nixCache:
  image: "nixos/nix:latest"
  script:
    - "mkdir -p ops/secrets"
    - "cp ${OPS_SECRETS_DEFAULT_NIX} ops/secrets/default.nix"
    - "test -d cache || mkdir cache"
    - "nix-build ./ci-root.nix --option extra-substituters \"s3://lukegb-nix-cache?endpoint=storage.googleapis.com file://$PWD/cache\""
    - "nix copy --to 'file://cache' -f ./ci-root.nix"
    - "nix copy --to 's3://lukegb-nix-cache?endpoint=storage.googleapis.com' -f ./ci-root.nix"
  cache:
    key: one-key-to-rule-them-all