From e87230c61cd319611a962b6060e0381e853f75f0 Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:16 +0100
Subject: [PATCH 01/27] bftpd: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/bf/bftpd/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/bf/bftpd/package.nix b/pkgs/by-name/bf/bftpd/package.nix
index 7f146a5dcf5a..01578c892844 100644
--- a/pkgs/by-name/bf/bftpd/package.nix
+++ b/pkgs/by-name/bf/bftpd/package.nix
@@ -28,7 +28,7 @@ stdenv.mkDerivation rec {
 
   buildInputs = [ libxcrypt ];
 
-  CFLAGS = "-std=gnu89";
+  env.CFLAGS = "-std=gnu89";
 
   preConfigure = ''
     sed -re 's/-[og] 0//g' -i Makefile*

From 3baa0a3d2c4f052d5434dce78dd649e03ffec42a Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:16 +0100
Subject: [PATCH 02/27] bumblebee: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/bu/bumblebee/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/bu/bumblebee/package.nix b/pkgs/by-name/bu/bumblebee/package.nix
index 01809953c540..3c454536bdc1 100644
--- a/pkgs/by-name/bu/bumblebee/package.nix
+++ b/pkgs/by-name/bu/bumblebee/package.nix
@@ -166,7 +166,7 @@ stdenv.mkDerivation rec {
     "CONF_MODPATH_NVIDIA=${nvidia_x11.bin}/lib/xorg/modules"
   ];
 
-  CFLAGS = [
+  env.CFLAGS = toString [
     "-DX_MODULE_APPENDS=\\\"${xmodules}\\\""
   ];
 

From 19596a17f4b5270c49fd09d35a2f7523392f2c4c Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:16 +0100
Subject: [PATCH 03/27] cpp-redis: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/cp/cpp-redis/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/cp/cpp-redis/package.nix b/pkgs/by-name/cp/cpp-redis/package.nix
index 5f129f3352da..0bf3ce1ed02b 100644
--- a/pkgs/by-name/cp/cpp-redis/package.nix
+++ b/pkgs/by-name/cp/cpp-redis/package.nix
@@ -22,7 +22,7 @@ stdenv.mkDerivation (finalAttrs: {
     cmake
     pkg-config
   ];
-  CFLAGS = "-D_GLIBCXX_USE_NANOSLEEP";
+  env.CFLAGS = "-D_GLIBCXX_USE_NANOSLEEP";
   patches = [
     ./01-fix-sleep_for.patch
   ];

From 29eac34e159bfc7df3e945c16302178141af7a82 Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:17 +0100
Subject: [PATCH 04/27] curlftpfs: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/cu/curlftpfs/package.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/cu/curlftpfs/package.nix b/pkgs/by-name/cu/curlftpfs/package.nix
index 2d4b90b9c764..9404af4c3830 100644
--- a/pkgs/by-name/cu/curlftpfs/package.nix
+++ b/pkgs/by-name/cu/curlftpfs/package.nix
@@ -39,7 +39,9 @@ stdenv.mkDerivation (finalAttrs: {
     zlib
   ];
 
-  CFLAGS = lib.optionalString stdenv.hostPlatform.isDarwin "-D__off_t=off_t";
+  env = lib.optionalAttrs stdenv.hostPlatform.isDarwin {
+    CFLAGS = "-D__off_t=off_t";
+  };
 
   postPatch = lib.optionalString stdenv.hostPlatform.isDarwin ''
     # Fix the build on macOS with macFUSE installed. Needs autoreconfHook for

From 5567e2cafd1942c9910bb25557b308e9d5b97ca6 Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:17 +0100
Subject: [PATCH 05/27] deadpixi-sam-unstable: move CFLAGS into env for
 structuredAttrs

---
 pkgs/by-name/de/deadpixi-sam-unstable/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/de/deadpixi-sam-unstable/package.nix b/pkgs/by-name/de/deadpixi-sam-unstable/package.nix
index cbd620ec8f07..0a9d81b10afc 100644
--- a/pkgs/by-name/de/deadpixi-sam-unstable/package.nix
+++ b/pkgs/by-name/de/deadpixi-sam-unstable/package.nix
@@ -27,7 +27,7 @@ stdenv.mkDerivation {
       --replace "RXPATH=/usr/bin/ssh" "RXPATH=ssh"
   '';
 
