diff --git a/flake.nix b/flake.nix
index 9b115a4..e1c0ef9 100644
--- a/flake.nix
+++ b/flake.nix
@@ -12,16 +12,7 @@
     in
     {
       packages = forAllSystems (pkgs: {
-        default = pkgs.buildGoModule {
-          pname = "nix-cache-login";
-          version = "0.1.0";
-          src = ./.;
-          vendorHash = "sha256-1s77IEGP7/6sgXSNdByRQqisLHSeJuRSsrnxUGfkxos=";
-          meta = {
-            description = "CLI tool for authenticating with a Nix binary cache via OIDC";
-            mainProgram = "nix-cache-login";
-          };
-        };
+        default = pkgs.callPackage ./package.nix { };
       });
 
       apps = forAllSystems (pkgs: {
diff --git a/package.nix b/package.nix
new file mode 100644
index 0000000..c5344f1
--- /dev/null
+++ b/package.nix
@@ -0,0 +1,22 @@
+{
+  lib,
+  buildGoModule,
+  fetchgit,
+}:
+
+buildGoModule {
+  pname = "nix-cache-login";
+  version = "0.1.0";
+  src = ./.;
+  # src = fetchgit {
+  #   url = "https://guardianproject.dev/ops/nix-cache-login.git";
+  #   rev = "v0.1.0";
+  #   hash = "";
+  # };
+  vendorHash = "sha256-1s77IEGP7/6sgXSNdByRQqisLHSeJuRSsrnxUGfkxos=";
+  meta = {
+    description = "CLI tool for authenticating with a Nix binary cache via OIDC";
+    mainProgram = "nix-cache-login";
+    license = lib.licenses.gpl3Plus;
+  };
+}