nixCache:
  image: "nixos/nix:latest"
  script:
    - "mkdir -p ops/secrets"
    - "cp ${OPS_SECRETS_DEFAULT_NIX} ops/secrets/default.nix"
    - "test -d cache || mkdir cache"
    - "test -f cache/nix.closure && nix-store --import < cache/nix.closure"
    - "nix build -vv -f ./ci-root.nix --substituters \"https://cache.nixos.org s3://lukegb-nix-cache?endpoint=storage.googleapis.com&trusted=1\""
    - "nix-store --export $(nix-store -qR ./result) > cache/nix.closure"
    - "nix copy -vv --to 's3://lukegb-nix-cache?endpoint=storage.googleapis.com' ./result"
  cache:
    key: one-key-to-rule-them-all
    paths:
      - cache/