{
  lib,
  aiohttp,
  buildPythonPackage,
  colorlog,
  cryptography,
  fetchFromGitHub,
  go,
  pykerberos,
  hatchling,
  skein,
  sqlalchemy,
  traitlets,
}:

buildPythonPackage rec {
  pname = "dask-gateway-server";
  version = "2025.4.0";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "dask";
    repo = "dask-gateway";
    tag = version;
    hash = "sha256-Ezt5QkA21SDfuCMm+XY8d+xso8SDb4lmK/yd89Guu0Y=";
  };

  sourceRoot = "${src.name}/${pname}";

  nativeBuildInputs = [ go ];

  build-system = [ hatchling ];

  dependencies = [
    aiohttp
    colorlog
    cryptography
    traitlets
  ];

  optional-dependencies = {
    kerberos = [ pykerberos ];
    jobqueue = [ sqlalchemy ];
    local = [ sqlalchemy ];
    yarn = [
      skein
      sqlalchemy
    ];
  };

  preBuild = ''
    export HOME=$(mktemp -d)
  '';

  # Tests requires cluster for testing
  doCheck = false;

  pythonImportsCheck = [ "dask_gateway_server" ];

  meta = {
    description = "Multi-tenant server for securely deploying and managing multiple Dask clusters";
    homepage = "https://gateway.dask.org/";
    license = lib.licenses.bsd3;
    maintainers = [ ];
  };
}