ci.yaml

name: CI
on:
  push:
jobs:
  pre_ci:
    uses: dtolnay/.github/.github/workflows/pre_ci.yml@master
  build:
    strategy:
      fail-fast: false
      matrix:
        nixosConfig:
          - artemis
          # - delphi
          - minimal
    name: Build ${{ matrix.nixosConfig }}
    runs-on: ubuntu-latest
    needs: pre_ci
    if: needs.pre_ci.outputs.continue
    steps:
      - uses: actions/checkout@v4
      - uses: cachix/install-nix-action@7ac1ec25491415c381d9b62f0657c7a028df52a7 # v24
      - uses: cachix/cachix-action@v13
        with:
          name: uwumarie
          authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
      - run: nix build .#nixosConfigurations.${{ matrix.nixosConfig }}.config.system.build.toplevel --accept-flake-config

  build-packages:
    strategy:
      fail-fast: false
      matrix:
        package:
          - installer-stable
          - deploy
    name: Build package ${{ matrix.package }}
    runs-on: ubuntu-latest
    needs: pre_ci
    if: needs.pre_ci.outputs.continue
    steps:
      - uses: actions/checkout@v4
      - uses: cachix/install-nix-action@7ac1ec25491415c381d9b62f0657c7a028df52a7 # v24
      - uses: cachix/cachix-action@v13
        with:
          name: uwumarie
          authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
      - run: nix build .#packages.x86_64-linux.${{ matrix.package }}

  opentofu:
    name: Check OpenTofu infra
    runs-on: ubuntu-latest
    needs: pre_ci
    if: needs.pre_ci.outputs.continue
    steps:
      - uses: actions/checkout@v4
      - uses: cachix/install-nix-action@7ac1ec25491415c381d9b62f0657c7a028df52a7 # v24
      - name: Initialize OpenTofu
        run: nix run .#opentofu -- -chdir=infra init
        env:
          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
      - name: Validate OpenTofu infra
        run: nix run .#opentofu -- -chdir=infra validate
        env:
          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}