on:
  push:
    branches:
      - dev
jobs:
  update-and-build:
    runs-on: radiantwave-actions
    steps:
      # - name: Print Environment
      #   run: |
      #     echo "=== whoami/hostname ==="
      #     whoami
      #     hostname
      #     echo "=== pwd ==="
      #     pwd
      #     echo "=== PATH ==="
      #     echo "$PATH"
      #     echo "=== full env ==="
      #     env | sort
      #     echo "=== os-release ==="
      #     cat /etc/os-release 2>/dev/null || echo "no os-release"
      #     echo "=== does /nix exist ==="
      #     ls -la /nix 2>&1 || echo "/nix missing"
      #     echo "=== does /nix/var/nix/profiles/default/bin exist ==="
      #     ls -la /nix/var/nix/profiles/default/bin 2>&1 || echo "missing"
      #     echo "=== is this a container ==="
      #     cat /proc/1/cgroup 2>/dev/null | head -5
      #     [ -f /.dockerenv ] && echo "IS a docker container" || echo "NOT a docker container (no /.dockerenv)"

      - name: Checkout
        uses: actions/checkout@v6

      # - name: Install Nix
      #   uses: cachix/install-nix-action@v31
      #   with:
      #     extra_nix_config: |
      #       experimental-features = nix-command flakes

      - name: Configure git auth for Gitea
        run: |
          git config --global url."https://oauth2:${{ secrets.GIT_TOKEN }}@gitea.radiantwavetech.com/".insteadOf "https://gitea.radiantwavetech.com/"

      - name: Update radiantwave-dev
        run: |
          . /nix/var/nix/profiles/default/etc/profile.d/nix-daemon.sh
          nix flake update radiantwave-dev

      - name: Build dev ISO
        run: |
          export NIXPKGS_ALLOW_UNFREE=1
          . /nix/var/nix/profiles/default/etc/profile.d/nix-daemon.sh

          nix build -L --impure .#nixosConfigurations.dev-iso.config.system.build.isoImage

          ISO_NAME="radiantwave-kiosk-iso-dev-$(date +%Y-%m-%d_%H-%M-%S).iso"
          ISO_PATH="/home/runner/radiantwave/${ISO_NAME}"

          cp -L result/iso/*.iso "${ISO_PATH}"

          echo "ISO_NAME=${ISO_NAME}" >> "$GITHUB_ENV"
          echo "ISO_PATH=${ISO_PATH}" >> "$GITHUB_ENV"

      - name: Copy ISO to fileserver
        run: |
          scp "${ISO_PATH}" \
            nclack@157.245.124.103:/mnt/infrastructure_data/files/images/"${ISO_NAME}"

      - name: Commit updated flake.lock
        run: |
          git config user.email "ci@radiantwavetech.com"
          git config user.name "RadiantWave CI"
          git remote set-url origin https://oauth2:${{ secrets.GIT_TOKEN }}@gitea.radiantwavetech.com/RadiantWaveTech/KioskConfig.git
          git add flake.lock
          git commit -m "chore: update radiantwave-dev to latest dev" || echo "Nothing to commit"
          git push

      - name: Cleanup
        run: |
          rm -rf /home/runner/radiantwave/*
          echo "Deleted all files in /home/runner/radiantwave/"