build-iso.yml

name: Build NixOS ISO

on:
  push:
    branches: [master]
    tags: ["v*"]
  pull_request:
  workflow_dispatch:

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Inject SSH public key
        if: env.SSH_PUBLIC_KEY != ''
        run: echo "$SSH_PUBLIC_KEY" > authorized-keys
        env:
          SSH_PUBLIC_KEY: ${{ secrets.SSH_PUBLIC_KEY }}

      - name: Install Nix
        uses: cachix/install-nix-action@v31
        with:
          nix_path: nixpkgs=channel:nixos-24.11

      - name: Flake check
        run: nix flake check

      - name: Build ISO
        run: nix build .#iso

      - name: Upload ISO artifact
        uses: actions/upload-artifact@v4
        with:
          name: nixos-hetzner-iso
          path: result/iso/*.iso

      - name: Create GitHub release
        if: startsWith(github.ref, 'refs/tags/v')
        uses: softprops/action-gh-release@v2
        with:
          files: result/iso/*.iso