name: Nix Web Proxy Worker
run-name: Web Proxy - Nix
on: [push, merge]

jobs:
  setup-nixos-runner:
    run-on: ubuntu-latest    
    steps:
      - uses: actions/checkout@v4
      - uses: webfactory/ssh-agent@v0.9.0
        with:
          ssh-private-key: ${{ secrets.WEB_PROXY_SSH_PRIVATE_KEY }}
      - uses: cachix/install-nix-action@v31
      - uses: actions/cache@v4
        with:
          path: /nix/store
      - name: Ensure known host name
        run: ssh-keyscan ${{ vars.WEB_PROXY_IP }} >> ~/.ssh/known_hosts
      - name: Apply Nix build to Web Proxy host
        run: nix-shell shell.nix --run "nixos-rebuild switch --no-flake --target-host ${{ vars.WEB_PROXY_TARGET_HOST }}"