{
  inputs.nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";

  outputs = {
    nixpkgs,
    self,
  }: let
    pkgs = nixpkgs;

    mkAllSystems = lib.genAttrs [
      "aarch64-darwin"
      "aarch64-linux"
      "i686-linux"
      "x86_64-darwin"
      "x86_64-linux"
    ];

    inherit (pkgs) lib;
  in {
    formatter = mkAllSystems (system: pkgs.legacyPackages.${system}.alejandra);

    devShells = mkAllSystems (system: let
      pkgs = nixpkgs.legacyPackages.${system};

      inherit (pkgs) mkShell;
    in rec {
      default = mkShell {
        nativeBuildInputs = [pkgs.dnscontrol];

        shellHook =
          # Auth Token
          ''
            echo "Bitte einen deSEC-Auth-Token eingeben:"
            read -rs DESEC_AUTH_TOKEN
            export DESEC_AUTH_TOKEN
          ''
          # Zonen-Datei generieren
          + ''
            generate-zone-file () {
              if [[ "$1" != "" ]]; then
                dnscontrol get-zone --format=zone --out $1.zone' desec - $1
              else
                echo "Bitte eine valide Domain eingeben"
              fi
            };
          '';
      };
    });
  };
}