flake.yml

name: flake 

on:
  pull_request:
    paths: 
      - '**/*.nix'
      - '.github/workflows/flake.yml'
      - 'flake.lock'
  push:
    branches:
      - master
    paths: 
      - '**/*.nix'
      - '.github/workflows/flake.yml'
      - 'flake.lock'

jobs:
  check-flake:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
    - uses: DeterminateSystems/flake-checker-action@v8
    - uses: DeterminateSystems/nix-installer-action@v12
    - uses: DeterminateSystems/magic-nix-cache-action@v7
    - run: nix flake check --show-trace

  build-flake:
    needs: check-flake
    strategy:
      max-parallel: 1
      matrix:
        include:
          - name: radoslawgrochowski-wsl
            os: ubuntu-latest
            output: ".#nixosConfigurations.radoslawgrochowski-wsl.config.system.build.toplevel"
          - name: macaron
            os: macos-latest
            output: ".#darwinConfigurations.macaron.config.system.build.toplevel"
    name: ${{ matrix.name }}-build
    runs-on: ${{ matrix.os }}
    steps:
    - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
    - uses: DeterminateSystems/flake-checker-action@v8
    - uses: DeterminateSystems/nix-installer-action@v12
    - uses: DeterminateSystems/magic-nix-cache-action@v7
    - uses: cachix/cachix-action@v15
      with:
        authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
        name: radoslawgrochowski-dotfiles
    - run: sudo touch /etc/nix/ca_cert.pem 
    - run: nix build ${{ matrix.output }} -L --show-trace --accept-flake-config