---
kind: secret
name: registry
get:
  path: docker-push
  name: registry
---
kind: secret
name: username
get:
  path: docker-push
  name: username
---
kind: secret
name: password
get:
  path: docker-push
  name: password
---
kind: pipeline
type: kubernetes
name: publish
steps:
  - name: build
    image: docker.io/jcollie/nixos-runner:latest
    pull: always
    commands:
      - nix build .#docker
      - push-container result
    settings:
      repository: backup/restic
      registry:
        from_secret: registry
      username:
        from_secret: username
      password:
        from_secret: password