ktisis.yaml

name: Ktisis
on:
  push:
    branches:
     - main
    paths:
      - "**.cs"
      - "**.nix"
      - npins/*

  pull_request:
    branches:
     - main
    paths:
      - "**.cs"
      - "**.nix"
      - npins/*

  workflow_dispatch:

jobs:
  Docker:
    permissions:
      contents: read
      id-token: write

    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: DeterminateSystems/nix-installer-action@v15
        with:
          source-url: https://install.lix.systems/lix/lix-installer-x86_64-linux
          diagnostic-endpoint: ""

      - uses: cachix/cachix-action@v15
        with:
          name: drakon64-ktisis
          authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}

      - run: nix-build docker.nix

      - run: docker load < result

      - run: docker tag ktisis:latest ${{ secrets.GOOGLE_ARTIFACT_REGISTRY }}/ktisis:latest

      - uses: google-github-actions/auth@v2
        with:
          project_id: ${{ secrets.GOOGLE_PROJECT_ID }}
          service_account: ${{ secrets.GOOGLE_SERVICE_ACCOUNT }}
          workload_identity_provider: ${{ secrets.GOOGLE_WORKLOAD_IDENTITY_PROVIDER }}

      - uses: google-github-actions/setup-gcloud@v2

      - run: gcloud auth configure-docker ${{ vars.GOOGLE_REGION }}-docker.pkg.dev

      - run: docker push ${{ secrets.GOOGLE_ARTIFACT_REGISTRY }}/ktisis:latest

      - uses: google-github-actions/deploy-cloudrun@v2
        with:
          service: ktisis
          image: ${{ secrets.GOOGLE_ARTIFACT_REGISTRY }}/ktisis:latest
          region: ${{ vars.GOOGLE_REGION }}