{
  inputs,
  pkgs,
  lib,
  ...
}:
let
  inherit (inputs) pre-commit-hooks-nix;
in
pre-commit-hooks-nix.lib.${pkgs.stdenv.hostPlatform.system}.run {
  src = ../..;
  hooks = {
    pre-commit-hook-ensure-sops = {
      enable = true;
      excludes = [
        "secrets/.*\\.jwe$"
        "secrets/.*\\.key$"
      ];
    };
    treefmt = {
      enable = lib.mkForce true;
      settings.fail-on-change = lib.mkForce false;
      packageOverrides.treefmt = inputs.treefmt-nix.lib.mkWrapper pkgs (
        lib.snowfall.fs.get-file "treefmt.nix"
      );
    };
    nixfmt-rfc-style = {
      enable = true;
      package = pkgs.nixfmt;
    };
    # statix disabled - too many false positives (manual_inherit warnings)
    # statix = {
    #   enable = true;
    #   args = [
    #     "--config"
    #     (lib.snowfall.fs.get-file "statix.toml")
    #   ];
    # };
  };
}