-  CFLAGS = "-D_DARWIN_C_SOURCE";
+  env.CFLAGS = "-D_DARWIN_C_SOURCE";
   makeFlags = [ "DESTDIR=$(out)" ];
   buildInputs = [
     libx11

From 540d63f0d99d3a055e7dece977aababae2e52e4a Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:18 +0100
Subject: [PATCH 06/27] dropbear: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/dr/dropbear/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/dr/dropbear/package.nix b/pkgs/by-name/dr/dropbear/package.nix
index 47f81d6a25bb..de58c611f8bc 100644
--- a/pkgs/by-name/dr/dropbear/package.nix
+++ b/pkgs/by-name/dr/dropbear/package.nix
@@ -27,7 +27,7 @@ stdenv.mkDerivation (finalAttrs: {
     sha256 = "sha256-DR98pxHPwzbcioXmcsq5z9giOgL+LaCkp661jJ4RNjQ=";
   };
 
-  CFLAGS = lib.pipe (lib.attrNames dflags) [
+  env.CFLAGS = lib.pipe (lib.attrNames dflags) [
     (map (name: "-D${name}=\\\"${dflags.${name}}\\\""))
     (lib.concatStringsSep " ")
   ];

From 3efe5fd4dfd6edb3d2f015ad0aa531f51b4891de Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:18 +0100
Subject: [PATCH 07/27] dumpasn1: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/du/dumpasn1/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/du/dumpasn1/package.nix b/pkgs/by-name/du/dumpasn1/package.nix
index f9a878f711b5..cf7a526589bc 100644
--- a/pkgs/by-name/du/dumpasn1/package.nix
+++ b/pkgs/by-name/du/dumpasn1/package.nix
@@ -14,7 +14,7 @@ stdenv.mkDerivation (finalAttrs: {
     hash = "sha256-r40czSLdjCYbt73zK7exCoP/kMq6+pyJfz9LKJLLaXM=";
   };
 
-  CFLAGS = ''-DDUMPASN1_CONFIG_PATH='"$(out)/etc/"' '';
+  env.CFLAGS = ''-DDUMPASN1_CONFIG_PATH='"$(out)/etc/"' '';
 
   makeFlags = [ "prefix=$(out)" ];
 

From d8beb46b66c58fab3f65c241964d809b5e150bfa Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:18 +0100
Subject: [PATCH 08/27] eflite: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/ef/eflite/package.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/ef/eflite/package.nix b/pkgs/by-name/ef/eflite/package.nix
index a6aa478947e8..c797057b331f 100644
--- a/pkgs/by-name/ef/eflite/package.nix
+++ b/pkgs/by-name/ef/eflite/package.nix
@@ -44,7 +44,9 @@ stdenv.mkDerivation (finalAttrs: {
     ./format.patch
   ];
 
-  CFLAGS = lib.optionalString debug " -DDEBUG=2";
+  env = lib.optionalAttrs debug {
+    CFLAGS = " -DDEBUG=2";
+  };
 
   meta = {
     homepage = "https://eflite.sourceforge.net";

From 5efdb8a0420df53a146e7105f9f2161dc937977d Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:19 +0100
Subject: [PATCH 09/27] exifprobe: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/ex/exifprobe/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/ex/exifprobe/package.nix b/pkgs/by-name/ex/exifprobe/package.nix
index b1d5b1cf412c..584eb2abf667 100644
--- a/pkgs/by-name/ex/exifprobe/package.nix
+++ b/pkgs/by-name/ex/exifprobe/package.nix
@@ -15,7 +15,7 @@ stdenv.mkDerivation {
     sha256 = "1c1fhc0v1m452lgnfcijnvrc0by06qfbhn3zkliqi60kv8l2isbp";
   };
 
-  CFLAGS = [ "-O2" ];
+  env.CFLAGS = toString [ "-O2" ];
 
   installFlags = [ "DESTDIR=$(out)" ];
 

From c0dcb7837a7791ca6717f094e7e4b33e00932d4c Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:19 +0100
Subject: [PATCH 10/27] fcrackzip: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/fc/fcrackzip/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/fc/fcrackzip/package.nix b/pkgs/by-name/fc/fcrackzip/package.nix
index 4d89ece7d0ca..b90f8b92565f 100644
--- a/pkgs/by-name/fc/fcrackzip/package.nix
+++ b/pkgs/by-name/fc/fcrackzip/package.nix
@@ -12,7 +12,7 @@ stdenv.mkDerivation (finalAttrs: {
     sha256 = "0l1qsk949vnz18k4vjf3ppq8p497966x4c7f2yx18x8pk35whn2a";
   };
 
