name: runner nix smoke

on:
  workflow_dispatch:
  push:
    branches:
      - master
    paths:
      - .gitea/workflows/runner-nix-smoke.yaml
      - flake.lock
      - flake.nix
      - infra/gitea-runners/**
      - lib/**
      - legacy/**
      - nixos/**
      - package/**
      - test/**

jobs:
  smoke:
    name: nix label and flake smoke
    runs-on: nix
    env:
      NIX_CONFIG: |
        http2 = false
        extra-substituters = https://cache.nixos.org https://cache.hectic-lab.com/hectic
        extra-trusted-public-keys = hectic:KMQsKow4SoA9K2vOJlOljmx7/Zpf91Yy+5qEtxDDCzA=
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4.2.2

      - name: Nix version and cache configuration
        run: |
          set -eu
          nix --version
          nix config show http2
          nix config show substituters
          nix config show trusted-public-keys

      - name: Repository flake evaluation
        run: |
          set -eu
          nix --option eval-cache false flake check --no-build --no-write-lock-file