image: nixos/latest sources: - https://git.tazj.in/ secrets: # cachix/tazjin - 3cea9995-9a90-4bb5-9b50-5d00c3694757 tasks: - setup: | # sourcehut does not censor secrets in builds, hence this hack: echo -n 'export CACHIX_SIGNING_KEY=' > cachix-preamble cat cachix-preamble ~/.cachix-tazjin >> ~/.buildenv nix-env -iA third_party.cachix -f git.tazj.in cachix use tazjin - build: | cd git.tazj.in nix-build ci-builds.nix > built-paths - cache: | cd git.tazj.in cat built-paths | cachix push tazjin triggers: - action: email condition: failure to: mail@tazj.in