoum/anisette-v3-server";
    license = lib.licenses.agpl3Only;
    mainProgram = "anisette-v3-server";
    platforms = lib.platforms.linux;
  };
}