-  CFLAGS = "-std=gnu89";
+  env.CFLAGS = "-std=gnu89";
 
   # 'fcrackzip --use-unzip' cannot deal with file names containing a single quote
   # https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=430387

From fe95f8f97e761c32ff31f28e95ee3d3ddc008b06 Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:19 +0100
Subject: [PATCH 11/27] fmi-reference-fmus: move CFLAGS into env for
 structuredAttrs

---
 pkgs/by-name/fm/fmi-reference-fmus/package.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/fm/fmi-reference-fmus/package.nix b/pkgs/by-name/fm/fmi-reference-fmus/package.nix
index 223ffb3c9e39..175d114b8844 100644
--- a/pkgs/by-name/fm/fmi-reference-fmus/package.nix
+++ b/pkgs/by-name/fm/fmi-reference-fmus/package.nix
@@ -31,7 +31,10 @@ stdenv.mkDerivation (finalAttrs: {
     "-DFMI_VERSION=${toString FMIVersion}"
     (lib.cmakeBool "WITH_FMUSIM" false)
   ];
-  CFLAGS = lib.optionalString (FMIVersion == 3) "-Wno-stringop-truncation";
+
+  env = lib.optionalAttrs (FMIVersion == 3) {
+    CFLAGS = "-Wno-stringop-truncation";
+  };
 
   meta = {
     # CMakeLists.txt explicitly states support for aarch64-darwin, but

From b93525956d8ff19fbbf6a8bf080b86b95c4ce85d Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:20 +0100
Subject: [PATCH 12/27] foot: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/fo/foot/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/fo/foot/package.nix b/pkgs/by-name/fo/foot/package.nix
index f8119264478a..424a316996cb 100644
--- a/pkgs/by-name/fo/foot/package.nix
+++ b/pkgs/by-name/fo/foot/package.nix
@@ -138,7 +138,7 @@ stdenv.mkDerivation {
 
   # recommended build flags for performance optimized foot builds
   # https://codeberg.org/dnkl/foot/src/branch/master/INSTALL.md#release-build
-  CFLAGS = if !doPgo then "-O3" else pgoCflags;
+  env.CFLAGS = if !doPgo then "-O3" else pgoCflags;
 
   # ar with gcc plugins for lto objects
   preConfigure = ''

From 538403df1f0ab42bdd5b979d9f9f5c1f180c06ca Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:20 +0100
Subject: [PATCH 13/27] gnome-network-displays: move CFLAGS into env for
 structuredAttrs

---
 pkgs/by-name/gn/gnome-network-displays/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/gn/gnome-network-displays/package.nix b/pkgs/by-name/gn/gnome-network-displays/package.nix
index b10568e8d94b..9e3ec5c16c23 100644
--- a/pkgs/by-name/gn/gnome-network-displays/package.nix
+++ b/pkgs/by-name/gn/gnome-network-displays/package.nix
@@ -78,7 +78,7 @@ stdenv.mkDerivation (finalAttrs: {
     Hence, this is not necessarily an upstream issue, but could be something
     wrong with how our gst_all_1 depend on each other.
   */
-  CFLAGS = "-I${gst_all_1.gst-plugins-base.dev}/include/gstreamer-1.0";
+  env.CFLAGS = "-I${gst_all_1.gst-plugins-base.dev}/include/gstreamer-1.0";
 
   preConfigure = ''
     patchShebangs ./build-aux/meson/postinstall.py

From ee0f68dd7fc8112c5f3b7fc618762c4099df852c Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:20 +0100
Subject: [PATCH 14/27] gtypist: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/gt/gtypist/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/gt/gtypist/package.nix b/pkgs/by-name/gt/gtypist/package.nix
index facac531cc67..5b3c20feb5b0 100644
--- a/pkgs/by-name/gt/gtypist/package.nix
+++ b/pkgs/by-name/gt/gtypist/package.nix
@@ -18,7 +18,7 @@ stdenv.mkDerivation (finalAttrs: {
     hash = "sha256-ymGAVOkfHtXvBD/MQ1ALutcByVnDGETUaI/yKEmsJS0=";
   };
 
