name: nixos flake checks

on:
  push:
    branches: [main, dev, master]
  pull_request:
    branches: [main, dev, master]

jobs:
  invariant-checks:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: cachix/install-nix-action@v27
        with:
          nix_path: nixpkgs=channel:nixos-unstable
      - name: install sops
        run: nix-env -iA nixpkgs.sops
      - name: run invariant checks
        run: .ci/checks.sh
      - name: build all NixOS configurations
        run: |
          nix build .#nixosConfigurations.atoridu.config.system.build.toplevel --dry-run || true
          nix build .#nixosConfigurations.rydiwo.config.system.build.toplevel --dry-run || true
          nix build .#nixosConfigurations.otreca.config.system.build.toplevel --dry-run || true
          nix build .#nixosConfigurations.sapphira.config.system.build.toplevel --dry-run || true
          nix build .#nixosConfigurations.wsl.config.system.build.toplevel --dry-run || true
          nix eval .#nixOnDroidConfigurations.epral.config.system.stateVersion || true