pipeline:
  check:
    image: nixpkgs/nix-flakes:latest
    pull: true
    commands:
      - nix --no-sandbox flake info
      - nix --no-sandbox develop -c statix check
    volumes:
      - /var/lib/woodpecker/cache/nixstore:/nix/store

  push-to-sourcehut:
    image: nixpkgs/nix-flakes:latest
    pull: true
    secrets: [ ssh_public_key ssh_private_key ]
    commands:
      - mkdir -p ~/.ssh/
      - echo "$SSH_PRIVATE_KEY" > ~/.ssh/id_ed25519
      - echo "$SSH_PUBLIC_KEY" > ~/.ssh/id_ed25519.pub
      - echo "StrictHostKeyChecking=accept-new" >> ~/.ssh/config
      - chmod 0400 ~/.ssh/ -R
      - ls -hal ~/.ssh/
      - git remote add sourcehut git@git.sr.ht:~cyplo/dotfiles
      - git push sourcehut --tags --force-with-lease
      - git push sourcehut --all --force-with-lease