diff --git a/.envrc b/.envrc
new file mode 100644
index 0000000..f59b4d9
--- /dev/null
+++ b/.envrc
@@ -0,0 +1,5 @@
+if ! has nix_direnv_version || ! nix_direnv_version 3.0.4; then
+    source_url "https://raw.githubusercontent.com/nix-community/nix-direnv/3.0.4/direnvrc" "sha256-DzlYZ33mWF/Gs8DDeyjr8mnVmQGx7ASYqA5WlxwvBG4="
+fi
+watch_file devShell.nix shell.nix flake.nix
+use flake || use nix
diff --git a/.gitignore b/.gitignore
index 887b6ee..5796cc5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,5 @@ deps
 .eunit
 .project
 _build
+.direnv
+
diff --git a/flake.lock b/flake.lock
new file mode 100644
index 0000000..f0ad25e
--- /dev/null
+++ b/flake.lock
@@ -0,0 +1,61 @@
+{
+  "nodes": {
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1701282334,
+        "narHash": "sha256-MxCVrXY6v4QmfTwIysjjaX0XUhqBbxTWWB4HXtDYsdk=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "057f9aecfb71c4437d2b27d3323df7f93c010b7e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "23.11",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "nixpkgs": "nixpkgs",
+        "utils": "utils"
+      }
+    },
+    "systems": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "utils": {
+      "inputs": {
+        "systems": "systems"
+      },
+      "locked": {
+        "lastModified": 1710146030,
+        "narHash": "sha256-SZ5L6eA7HJ/nmkzGG7/ISclqe6oZdOZTNoesiInkXPQ=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "b1d9ab70662946ef0850d488da1c9019f3a9752a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}
diff --git a/flake.nix b/flake.nix
new file mode 100644
index 0000000..ec01bfb
--- /dev/null
+++ b/flake.nix
@@ -0,0 +1,35 @@
+{
+  description = "A Helm Chart for OpenLDAP.";
+
+  inputs = {
+    # nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
+    nixpkgs.url = "github:NixOS/nixpkgs/23.11";
+    utils.url = "github:numtide/flake-utils";
+  };
+
+  outputs =
+    { self, nixpkgs, ... }@inputs:
+    inputs.utils.lib.eachSystem
+      [
+        "x86_64-linux"
+        "i686-linux"
+        "aarch64-linux"
+        "x86_64-darwin"
+      ]
+      (
+        system:
+        let
+          pkgs = import nixpkgs {
+            inherit system;
+            overlays = [ ];
+            config.allowUnfree = true;
+          };
+        in
+        {
+          flake-utils.inputs.systems.follows = "system";
+          formatter = with pkgs; [ nixfmt ];
+          devShells.default = import ./shell.nix { inherit pkgs; };
+          DOCKER_BUILDKIT = 1;
+        }
+      );
+}
diff --git a/shell.nix b/shell.nix
new file mode 100644
index 0000000..2f9e9a7
--- /dev/null
+++ b/shell.nix
@@ -0,0 +1,56 @@
+{
+  pkgs ? import <nixpkgs> { },
+}:
+with pkgs;
+
+mkShell rec {
+  name = "hanoidb";
+  packages = with pkgs; [
+    bashInteractive
+    gigalixir
+    inotify-tools
+    libnotify
+  ];
+  buildInputs = [
+    # basics
+    curl
+    git
+    openssh
+    ripgrep
+    shellcheck
+
+    # BEAM support
+    beam.interpreters.erlangR26
+    beam.packages.erlangR26.elixir_1_15
+    nodejs-18_x
+
+    # elixir-typst support
+    pkgs.iconv
+
+    # rust support
+    cargo
+  ];
+  shellHook =
+    let
+      icon = "f121";
+    in
+    ''
+      export PS1="$(echo -e '\u${icon}') {\[$(tput sgr0)\]\[\033[38;5;228m\]\w\[$(tput sgr0)\]\[\033[38;5;15m\]} (${name}) \\$ \[$(tput sgr0)\]"
+      alias gitc="git -c user.email=gburd@symas.com commit --gpg-sign=1FC1E7793410DE46 ."
+
+      # allows mix to work on the local directory
+      mkdir -p .nix-mix
+      mkdir -p .nix-hex
+      export MIX_HOME=$PWD/.nix-mix
+      export HEX_HOME=$PWD/.nix-hex
+      export PATH=$MIX_HOME/bin:$PATH
+      export PATH=$HEX_HOME/bin:$PATH
+      export LANG=en_US.UTF-8
+      export ERL_AFLAGS="-kernel shell_history enabled"
+    '';
+}
+
+# NOTES:
+# * https://github.com/fbettag/nixos-erlang-flake/blob/main/flake.nix
+# * https://discourse.nixos.org/t/installing-different-versions-of-elixir-and-erlang/35765/5
+#   * https://github.com/fbettag/nixos-erlang-flake/blob/main/flake.nix