1 files changed, 24 insertions, 2 deletions
diff --git a/third_party/lieer/default.nix b/third_party/lieer/default.nix
index 0c399db158b5..2f58d5f1179b 100644
--- a/third_party/lieer/default.nix
+++ b/third_party/lieer/default.nix
@@ -5,9 +5,28 @@
 # version using the previous branding (gmailieer).
 { pkgs, ... }:
 
+# For a variety of reasons (specific to my setup), custom OAuth2
+# scopes are used.
+#
+# The below client ID is the default for *@tazj.in and is overridden
+# in a private repository for my work account. Publishing it here is
+# not a security issue.
+{
+  clientId ? "515965513093-7b4bo4gm0q09ccsmikkuaas9a40j0jcj.apps.googleusercontent.com",
+  clientSecret ? "3jVbpfT4GmubFD64svctJSdQ",
+  project ? "tazjins-infrastructure"
+}:
+
 with pkgs.third_party;
 
-python3Packages.buildPythonApplication rec {
+let
+  authPatch = runCommand "client_secret.patch" {} ''
+    export CLIENT_ID='${clientId}'
+    export CLIENT_SECRET='${clientSecret}'
+    export PROJECT_ID='${project}'
+    cat ${./api_client.patch} | ${gettext}/bin/envsubst > $out
+  '';
+in python3Packages.buildPythonApplication rec {
   name = "lieer-${version}";
   version = "1.0";
 
@@ -18,7 +37,10 @@ python3Packages.buildPythonApplication rec {
     sha256 = "1zzylv8xbcrh34bz0s29dawzcyx39lai8y8wk0bl4x75v1jfynvf";
   };
 
-  patches = [ ./send_scope.patch ];
+  patches = [
+    authPatch
+    ./send_scope.patch
+  ];
 
   propagatedBuildInputs = with python3Packages; [
     notmuch