on: [push]
jobs:
  check:
    runs-on: nix
    steps:
      - uses: https://code.forgejo.org/actions/checkout@v3
      - run: nix flake check .

  deploy:
    runs-on: nix
    needs: check
    if: contains(github.event.head_commit.message, '[deploy]')
    steps:
      - uses: https://code.forgejo.org/actions/checkout@v3
      - name: Setup SSH key
        run: |
          mkdir -p ~/.ssh
          chmod 700 ~/.ssh
          echo "$SSHKEY" > ~/.ssh/id_ed25519
          chmod 600 ~/.ssh/id_ed25519
          echo -e "Host *\n  StrictHostKeyChecking no\n  UserKnownHostsFile=/dev/null" >> ~/.ssh/config

        env:
          SSHKEY: ${{ secrets.SSHKEY }}
      - run: nix develop .#default -c deploy --skip-check