name: Build_Deploy

on:
  workflow_run:
    workflows: [ "Update_Flake" ]
    types:
      - completed
  push:
    paths:
      - applications/**/*
      - machines/**/*
      - secrets/**/*
      - flake.*
      - config/**/*

jobs:
  linter:
    runs-on: nix
    steps:
      - uses: actions/checkout@v4
      - run: nix fmt -- --check .

  #if: github.repository == 'Skynet/nixos'
  build:
    runs-on: nix
    steps:
      - uses: actions/checkout@v4
      - run: nix develop
      - run: colmena build -v --on @active-dns
      - run: colmena build -v --on @active-core
      - run: colmena build -v --on @active
      - run: colmena build -v --on @active-ext
      - run: colmena build -v --on @active-gitlab

  deploy_dns:
    runs-on: nix
    needs: [ linter, build ]
    steps:
      - uses: actions/checkout@v4
      # setup deploy key
      - run: |
          eval $(ssh-agent -s)
          echo "${{ secrets.DEPLOY_KEY }}" | tr -d '\r' | ssh-add - > /dev/null
          mkdir -p ~/.ssh
          chmod 700 ~/.ssh
      - run: colmena apply -v --on @active-dns