name: Build all NixOS Configurations

on:
  - push

jobs:
  nix build:
    runs-on: native
    steps:
      - uses: actions/checkout@v4

      - name: setup ssh
        run: |
          cat <<EOF > .id_rsa
          ${{ secrets.SSH_KEY }}
          EOF
          chmod 600 .id_rsa

          eval $(ssh-agent)
          ssh-add .id_rsa

          cat <<EOF > "$GITHUB_ENV"
          SSH_AUTH_SOCK="$SSH_AUTH_SOCK"
          SSH_AGENT_PID=$SSH_AGENT_PID
          EOF

      - run: nix flake archive

      - name: nix flake check
        run: nix flake check --verbose --log-format raw

      - name: teardown ssh
        if: always()
        run: |
          echo $SSH_AGENT_PID
          kill $SSH_AGENT_PID

      - name: nix build orbi
        run: nix build .#nixosConfigurations.orbi.config.system.build.toplevel

      - name: nix build cream
        run: nix build .#nixosConfigurations.cream.config.system.build.toplevel

      - name: nix build cherry
        run: nix build .#nixosConfigurations.cherry.config.system.build.toplevel

      - name: nix build chungus
        run: nix build .#nixosConfigurations.chungus.config.system.build.toplevel