-  CFLAGS = "-std=gnu99";
+  env.CFLAGS = "-std=gnu99";
 
   nativeBuildInputs = [ makeWrapper ];
 

From 37d905ebc0562ba3cdb5e1be4d9b55fdad3565d9 Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:21 +0100
Subject: [PATCH 15/27] knot-dns: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/kn/knot-dns/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/kn/knot-dns/package.nix b/pkgs/by-name/kn/knot-dns/package.nix
index 6919ba9ec52d..f76750056487 100644
--- a/pkgs/by-name/kn/knot-dns/package.nix
+++ b/pkgs/by-name/kn/knot-dns/package.nix
@@ -98,7 +98,7 @@ stdenv.mkDerivation (finalAttrs: {
   enableParallelBuilding = true;
   strictDeps = true;
 
-  CFLAGS = [
+  env.CFLAGS = toString [
     "-O2"
     "-DNDEBUG"
   ];

From c39b203bfc1298d4e2742683dbede65e48a0cb14 Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:21 +0100
Subject: [PATCH 16/27] lepton-eda: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/le/lepton-eda/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/le/lepton-eda/package.nix b/pkgs/by-name/le/lepton-eda/package.nix
index e685ec889d41..6e2895785fca 100644
--- a/pkgs/by-name/le/lepton-eda/package.nix
+++ b/pkgs/by-name/le/lepton-eda/package.nix
@@ -52,7 +52,7 @@ stdenv.mkDerivation rec {
     "--with-gtk3"
   ];
 
-  CFLAGS = [
+  env.CFLAGS = toString [
     "-DSCM_DEBUG_TYPING_STRICTNESS=2"
   ];
 

From f2a2964d624793c0ae0845d55ca7cb8b5e2817d8 Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:22 +0100
Subject: [PATCH 17/27] libnixxml: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/li/libnixxml/package.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/li/libnixxml/package.nix b/pkgs/by-name/li/libnixxml/package.nix
index f825d46a920a..1919f788cc0a 100644
--- a/pkgs/by-name/li/libnixxml/package.nix
+++ b/pkgs/by-name/li/libnixxml/package.nix
@@ -45,7 +45,8 @@ stdenv.mkDerivation {
     "--with-gd"
     "--with-glib"
   ];
-  CFLAGS = [
+
+  env.CFLAGS = toString [
     "-Wall"
     "-std=c90"
   ];

From 20afe0eb43621d826e94293bcc2c334f517f3d82 Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:22 +0100
Subject: [PATCH 18/27] libspf2: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/li/libspf2/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/li/libspf2/package.nix b/pkgs/by-name/li/libspf2/package.nix
index cd77d8072305..3873102de1b6 100644
--- a/pkgs/by-name/li/libspf2/package.nix
+++ b/pkgs/by-name/li/libspf2/package.nix
@@ -28,7 +28,7 @@ stdenv.mkDerivation (finalAttrs: {
       -e '/bin_PROGRAMS/s/spf_example_static//' src/spf_example/Makefile.am
   '';
 
-  CFLAGS = "-Wno-error=implicit-function-declaration";
+  env.CFLAGS = "-Wno-error=implicit-function-declaration";
 
   doCheck = true;
 

From 22634f76f949790d87945d555e027cba013b2233 Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:22 +0100
Subject: [PATCH 19/27] libxmi: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/li/libxmi/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/li/libxmi/package.nix b/pkgs/by-name/li/libxmi/package.nix
index b9c9cf118f30..8373958b7751 100644
--- a/pkgs/by-name/li/libxmi/package.nix
+++ b/pkgs/by-name/li/libxmi/package.nix
@@ -14,7 +14,7 @@ stdenv.mkDerivation (finalAttrs: {
     sha256 = "03d4ikh29l38rl1wavb0icw7m5pp7yilnv7bb2k8qij1dinsymlx";
   };
 
-  CFLAGS = "-std=gnu89";
+  env.CFLAGS = "-std=gnu89";
 
   # For the x86_64 GNU/Linux arch to be recognized by 'configure'
   preConfigure = "cp ${libtool}/share/libtool/build-aux/config.sub .";

