on: [push]
jobs:
  build:
    runs-on: native
    steps:
      - uses: actions/checkout@v4

      - name: setup ssh
        run: |
          cat <<EOF > .id_rsa
          ${{ secrets.SSH_KEY }}
          EOF
          chmod 600 .id_rsa
          
          eval $(ssh-agent)
          ssh-add .id_rsa
          
          cat <<EOF > "$GITHUB_ENV"
          SSH_AUTH_SOCK="$SSH_AUTH_SOCK"
          SSH_AGENT_PID=$SSH_AGENT_PID
          EOF

      - run: nix flake check
#      - run: nix flake update
      - run: nix build .#nixosConfigurations.orbi.config.system.build.toplevel
      - run: nix build .#nixosConfigurations.cream.config.system.build.toplevel
      - run: nix build .#nixosConfigurations.cherry.config.system.build.toplevel
      - run: nix build .#nixosConfigurations.chungus.config.system.build.toplevel

      - name: teardown ssh
        if: always()
        run: |
          echo $SSH_AGENT_PID
          kill $SSH_AGENT_PID