name: Deploy Hashel

on:
  push:
    branches:
      - main

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install Nix
        uses: cachix/install-nix-action@v31
        with:
          extra_nix_config: |
            experimental-features = nix-command flakes
            sandbox = false

      - name: Configure SSH
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_ed25519
          chmod 600 ~/.ssh/id_ed25519
          ssh-keyscan -H haschel >> ~/.ssh/known_hosts 2>/dev/null || true

      - name: Deploy with deploy-rs
        run: |
          rm -rf /homeless-shelter || true
          nix run github:serokell/deploy-rs -- .#haschel --skip-checks