diff --git a/.envrc b/.envrc
index a094d01..921e1fa 100644
--- a/.envrc
+++ b/.envrc
@@ -1 +1,2 @@
 export SOPS_AGE_KEY_FILE="$(expand_path ./age.key)"
+use nix
diff --git a/.gitignore b/.gitignore
index 437c38b..4a43266 100644
--- a/.gitignore
+++ b/.gitignore
@@ -14,6 +14,9 @@
 # Ignore the built binary
 cert-manager-webhook-example
 
+# direnv nix binaries
+.direnv
+
 # Make artifacts
 _out
 _test
diff --git a/shell.nix b/shell.nix
new file mode 100644
index 0000000..aa7bf04
--- /dev/null
+++ b/shell.nix
@@ -0,0 +1,16 @@
+# Shell for bootstrapping flake-enabled nix and home-manager
+{pkgs ? import <nixpkgs> {}}:
+pkgs.mkShell {
+  # Enable experimental features without having to specify the argument
+  NIX_CONFIG = "experimental-features = nix-command flakes";
+
+  nativeBuildInputs = with pkgs; [
+    git
+    gitleaks
+    go-task
+    pre-commit
+    sops
+    gnumake
+  ];
+}
+