diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..c4a847d
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+/result
diff --git a/default.nix b/default.nix
index a6be51c..440aabf 100644
--- a/default.nix
+++ b/default.nix
@@ -8,11 +8,10 @@ buildGoModule {
 
   src = fetchGit {
     url = "https://git.cycore.io/scm/pass-totp.git";
-    ref = "master";
-    sha256 = "sha256-XgHxRChcyeoUibIFAleROUCPskHDzZSD1Kl7FUMVt7U=";
+    ref = "main";
   };
 
-  vendorSha256 = "sha256-rixop68iSE+OHjtMyLBbnphnjFBEtItqgheq2MyEfnc=";
+  vendorHash = null;
 
   meta = with lib; {
     description = "totp plugin for pass";
diff --git a/flake.lock b/flake.lock
new file mode 100644
index 0000000..d0dba55
--- /dev/null
+++ b/flake.lock
@@ -0,0 +1,26 @@
+{
+  "nodes": {
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1751741127,
+        "narHash": "sha256-t75Shs76NgxjZSgvvZZ9qOmz5zuBE8buUaYD28BMTxg=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "29e290002bfff26af1db6f64d070698019460302",
+        "type": "github"
+      },
+      "original": {
+        "id": "nixpkgs",
+        "ref": "nixos-25.05",
+        "type": "indirect"
+      }
+    },
+    "root": {
+      "inputs": {
+        "nixpkgs": "nixpkgs"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}
diff --git a/flake.nix b/flake.nix
index 4242f7f..8b75853 100644
--- a/flake.nix
+++ b/flake.nix
@@ -38,17 +38,7 @@
             # in the Nix store.
             src = ./.;
 
-            # This hash locks the dependencies of this package. It is
-            # necessary because of how Go requires network access to resolve
-            # VCS.  See https://www.tweag.io/blog/2021-03-04-gomod2nix/ for
-            # details. Normally one can build with a fake sha256 and rely on native Go
-            # mechanisms to tell you what the hash should be or determine what
-            # it should be "out-of-band" with other tooling (eg. gomod2nix).
-            # To begin with it is recommended to set this, but one must
-            # remeber to bump this hash when your dependencies change.
-            #vendorSha256 = pkgs.lib.fakeSha256;
-
-            vendorHash = "sha256-rixop68iSE+OHjtMyLBbnphnjFBEtItqgheq2MyEfnc=";
+            vendorHash = null;
           };
         });