on:
  workflow_dispatch:

env:
  NIX_CONFIG: |
    extra-substituters = https://attic.radiantwavetech.com/radiantwave https://nixos-raspberrypi.cachix.org
    extra-trusted-public-keys = radiantwave:QADrjpBWJssTZ3KmiZtcWEf4uAm66oOlHmtQI3jkrgA= nixos-raspberrypi.cachix.org-1:4iMO9LXa8BqhU+Rpg6LQKiGa2lsNh/j2oiYLNOQ5sPI=

jobs:
  build-rpi:
    runs-on: orion-lxc

    steps:
      - name: Checkout
        run: git clone --depth 1 ssh://git@gitea.radiantwavetech.com:2222/RadiantWaveTech/KioskConfig.git .

      - name: Prepare output directory
        run: mkdir -p /var/lib/gitea-runner/radiantwave

      - name: Build Raspberry Pi image
        run: |
          export NIXPKGS_ALLOW_UNFREE=1
          . /nix/var/nix/profiles/default/etc/profile.d/nix-daemon.sh
          nix build -L --impure .#nixosConfigurations.radiantwavekiosk-rpi.config.system.build.sdImage

      - name: Rename Raspberry Pi image
        run: |
          ISO_DATE=$(date +%Y-%m-%d_%H-%M-%S)
          FILENAME="radiantwave-rpi-${ISO_DATE}.img.zst"
          cp -L result/sd-image/*.img.zst "/var/lib/gitea-runner/radiantwave/${FILENAME}"
          echo "RPI_IMAGE_FILENAME=${FILENAME}" >> "$GITHUB_ENV"

      - name: Copy Raspberry Pi image to fileserver
        run: |
          scp "/var/lib/gitea-runner/radiantwave/${RPI_IMAGE_FILENAME}" \
            radiantwave-infra:/mnt/infrastructure_data/files/images/

      - name: Cleanup Raspberry Pi image
        run: rm -f "/var/lib/gitea-runner/radiantwave/${RPI_IMAGE_FILENAME}"