switch to effect for darwin ssh deploy

nix-community · Dec 30, 2023 · a04f58e · a04f58e
1 parent 1abf777
commit a04f58e
Show file tree

Hide file tree

Showing 3 changed files with 36 additions and 62 deletions.
diff --git a/.github/workflows/darwin.yml b/.github/workflows/darwin.yml
diff --git a/dev/effect.nix b/dev/effect.nix
@@ -0,0 +1,35 @@
+{ self, withSystem, ... }:
+{
+  herculesCI = { config, ... }:
+    withSystem "x86_64-linux" ({ hci-effects, pkgs, ... }:
+      {
+        onPush.default.outputs.effects = hci-effects.runIf (pkgs.lib.hasPrefix "refs/heads/gh-readonly-queue/master/" config.repo.ref)
+          {
+            darwin02 = hci-effects.runNixDarwin {
+              ssh.destination = "[email protected]";
+              configuration = self.darwinConfigurations.darwin02;
+              buildOnDestination = true;
+              secretsMap.ssh-deployment = "ssh-deployment";
+              userSetupScript = ''
+                writeSSHKey ssh-deployment
+                cat >>~/.ssh/known_hosts <<EOF
+                darwin02.nix-community.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICJqwpMUEl1/iwrBakeDb1rlheXlE5mfDLICVz8w6yi6
+                EOF
+              '';
+            };
+            darwin03 = hci-effects.runNixDarwin {
+              ssh.destination = "[email protected]";
+              configuration = self.darwinConfigurations.darwin03;
+              buildOnDestination = true;
+              secretsMap.ssh-deployment = "ssh-deployment";
+              userSetupScript = ''
+                writeSSHKey ssh-deployment
+                cat >>~/.ssh/known_hosts <<EOF
+                darwin03.nix-community.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKX7W1ztzAtVXT+NBMITU+JLXcIE5HTEOd7Q3fQNu80S
+                EOF
+              '';
+            };
+          };
+      }
+    );
+}
diff --git a/flake.nix b/flake.nix
@@ -59,6 +59,7 @@
         imports = [
           inputs.hercules-ci-effects.flakeModule
           inputs.treefmt-nix.flakeModule
+          ./dev/effect.nix
         ];
 
         perSystem = { config, inputs', lib, pkgs, self', system, ... }: