name: Publish docker image

on:
  push:
    branches: ['main']
    paths:
      - 'backend/**/*'
      - flake.nix

jobs:
  publish:
    name: Publish
    runs-on: docker

    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Install nix
        uses: https://github.com/cachix/install-nix-action@v25
      - name: Build image
        run: "nix --extra-experimental-features 'nix-command,flakes' build .#docker"
      - name: Log into registry
        run: "nix shell nixpkgs#crane --command crane auth login git.ashhhleyyy.dev -u ${{github.actor}} -p ${{secrets.PACKAGES_TOKEN}}"
      - name: Decompress tar.gz
        run: "gunzip -c result > /tmp/aci.tar"
      - name: Push image (latest)
        run: "nix shell nixpkgs#crane --command crane push /tmp/aci.tar git.ashhhleyyy.dev/ash/aci:latest"
      - name: Push image
        run: "nix shell nixpkgs#crane --command crane push /tmp/aci.tar git.ashhhleyyy.dev/ash/aci:${{github.sha}}"