Setup certificate monitoring #32
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: deploy | |
| on: | |
| push: | |
| branches: | |
| - "main" | |
| permissions: read-all | |
| jobs: | |
| Check: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out repository code | |
| uses: actions/checkout@v4 | |
| - name: Setup Nix | |
| uses: DeterminateSystems/nix-installer-action@main | |
| with: | |
| diagnostic-endpoint: "" | |
| - name: Setup Nix cache | |
| uses: DeterminateSystems/magic-nix-cache-action@main | |
| - name: "Run flake checks" | |
| run: nix flake check --all-systems | |
| Lint: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out repository code | |
| uses: actions/checkout@v4 | |
| - name: Setup Nix | |
| uses: DeterminateSystems/nix-installer-action@main | |
| with: | |
| diagnostic-endpoint: "" | |
| - name: Check format | |
| run: nix fmt -- --check . | |
| - name: Lint using Statix | |
| run: nix run nixpkgs#statix -- check . | |
| DNS: | |
| needs: [Check, Lint] | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out repository code | |
| uses: actions/checkout@v4 | |
| - name: Setup Nix | |
| uses: DeterminateSystems/nix-installer-action@main | |
| with: | |
| diagnostic-endpoint: "" | |
| - name: Setup Nix cache | |
| uses: DeterminateSystems/magic-nix-cache-action@main | |
| - name: Build DNS config | |
| run: nix build .#dns | |
| - name: Deploy DNS config | |
| run: nix develop --command bash -c 'octodns-sync --config-file result --doit' | |
| env: | |
| HETZNER_DNS_API: ${{ secrets.HETZNER_DNS_API }} |