well there's more nixification that could be done, but this fixes my biggest gripe atm (deps fetching)

build.sh

@@ -1,6 +1,14 @@
-#!/bin/bash
+#! /usr/bin/env nix-shell
+#! nix-shell -i bash --pure
+#! nix-shell -p bash harfbuzz soupault woff2 jotdown --pure
 
-./deps.sh || exit $?
+if ! [[ -d pgvv/ ]]; then
+	python3 -m venv pgvv
+	source ./pgvv/bin/activate
+	python3 -m pip install --upgrade pip
+	pip install --upgrade pygments
+	deactivate
+fi
 
 find acl.cool/serve/ ytheleus.org/serve/ -type f -mmin +11 -delete