dev: ci and flake revamp

.envrc

@@ -0,0 +1 @@
+use flake

.github/workflows/main.yaml

@@ -0,0 +1,37 @@
+on:
+  push:
+    branches:
+      - main
+  release:
+    types:
+      - created
+
+jobs:
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: DeterminateSystems/nix-installer-action@main
+
+      - name: Set container release tag
+        run: |
+          if [[ "$GITHUB_REF_TYPE" == "tag" ]]; then
+            echo -n "${GITHUB_REF#refs/tags/}" > ./container_release
+          else
+            echo -n "main-$(git rev-parse --short HEAD)" > ./container_release
+          fi
+          # Export value to Github variables
+          echo "TAG=$(cat ./container_release)" >> $GITHUB_ENV
+  
+      - name: Login to GitHub Container Registry
+        run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
+
+      - name: Build and push Docker image
+        run: |
+          nix-env -iA nixpkgs.skopeo
+          nix build .#dockerImage && ./result | \ 
+            gzip --fast | \
+            skopeo copy docker-archive:/dev/stdin docker://ghcr.io/SafeHavenMaps/safehaven:$TAG

.github/workflows/check.yaml → .github/workflows/pr_check.yaml

@@ -1,5 +1,5 @@
 on:
-  push:
+  pull_request:
     branches:
       - main
 
@@ -8,10 +8,6 @@ jobs:
     name: Build
     runs-on: ubuntu-latest
 
-    permissions:
-      contents: read
-      packages: write
-
     services:
       postgres:
         image: postgis/postgis:16-3.4-alpine
@@ -23,5 +19,4 @@ jobs:
     steps:
       - uses: actions/checkout@v3
       - uses: DeterminateSystems/nix-installer-action@main
-      - run: nix develop -c prepare
-      - run: nix develop -c test_and_lint
+      - run: nix develop -c check_project

.gitignore

@@ -1,2 +1,3 @@
 .DS_Store
 .direnv
+result