From c52675475c1b866bcb15c280a46d6b9180e901bc Mon Sep 17 00:00:00 2001
From: Yethal <26117918+Yethal@users.noreply.github.com>
Date: Wed, 7 Jan 2026 12:02:01 +0100
Subject: [PATCH] tailsnitch: init at 1.4.0

---
 pkgs/by-name/ta/tailsnitch/package.nix | 42 ++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)
 create mode 100644 pkgs/by-name/ta/tailsnitch/package.nix

diff --git a/pkgs/by-name/ta/tailsnitch/package.nix b/pkgs/by-name/ta/tailsnitch/package.nix
new file mode 100644
index 000000000000..265f381d9f9a
--- /dev/null
+++ b/pkgs/by-name/ta/tailsnitch/package.nix
@@ -0,0 +1,42 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  versionCheckHook,
+}:
+buildGoModule (finalAttrs: {
+  pname = "tailsnitch";
+  version = "1.4.0";
+
+  src = fetchFromGitHub {
+    owner = "Adversis";
+    repo = "tailsnitch";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-LvAOIDM1YIB4LmOm6zXrzr5SOH7tyF4t79XCLDg6p2Q=";
+  };
+
+  vendorHash = "sha256-khw9K4sKhubhkccoC4f923Aw2Cj9eKpVqLHZICdkTXw=";
+
+  ldflags = [
+    "-w"
+    "-s"
+    "-X=github.com/Adversis/tailsnitch/cmd.Version=${finalAttrs.version}"
+    "-X=github.com/Adversis/tailsnitch/cmd.BuildID=${finalAttrs.version}"
+    "-X=github.com/Adversis/tailsnitch/cmd.BuildDate=1970-01-01T00:00:00Z"
+  ];
+
+  doInstallCheck = true;
+  nativeInstallCheckInputs = [ versionCheckHook ];
+  versionCheckProgramArg = "--version";
+
+  meta = {
+    homepage = "https://github.com/Adversis/tailsnitch";
+    changelog = "https://github.com/Adversis/tailsnitch/releases/tag/v${finalAttrs.version}";
+    description = "Security auditor for Tailscale configurations. Scans your tailnet for misconfigurations, overly permissive access controls, and security best practice violations";
+    mainProgram = "tailsnitch";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [
+      yethal
+    ];
+  };
+})