name: Deploy Hashel

on:
  push:
    branches:
      - main

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install Nix
        uses: cachix/install-nix-action@v31
        with:
          extra_nix_config: |
            experimental-features = nix-command flakes
            sandbox = false

      - name: Configure SSH
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_ed25519
          chmod 600 ~/.ssh/id_ed25519
          cat >> ~/.ssh/config << EOF
          Host haschel
            HostName ${{ secrets.DEPLOY_HOST }}
            StrictHostKeyChecking no
            UserKnownHostsFile /dev/null
            IdentityFile ~/.ssh/id_ed25519
          EOF
          chmod 600 ~/.ssh/config

      - name: Deploy with deploy-rs
        run: |
          nix run github:serokell/deploy-rs -- .#haschel --skip-checks --remote-build