---
kind: secret
name: local_username
get:
  path: local
  name: username
---
kind: secret
name: local_password
get:
  path: local
  name: password
---
kind: secret
name: attic_url
get:
  path: attic
  name: url
---
kind: secret
name: attic_key
get:
  path: attic
  name: key
---
kind: pipeline
type: kubernetes
name: build
steps:
  - name: nixos
    image: docker.io/jcollie/nixos-runner:latest
    pull: always
    commands:
      - nix --extra-substituters $PLUGIN_ATTIC_URL --extra-trusted-public-keys $PLUGIN_ATTIC_KEY build -L .#webserver
      - push-container result --repository network/healthchecks-webserver
      - nix --extra-substituters $PLUGIN_ATTIC_URL --extra-trusted-public-keys $PLUGIN_ATTIC_KEY build -L .#smtpd
      - push-container result --repository network/healthchecks-smtpd
      - nix --extra-substituters $PLUGIN_ATTIC_URL --extra-trusted-public-keys $PLUGIN_ATTIC_KEY build -L .#sendalerts
      - push-container result --repository network/healthchecks-sendalerts
      - nix --extra-substituters $PLUGIN_ATTIC_URL --extra-trusted-public-keys $PLUGIN_ATTIC_KEY build -L .#sendreports
      - push-container result --repository network/healthchecks-sendreports
      - nix --extra-substituters $PLUGIN_ATTIC_URL --extra-trusted-public-keys $PLUGIN_ATTIC_KEY build -L .#maintenance
      - push-container result --repository network/healthchecks-maintenance
      - nix --extra-substituters $PLUGIN_ATTIC_URL --extra-trusted-public-keys $PLUGIN_ATTIC_KEY build -L .#migrate
      - push-container result --repository network/healthchecks-migrate
      - nix --extra-substituters $PLUGIN_ATTIC_URL --extra-trusted-public-keys $PLUGIN_ATTIC_KEY build -L .#static
      - push-container result --repository network/healthchecks-static
    settings:
      registry: r.ocj.io
      username:
        from_secret: local_username
      password:
        from_secret: local_password
      attic_url:
        from_secret: attic_url
      attic_key:
        from_secret: attic_key
  - name: notify
    image: plugins/webhook
    failure: ignore
    settings:
      urls:
        - http://webhook-receiver.flux-system.svc/hook/edb4b3e16a177e035bc595a5be33c3b04b51145c7d802bddf05f27486e1dbd4d