From f94d980b2ffe0b38dda13d0c68d5685b420d4b9c Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:23 +0100
Subject: [PATCH 20/27] nasty: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/na/nasty/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/na/nasty/package.nix b/pkgs/by-name/na/nasty/package.nix
index d29c224af1ef..fcdfe5cceebe 100644
--- a/pkgs/by-name/na/nasty/package.nix
+++ b/pkgs/by-name/na/nasty/package.nix
@@ -16,7 +16,7 @@ stdenv.mkDerivation (finalAttrs: {
 
   # does not apply cleanly with patchPhase/fetchpatch
   # https://sources.debian.net/src/nasty/0.6-3/debian/patches/02_add_largefile_support.patch
-  CFLAGS = "-D_FILE_OFFSET_BITS=64";
+  env.CFLAGS = "-D_FILE_OFFSET_BITS=64";
 
   buildInputs = [ gpgme ];
 

From 9d1b31976364c9dce9d5886ad6d5536730090b1c Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:23 +0100
Subject: [PATCH 21/27] pragha: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/pr/pragha/package.nix | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/pr/pragha/package.nix b/pkgs/by-name/pr/pragha/package.nix
index e4d45b2e43c1..c6acc17d9575 100644
--- a/pkgs/by-name/pr/pragha/package.nix
+++ b/pkgs/by-name/pr/pragha/package.nix
@@ -103,9 +103,10 @@ stdenv.mkDerivation (finalAttrs: {
   # ++ lib.optional withRygel rygel
   ;
 
-  CFLAGS = [ "-DHAVE_PARANOIA_NEW_INCLUDES" ];
-
-  env.NIX_CFLAGS_COMPILE = "-I${lib.getDev gst_all_1.gst-plugins-base}/include/gstreamer-1.0";
+  env = {
+    CFLAGS = toString [ "-DHAVE_PARANOIA_NEW_INCLUDES" ];
+    NIX_CFLAGS_COMPILE = "-I${lib.getDev gst_all_1.gst-plugins-base}/include/gstreamer-1.0";
+  };
 
   postInstall = ''
     qtWrapperArgs+=(--prefix GST_PLUGIN_SYSTEM_PATH_1_0 : "$GST_PLUGIN_SYSTEM_PATH_1_0")

From c3001111fbcb3689b4fc1790fa76845ffd6f090d Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:23 +0100
Subject: [PATCH 22/27] qbootctl: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/qb/qbootctl/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/qb/qbootctl/package.nix b/pkgs/by-name/qb/qbootctl/package.nix
index d7f8607fb5c0..aace7b25fe1a 100644
--- a/pkgs/by-name/qb/qbootctl/package.nix
+++ b/pkgs/by-name/qb/qbootctl/package.nix
@@ -25,7 +25,7 @@ stdenv.mkDerivation (finalAttrs: {
     linuxHeaders
   ];
 
-  CFLAGS = [ "-I${linuxHeaders}/include" ];
+  env.CFLAGS = toString [ "-I${linuxHeaders}/include" ];
 
   passthru.updateScript = nix-update-script { };
 

From 077a408b9eedb431e350e42e23d35cee9d0461d1 Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:24 +0100
Subject: [PATCH 23/27] stp: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/st/stp/package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/by-name/st/stp/package.nix b/pkgs/by-name/st/stp/package.nix
index 45eb1b76ca84..e0aeae745c26 100644
--- a/pkgs/by-name/st/stp/package.nix
+++ b/pkgs/by-name/st/stp/package.nix
@@ -109,7 +109,7 @@ stdenv.mkDerivation (finalAttrs: {
   #
   # TODO: Remove these CFLAGS when they update to the version that pulls `abc` in with a submodule.
   # https://github.com/stp/stp/issues/498#issuecomment-2611251631
-  CFLAGS = [ "-fsigned-char" ];
+  env.CFLAGS = toString [ "-fsigned-char" ];
 
   outputs = [
     "dev"

From 48bccb78b1c64d8908712b49f5086a5bfb74b9cc Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:24 +0100
Subject: [PATCH 24/27] symmetrica: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/sy/symmetrica/package.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/sy/symmetrica/package.nix b/pkgs/by-name/sy/symmetrica/package.nix
index 44abbae5d9ae..8ce216072e8b 100644
--- a/pkgs/by-name/sy/symmetrica/package.nix
+++ b/pkgs/by-name/sy/symmetrica/package.nix
@@ -29,7 +29,10 @@ stdenv.mkDerivation (finalAttrs: {
 
