image: debian/stretch
packages:
  - curl
triggers:
  - condition: failure
    action: email
    to: EuAndreh <ci@euandre.org>
sources:
  - https://git.sr.ht/~euandreh/vps
  - https://git.sr.ht/~euandreh/vps-state
secrets:
  - d587955c-03fb-42ba-9e01-68ca8ed89f99
  - 7084b7c7-12be-4509-8927-81ba6eeb1fc0
tasks:
  - setup: |
      sudo mkdir -m 0755 /nix
      sudo chown -R build /nix
      curl https://nixos.org/nix/install | sh
      echo '. ~/.nix-profile/etc/profile.d/nix.sh' >> ~/.buildenv
      cd vps/
      git crypt unlock
  - tests: |
      cd vps/
      nix-build -A test
  - deploy: |
      cd vps/
      nix-shell --run "bash -c ./provision.sh"