stages:
  - build
  - deploy

nixCache:
  stage: build
  image: "nixos/nix:latest"
  only:
    - disabled_while_iterating
  script:
    - "mkdir -p ops/secrets"
    - "cp ${OPS_SECRETS_DEFAULT_NIX} ops/secrets/default.nix"
    - "nix build -v -f ./ci-root.nix --substituters \"https://cache.nixos.org s3://lukegb-nix-cache?endpoint=storage.googleapis.com&trusted=1\""
    - "nix copy -v --to 's3://lukegb-nix-cache?endpoint=storage.googleapis.com' ./result"

.deploy:
  stage: deploy
  variables:
    SSH_ARGS: ''
  script: './hack/deploy.sh "$DEPLOY_TO" "$SSH_ARGS"'
  tags:
    - deployer

ixvm-fra01:
  extends: .deploy
  variables:
    # TODO(lukegb): DNS...
    DEPLOY_TO: "141.98.136.124"