   # clang warning: passing arguments to '...' without a prototype is deprecated
   # in all versions of C and is not supported in C23.
-  CFLAGS = "-std=c99 -Wno-deprecated-non-prototype";
+  env.CFLAGS = toString [
+    "-std=c99"
+    "-Wno-deprecated-non-prototype"
+  ];
 
   enableParallelBuilding = true;
 

From 5b53cef5b9709b004ceb5f6a9289817feb5abb89 Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:25 +0100
Subject: [PATCH 25/27] syncterm: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/sy/syncterm/package.nix | 20 +++++++++++---------
 1 file changed, 11 insertions(+), 9 deletions(-)

diff --git a/pkgs/by-name/sy/syncterm/package.nix b/pkgs/by-name/sy/syncterm/package.nix
index 09c4701290a6..1f85ae6b7bd4 100644
--- a/pkgs/by-name/sy/syncterm/package.nix
+++ b/pkgs/by-name/sy/syncterm/package.nix
@@ -24,16 +24,18 @@ stdenv.mkDerivation (finalAttrs: {
   # We can't use sourceRoot, as the cherry-picked patches apply to files outside of it.
   postPatch = "cd src/syncterm";
 
-  CFLAGS = [
-    "-DHAS_INTTYPES_H"
-    "-DXPDEV_DONT_DEFINE_INTTYPES"
+  env.CFLAGS = toString (
+    [
+      "-DHAS_INTTYPES_H"
+      "-DXPDEV_DONT_DEFINE_INTTYPES"
 
-    "-Wno-unused-result"
-    "-Wformat-overflow=0"
-  ]
-  ++ (lib.optionals stdenv.hostPlatform.isLinux [
-    "-DUSE_ALSA_SOUND" # Don't use OSS for beeps.
-  ]);
+      "-Wno-unused-result"
+      "-Wformat-overflow=0"
+    ]
+    ++ lib.optionals stdenv.hostPlatform.isLinux [
+      "-DUSE_ALSA_SOUND" # Don't use OSS for beeps.
+    ]
+  );
 
   makeFlags = [
     "PREFIX=$(out)"

From 4447f1cb76fb3af63af61ac6a885e778861865d6 Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:25 +0100
Subject: [PATCH 26/27] unixcw: move CFLAGS into env for structuredAttrs

---
 pkgs/by-name/un/unixcw/package.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pkgs/by-name/un/unixcw/package.nix b/pkgs/by-name/un/unixcw/package.nix
index 913bd71693bf..b5b0d148600e 100644
--- a/pkgs/by-name/un/unixcw/package.nix
+++ b/pkgs/by-name/un/unixcw/package.nix
@@ -43,7 +43,10 @@ stdenv.mkDerivation (finalAttrs: {
     ncurses
   ];
 
-  CFLAGS = "-lasound -lpulse-simple";
+  env.CFLAGS = toString [
+    "-lasound"
+    "-lpulse-simple"
+  ];
 
   meta = {
     description = "Sound characters as Morse code on the soundcard or console speaker";

From 2a29f30f7508af75b780276891a7dc664893747f Mon Sep 17 00:00:00 2001
From: Stefan Frijters <sfrijters@gmail.com>
Date: Thu, 19 Feb 2026 19:23:46 +0100
Subject: [PATCH 27/27] dvtm*: move CFLAGS into env for structuredAttrs

---
 pkgs/tools/misc/dvtm/dvtm.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/pkgs/tools/misc/dvtm/dvtm.nix b/pkgs/tools/misc/dvtm/dvtm.nix
index bf162bbce815..fcebb7734b36 100644
--- a/pkgs/tools/misc/dvtm/dvtm.nix
+++ b/pkgs/tools/misc/dvtm/dvtm.nix
@@ -17,7 +17,9 @@ stdenv.mkDerivation {
     patches
     ;
 
-  CFLAGS = lib.optionalString stdenv.hostPlatform.isDarwin "-D_DARWIN_C_SOURCE";
+  env = lib.optionalAttrs stdenv.hostPlatform.isDarwin {
+    CFLAGS = "-D_DARWIN_C_SOURCE";
+  };
 
   postPatch = lib.optionalString (customConfig != null) ''
     cp ${builtins.toFile "config.h" customConfig} ./config.h