prev: final: let
  zerossl = prev.fetchpatch {
    url = "https://patch-diff.githubusercontent.com/raw/go-acme/lego/pull/1501.patch";
    hash = "sha256-hLuWX607T8tcqljpBzEADViZd2FABkCgjNCLXMyWpuA=";
  };
in {
  lego = prev.buildGoModule rec {
    pname = "lego";
    version = "4.6.0";

    src = prev.fetchFromGitHub {
      owner = "go-acme";
      repo = pname;
      rev = "v${version}";
      sha256 = "sha256-FisQS/qbl7f4aszc2Ft6nmuHNrDreOQdN0jrWMOvaAk=";
    };
    patches = [zerossl];

    vendorSha256 = "sha256-cLM4YGguQf7lO5PUPmd/at1Aqrp9m8zFG6GWqcduJmw=";

    doCheck = false;

    subPackages = [ "cmd/lego" ];

    ldflags = [
      "-X main.version=${version}"
    ];
  };
}