local PROD = 'production'; local STAGE = 'staging'; local NIX = 'nix --extra-experimental-features nix-command --extra-experimental-features flakes '; local VOLUMES = [ { name: 'site', path: '/site' }, { name: 'cache', path: '/tmp/cache' }, ]; local Secrets(secrets) = { environment: { [secret]: { from_secret: std.asciiLower(secret) } for secret in secrets }, }; local WhenProd(prod) = if prod then { event: ['promote'], target: [PROD], } else { target: { exclude: [PROD] }, }; local Step(env, name, cmds, extras={}, volumes=VOLUMES) = local prod = env == PROD; { name: name + ' ' + env, image: 'nixos/nix:latest', volumes: volumes, commands: cmds, when: WhenProd(prod), } + extras; local BootstrapStep = Step(STAGE, 'bootrap nix', [ 'for file in /nix/store/*; do', ' item=$(basename $file)', ' if [ ! -e /cache/$item ]; then', ' echo "moving $file to cache"', ' cp -r $file /cache/$item', ' fi', 'done', ], volumes=[{ name: 'cache', path: '/cache' }]); local NixStep(env) = local prod = env == PROD; local output = if prod then '' else ' .#staging-site'; Step(env, 'nix build', [ NIX + 'build --store /tmp/cache --eval-store local' + output, 'cp -r result/* /site/', ]); local DeployStep(env) = local prod = env == PROD; local options = if prod then '--prod' else '--alias staging'; Step(env, 'netlify deploy', [ NIX + 'profile install nixpkgs#netlify-cli', 'netlify deploy -d /site --auth $NETLIFY_TOKEN --site $NETLIFY_SITE_ID --message "$DRONE_COMMIT_MESSAGE" ' + options, ], Secrets(['NETLIFY_TOKEN', 'NETLIFY_SITE_ID'])); { kind: 'pipeline', type: 'docker', name: 'default', volumes: [ { name: 'site', temp: {} }, { name: 'cache', host: { path: '/data/cache' } }, ], steps: [ BootstrapStep, NixStep(STAGE), NixStep(PROD), DeployStep(STAGE), DeployStep(PROD), ], }