From 42ec628b172ed7efcd90bfabe8bb6b81aaa52c2e Mon Sep 17 00:00:00 2001
From: SebastianStork <git@sstork.dev>
Date: Sun, 15 Feb 2026 23:22:35 +0100
Subject: [PATCH 1/4] workflows: Add deploy stage to CI pipeline

---
 .github/workflows/{test.yml => ci.yml} | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)
 rename .github/workflows/{test.yml => ci.yml} (60%)

diff --git a/.github/workflows/test.yml b/.github/workflows/ci.yml
similarity index 60%
rename from .github/workflows/test.yml
rename to .github/workflows/ci.yml
index dbba8ab..c50046a 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/ci.yml
@@ -1,9 +1,9 @@
-name: "Test"
+name: "CI"
 on:
-  pull_request:
   push:
+    branches: [main]
 jobs:
-  tests:
+  check:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
@@ -13,3 +13,11 @@ jobs:
           name: sebastian-stork
           authToken: "${{ secrets.CACHIX_AUTH_TOKEN }}"
       - run: nix flake --extra-experimental-features pipe-operators check
+  deploy:
+    needs: check
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v5
+      - run: git push origin HEAD:deploy --force

From e19c14daaf2a743f171ef673de0657eb9b26861c Mon Sep 17 00:00:00 2001
From: SebastianStork <git@sstork.dev>
Date: Sun, 15 Feb 2026 23:29:02 +0100
Subject: [PATCH 2/4] workflows/ci: Enable pipes for the whole `check` job

---
 .github/workflows/ci.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c50046a..6c9a65a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -8,11 +8,13 @@ jobs:
     steps:
       - uses: actions/checkout@v5
       - uses: cachix/install-nix-action@v31
+        with:
+          extra_nix_config: experimental-features = pipe-operators
       - uses: cachix/cachix-action@v15
         with:
           name: sebastian-stork
           authToken: "${{ secrets.CACHIX_AUTH_TOKEN }}"
-      - run: nix flake --extra-experimental-features pipe-operators check
+      - run: nix flake check
   deploy:
     needs: check
     runs-on: ubuntu-latest

From eddb6bf0b8d8dcc5b96ec321c04317176257128f Mon Sep 17 00:00:00 2001
From: SebastianStork <git@sstork.dev>
Date: Sun, 15 Feb 2026 23:31:31 +0100
Subject: [PATCH 3/4] comin: Pull from the `deploy` branch

---
 modules/system/services/comin.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/system/services/comin.nix b/modules/system/services/comin.nix
index 76bcc79..d7f495f 100644
--- a/modules/system/services/comin.nix
+++ b/modules/system/services/comin.nix
@@ -15,6 +15,7 @@
       remotes = lib.singleton {
         name = "origin";
         url = "https://github.com/SebastianStork/nixos-config.git";
+        branches.main.name = "deploy";
       };
     };
   };

From 6f78be2e0fbda809ecd8c805595c3fd78f70a806 Mon Sep 17 00:00:00 2001
From: SebastianStork <git@sstork.dev>
Date: Mon, 16 Feb 2026 00:16:35 +0100
Subject: [PATCH 4/4] workflows/ci: Fix experimental features

---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6c9a65a..488a790 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -9,7 +9,7 @@ jobs:
       - uses: actions/checkout@v5
       - uses: cachix/install-nix-action@v31
         with:
-          extra_nix_config: experimental-features = pipe-operators
+          extra_nix_config: experimental-features = nix-command flakes pipe-operators
       - uses: cachix/cachix-action@v15
         with:
           name: sebastian-stork