nixos/.forgejo/workflows/deploy.yaml

name: Build_Deploy

on:
  workflow_run:
    workflows: [ "Update_Flake" ]
    types:
      - completed
  push:
    paths:
      - applications/**/*
      - machines/**/*
      - secrets/**/*
      - flake.*
      - config/**/*
      - .forgejo/**/*

jobs:
#  linter:
#    runs-on: nix
#    steps:
#      - uses: actions/checkout@v4
#      - run: nix fmt -- --check .
#
#  #if: github.repository == 'Skynet/nixos'
#  build:
#    runs-on: nix
#    steps:
#      - uses: actions/checkout@v4
#      - run: nix develop
#      - run: colmena build -v --on @active-dns
#      - run: colmena build -v --on @active-core
#      - run: colmena build -v --on @active
#      - run: colmena build -v --on @active-ext
#      - run: colmena build -v --on @active-gitlab

  deploy_dns:
    runs-on: ubuntu-latest
#    needs: [ linter, build ]
    steps:
      - uses: actions/checkout@v4
      # setup deploy key
      - run: |
          whoami
          eval $(ssh-agent -s)
          echo "${{ secrets.DEPLOY_KEY }}" | tr -d '\r' | ssh-add -
          mkdir -p ~/.ssh
          chmod 700 ~/.ssh
          echo -e "Host *\n\tStrictHostKeyChecking no\n\n" > ~/.ssh/config
      - run: |
          alias ssh="ssh -vv"
          ssh -t root@193.1.99.120 'ls -lah'
          export SSH_CONFIG_FILE="/home/gitea-runner/.ssh/config"
          colmena apply -v --on @active-dns --show-trace
        shell: bash