vriska.bsky.social
Nix defines a "lockable HTTP tarball protocol" for flake sources. In summary, if a flake.nix contains something like inputs.abc.url = "https://example.com/abc.tar.gz"; then a Link: <https://example.com/def.tar.gz>; rel="immutable" header in the response will record the latter URL in the flake.lock. This allows efficiently using Git repositories as flake inputs.
See this Forgejo PR for some further information: https://codeberg.org/forgejo/forgejo/pulls/3615
this has been implemented and released:
tangled.org
Ξ» nix flake metadata -v --refresh --no-write-lock-file https://tangled.org/oppi.li/statix/archive/main.tar.gz
unpacking 'https://tangled.org/oppi.li/statix/archive/main.tar.gz' into the Git cache...
Resolved URL: https://tangled.org/oppi.li/statix/archive/main.tar.gz
Locked URL: https://tangled.org/did:plc:qfpnj4og54vl56wngdriaxug/statix/archive/e9df54ce918457f151d2e71993edeca1a7af0132.tar.gz?narHash=sha256-duH6Il124g%2BCdYX%2BHCqOGnpJxyxOCgWYcrcK0CBnA2M%3D
Path: /nix/store/fc39clh8drpx5jrp3gv06mwfmi9vvi2q-source
Fingerprint: ea9f306acab04684c1ec1389374bd8e0c7284f846b65ebc7e8b7e290a9508c5e
Inputs:
ββββflake-parts: github:hercules-ci/flake-parts/af66ad14b28a127c5c0f3bbb298218fc63528a18?narHash=sha256-pHYj8gUBapuUzKV/kN/tR3Zvqc7o6gdFB9XKXIp1SQ8%3D (2025-08-06 13:36:06)
β ββββnixpkgs-lib follows input 'nixpkgs'
ββββnixpkgs: github:nixos/nixpkgs/32f313e49e42f715491e1ea7b306a87c16fe0388?narHash=sha256-nNaeJjo861wFR0tjHDyCnHs1rbRtrMgxAKMoig9Sj/w%3D (2025-08-15 14:26:43)
ββββsystems: github:nix-systems/default/da67096a3b9bf56a91d16901293e51ba5b49a27e?narHash=sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768%3D (2023-04-09 08:27:08)
this document looks like a good resource.