Kaare Hoff Skovgaard
8640dce7bc
This gets rid of the messy nix code for handling bitwarden secrets, and unifies it all into a nice single program in rust. Ensuring that only the needed secrets are loaded.
44 lines
1.9 KiB
YAML
44 lines
1.9 KiB
YAML
---
|
|
on: [push]
|
|
jobs:
|
|
check:
|
|
runs-on: cache.kaareskovgaard.net
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- run: |
|
|
nix flake check
|
|
dev-shell:
|
|
runs-on: cache.kaareskovgaard.net
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- run: |
|
|
nix build --no-link '.#devShells.x86_64-linux.default'
|
|
rust-packages:
|
|
runs-on: cache.kaareskovgaard.net
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- run: |
|
|
nix build --no-link '.#packages.x86_64-linux.ed25519-helper'
|
|
nix build --no-link '.#packages.x86_64-linux.hetzner-static-ip'
|
|
nix build --no-link '.#packages.x86_64-linux.infrastructure'
|
|
terraform-providers:
|
|
runs-on: cache.kaareskovgaard.net
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- run: |
|
|
nix build --no-link '.#packages.x86_64-linux.terraform-provider-cloudflare'
|
|
nix build --no-link '.#packages.x86_64-linux.terraform-provider-hcloud'
|
|
nix build --no-link '.#packages.x86_64-linux.terraform-provider-openstack'
|
|
nix build --no-link '.#packages.x86_64-linux.terraform-provider-unifi'
|
|
nix build --no-link '.#packages.x86_64-linux.terraform-provider-vault'
|
|
nix build --no-link '.#packages.x86_64-linux.terraform-provider-tls'
|
|
nix build --no-link '.#packages.x86_64-linux.terraform-provider-external'
|
|
systems:
|
|
runs-on: cache.kaareskovgaard.net
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- run: |
|
|
nix build --no-link '.#nixosConfigurations."desktop.kaareskovgaard.net".config.system.build.toplevel'
|
|
nix build --no-link '.#nixosConfigurations."desktop.kaareskovgaard.net".config.system.build.vm'
|
|
nix build --no-link '.#nixosConfigurations."monitoring.kaareskovgaard.net".config.system.build.toplevel'
|
|
nix build --no-link '.#nixosConfigurations."security.kaareskovgaard.net".config.system.build.toplevel'
|