From 227009d11cc3a26088f71e21c01710d89cde8717 Mon Sep 17 00:00:00 2001
From: zowoq <59103226+zowoq@users.noreply.github.com>
Date: Wed, 27 Dec 2023 10:43:18 +1000
Subject: [PATCH] switch to effect for darwin ssh deploy

---
 .github/workflows/darwin.yml | 60 ------------------------------------
 dev/effect-deploy.nix        | 31 +++++++++++++++++++
 flake.nix                    |  2 ++
 3 files changed, 33 insertions(+), 60 deletions(-)
 delete mode 100644 .github/workflows/darwin.yml
 create mode 100644 dev/effect-deploy.nix

diff --git a/.github/workflows/darwin.yml b/.github/workflows/darwin.yml
deleted file mode 100644
index 7ec610f88..000000000
--- a/.github/workflows/darwin.yml
+++ /dev/null
@@ -1,60 +0,0 @@
-name: "darwin"
-
-on:
-  push:
-    branches: [master]
-  workflow_dispatch:
-
-concurrency:
-  group: "darwin"
-  cancel-in-progress: false
-
-jobs:
-  deploy:
-    environment:
-      name: darwin
-    strategy:
-      fail-fast: false
-      matrix:
-        host: [darwin01, darwin02]
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-    steps:
-      - uses: actions/checkout@v4
-      - name: Install Nix
-        uses: cachix/install-nix-action@v29
-        with:
-          extra_nix_config: |
-            accept-flake-config = true
-            experimental-features = nix-command flakes
-      - name: Setup SSH
-        env:
-          SSH_KEY: "${{ secrets.SSH_KEY }}"
-        run: |
-          mkdir -p "$HOME/.ssh"
-          cat >>"$HOME/.ssh/id_ed25519" <<EOF
-          $SSH_KEY
-          EOF
-          chmod 600 "$HOME/.ssh/id_ed25519"
-          known_hosts="$(nix eval .#nixosConfigurations.build01.config.environment.etc.'ssh/ssh_known_hosts'.text)"
-          echo -e "$known_hosts" >>"$HOME/.ssh/known_hosts"
-          cat >>"$HOME/.ssh/config" <<EOF
-          Host *
-            IdentityFile ~/.ssh/id_ed25519
-            IdentitiesOnly yes
-          EOF
-      - name: Deploy
-        run: |
-          ./inv deploy --hosts ${{ matrix.host }}
-      - name: Alert on failure
-        if: ${{ failure() }}
-        run: |
-          curl -XPOST -d '{"msgtype":"m.text", "body":"${{ matrix.host }}: deployment failed"}' \
-            "https://matrix.org/_matrix/client/r0/rooms/!cBybDCkeRlSWfuaFvn:numtide.com/send/m.room.message?access_token=${{ secrets.TOKEN_MATRIX_BOT }}"
-  collect:
-    environment:
-      name: darwin
-    needs: deploy
-    runs-on: ubuntu-latest
-    steps:
-      - run: echo
diff --git a/dev/effect-deploy.nix b/dev/effect-deploy.nix
new file mode 100644
index 000000000..5f04b3b0e
--- /dev/null
+++ b/dev/effect-deploy.nix
@@ -0,0 +1,31 @@
+{ self, withSystem, ... }:
+{
+  herculesCI =
+    { config, ... }:
+    withSystem "x86_64-linux" (
+      { hci-effects, ... }:
+      let
+        secretsMap.ssh-deployment = "ssh-deployment";
+        userSetupScript = ''
+          writeSSHKey ssh-deployment
+          cat >>~/.ssh/known_hosts <<EOF
+          ${self.nixosConfigurations.build01.config.environment.etc."ssh/ssh_known_hosts".text}
+          EOF
+        '';
+      in
+      {
+        onPush.default.outputs.effects = hci-effects.runIf (config.repo.ref == "refs/heads/master") {
+          darwin01 = hci-effects.runNixDarwin {
+            ssh.destination = "customer@darwin01.nix-community.org";
+            configuration = self.darwinConfigurations.darwin01;
+            inherit secretsMap userSetupScript;
+          };
+          darwin02 = hci-effects.runNixDarwin {
+            ssh.destination = "customer@darwin02.nix-community.org";
+            configuration = self.darwinConfigurations.darwin02;
+            inherit secretsMap userSetupScript;
+          };
+        };
+      }
+    );
+}
diff --git a/flake.nix b/flake.nix
index dc67f5bc6..52fd620f3 100644
--- a/flake.nix
+++ b/flake.nix
@@ -60,6 +60,8 @@
       systems = import inputs.systems;
 
       imports = [
+        ./dev/effect-deploy.nix
+        inputs.hercules-ci-effects.flakeModule
         inputs.lite-config.flakeModule
         inputs.treefmt-nix.flakeModule
       ];