name: Build
on:
  push:
    branches: [main]

jobs:
  build:
    runs-on: nix
    steps:
      - uses: https://github.com/actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Unlock git-crypt
        run: |
          git-crypt unlock /run/agenix/git-crypt-key-dotfiles

      - name: Build NixOS configuration (yarn)
        run: |
          nix build .#nixosConfigurations.yarn.config.system.build.toplevel -L

      - name: Record yarn store path for pull-update
        continue-on-error: true
        run: |
          mkdir -p /var/lib/dotfiles-deploy
          readlink -f result > /var/lib/dotfiles-deploy/yarn
          nix-store --add-root /var/lib/dotfiles-deploy/yarn-gcroot -r "$(readlink -f result)"

      - name: Build NixOS configuration (mreow)
        run: |
          nix build .#nixosConfigurations.mreow.config.system.build.toplevel -L

      - name: Record mreow store path
        continue-on-error: true
        run: |
          mkdir -p /var/lib/dotfiles-deploy
          readlink -f result > /var/lib/dotfiles-deploy/mreow
          nix-store --add-root /var/lib/dotfiles-deploy/mreow-gcroot -r "$(readlink -f result)"