---
kind: secret
name: local_username
get:
  path: local
  name: username
---
kind: secret
name: local_password
get:
  path: local
  name: password
---
kind: secret
name: attic_url
get:
  path: attic
  name: url
---
kind: secret
name: attic_key
get:
  path: attic
  name: key
---
kind: pipeline
type: kubernetes
name: publish
steps:
  - name: nixos
    image: docker.io/jcollie/nixos-runner:latest
    pull: always
    commands:
      - nix --extra-substituters $PLUGIN_ATTIC_URL --extra-trusted-public-keys $PLUGIN_ATTIC_KEY build -L .#default
      - push-container result
    settings:
      registry: r.ocj.io
      repository: media/radarr
      username:
        from_secret: local_username
      password:
        from_secret: local_password
      attic_url:
        from_secret: attic_url
      attic_key:
        from_secret: attic_key