nixos-config/.github/workflows/ci.yml

name: "CI"
on:
  workflow_dispatch:
  push:
    branches: [main]
jobs:
  parse-flake:
    runs-on: ubuntu-latest
    outputs:
      packages: ${{ steps.packages.outputs.packages }}
      checks: ${{ steps.checks.outputs.checks }}
      servers: ${{ steps.servers.outputs.servers }}
      workstations: ${{ steps.workstations.outputs.workstations }}
    steps:
      - uses: actions/checkout@v5
      - uses: cachix/install-nix-action@v31
        with:
          extra_nix_config: experimental-features = nix-command flakes pipe-operators
      - name: Get packages
        id: packages
        run: |
          packages=$(nix flake show --json | jq -c '.packages."x86_64-linux" | keys')
          printf "packages=%s" "$packages" >> "$GITHUB_OUTPUT"
      - name: Get checks
        id: checks
        run: |
          checks=$(nix flake show --json | jq -c '.checks."x86_64-linux" | keys')
          printf "checks=%s" "$checks" >> "$GITHUB_OUTPUT"
      - name: Get servers
        id: servers
        run: |
          servers=$(nix eval .#nixosConfigurations --apply 'configs:
            configs
            |> builtins.attrNames
            |> builtins.filter (name: configs.${name}.config.custom.services.comin.enable)
          ' --json)
          printf "servers=%s" "$servers" >> "$GITHUB_OUTPUT"
      - name: Get workstations
        id: workstations
        run: |
          workstations=$(nix eval .#nixosConfigurations --apply 'configs:
            configs
            |> builtins.attrNames
            |> builtins.filter (name: !configs.${name}.config.custom.services.comin.enable)
          ' --json)
          printf "workstations=%s" "$workstations" >> "$GITHUB_OUTPUT"
  build-package:
    needs: parse-flake
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        package: ${{ fromJson(needs.parse-flake.outputs.packages) }}
    steps:
      - uses: actions/checkout@v5
      - uses: cachix/install-nix-action@v31
        with:
          extra_nix_config: experimental-features = nix-command flakes pipe-operators
      - uses: cachix/cachix-action@v15
        with:
          name: sebastian-stork
          authToken: "${{ secrets.CACHIX_AUTH_TOKEN }}"
          useDaemon: false
      - name: Build package
        run: nix build .#packages.x86_64-linux.${{ matrix.package }} --print-build-logs
  build-check:
    needs: parse-flake
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        check: ${{ fromJson(needs.parse-flake.outputs.checks) }}
    steps:
      - uses: actions/checkout@v5
      - uses: cachix/install-nix-action@v31
        with:
          extra_nix_config: experimental-features = nix-command flakes pipe-operators
      - uses: cachix/cachix-action@v15
        with:
          name: sebastian-stork
          authToken: "${{ secrets.CACHIX_AUTH_TOKEN }}"
          useDaemon: false
      - name: Build check
        run: nix build .#checks.x86_64-linux.${{ matrix.check }} --print-build-logs
  build-server:
    needs: parse-flake
    uses: ./.github/workflows/build-host.yml
    with:
      hosts: ${{ needs.parse-flake.outputs.servers }}
    secrets:
      CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }}
  build-workstation:
    needs: parse-flake
    uses: ./.github/workflows/build-host.yml
    with:
      hosts: ${{ needs.parse-flake.outputs.workstations }}
    secrets:
      CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }}
  deploy:
    needs: [build-check, build-server]
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v5
      - name: Push to deploy branch
        run: git push origin HEAD:deploy --force
  notify-success:
    if: always() && !contains(needs.*.result, 'failure') && !contains(needs.*.result, 'cancelled')
    needs: [build-package, build-check, build-server, build-workstation, deploy]
    runs-on: ubuntu-latest
    steps:
      - name: Send ntfy success notification
        run: |
          curl -s \
            -H "Title: CI succeeded" \
            -H "Priority: low" \
            -H "Tags: white_check_mark" \
            -H "Actions: view, Open workflow run, ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}" \
            -d "Commit ${{ github.sha }} succeeded." \
            https://ntfy.sh/splitleaf
  notify-failure:
    if: always() && contains(needs.*.result, 'failure')
    needs: [build-package, build-check, build-server, build-workstation, deploy]
    runs-on: ubuntu-latest
    steps:
      - name: Send ntfy failure notification
        run: |
          curl -s \
            -H "Title: CI failed" \
            -H "Priority: default" \
            -H "Tags: rotating_light" \
            -H "Actions: view, Open workflow run, ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}" \
            -d "Commit ${{ github.sha }} failed." \
            https://ntfy.sh/splitleaf