on: [push]
jobs:
  build:
    runs-on: cacher
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Drop in ops/secrets/default.nix
        run: |
          echo "$OPS_SECRETS_DEFAULTNIX" > ops/secrets/default.nix
        env:
          OPS_SECRETS_DEFAULTNIX: "${{ secrets.OPS_SECRETS_DEFAULTNIX }}"

      - name: Build and deploy
        run: |
          export NIX_PATH=nixpkgs=$PWD/hack/nixpkgs
          web/lukegbcom/deploy.sh