mat.services/.drone.jsonnet

local PROD = 'production';
local STAGE = 'staging';
local NIX = 'nix --sandbox --extra-experimental-features nix-command --extra-experimental-features flakes ';
local VOLUMES = [
  { name: 'site', path: '/site' },
  { name: 'cache', path: '/nix/store' },
];

local Secrets(secrets) = {
  environment: {
    [secret]: { from_secret: std.asciiLower(secret) }
    for secret in secrets
  },
};

local WhenProd(prod) = if prod then {
  event: ['promote'],
  target: [PROD],
} else {
  target: { exclude: [PROD] },
};

local Step(env, name, cmds, extras={}, volumes=VOLUMES) =
  local prod = env == PROD;
  {
    name: name + ' ' + env,
    image: 'nixos/nix:latest',
    volumes: volumes,
    commands: cmds,
    when: WhenProd(prod),
    privileged: true,
  } + extras;

local BootstrapStep =
  Step(STAGE, 'bootrap nix', [
    'for file in /nix/store/*; do',
    '    item=$(basename $file)',
    '    if [ ! -e /cache/$item ]; then',
    '        echo "moving $file to cache"',
    '        cp -r $file /cache/$item',
    '    fi',
    'done',
  ], volumes=[{ name: 'cache', path: '/cache' }]);

local NixStep(env) =
  local prod = env == PROD;
  local output = if prod then '' else ' .#staging-site';
  Step(env, 'nix build', [
    NIX + 'build' + output,
    'cp -r result/* /site/',
  ]);

local DeployStep(env) =
  local prod = env == PROD;
  local options = if prod then '--prod' else '--alias staging';
  Step(env, 'netlify deploy', [
    NIX + 'profile install nixpkgs#netlify-cli',
    'netlify deploy -d /site --auth $NETLIFY_TOKEN --site $NETLIFY_SITE_ID --message "$DRONE_COMMIT_MESSAGE" ' + options,
  ], Secrets(['NETLIFY_TOKEN', 'NETLIFY_SITE_ID']));

{
  kind: 'pipeline',
  type: 'docker',
  name: 'default',

  volumes: [
    { name: 'site', temp: {} },
    { name: 'cache', host: { path: '/data/cache' } },
  ],

  steps: [
    BootstrapStep,
    NixStep(STAGE),
    NixStep(PROD),
    DeployStep(STAGE),
    DeployStep(PROD),
  ],
}