name: NixOS Rebuild

on:
  workflow_dispatch:
  push:
    branches: [ main ]

jobs:
  rebuild:
    runs-on: self-hosted
    steps:
      - name: Setup SSH key
        run: |
          mkdir -p ./ssh
          echo "${{ secrets.DEPLOY_SSH_KEY }}" > ./ssh/deploy_key
          chmod 600 ./ssh/deploy_key
          echo "StrictHostKeyChecking no" > ./ssh/config

      - name: Rebuild (${{ github.event.inputs.action || 'switch' }})
        run: |
          ssh -i ./ssh/deploy_key root@localhost \
            "nixos-rebuild switch \
              --flake git+http://localhost:5080/satr14/nix-flake#homelab -L"

      - name: Show generation
        if: always()
        run: ssh -i ./ssh/deploy_key root@localhost "nixos-version"

      - name: Clean Up
        if: always()
        run: rm -f ./ssh/deploy_key