# .github/workflows/flakehub-publish-tagged.yml
name: Publish tags to FlakeHub

on:
  push:
    tags:
      - v?[0-9]+.[0-9]+.[0-9]+*

jobs:
  flakehub:
    runs-on: ubuntu-22.04
    permissions:
      id-token: write # Necessary for authenticating against FlakeHub
      contents: read
    steps:
      - uses: actions/checkout@v6
        with:
          ref: ${{ (inputs.tag != null) && format('refs/tags/{0}', inputs.tag) || '' }}
      - name: Install Determinate Nix
        uses: DeterminateSystems/determinate-nix-action@main
      - name: Push to FlakeHub
        uses: DeterminateSystems/flakehub-push@main
        with:
          # For the flake's visibility, you can also select "unlisted" if you don't want
          # it to show up in search results and general listings on flakehub.com
          visibility: public
          # Release rolling versions of the form 0.1.* instead of tagged releases
          rolling: true

- uses: DeterminateSystems/flakehub-push@main
  with:
    visibility: public

- uses: DeterminateSystems/flakehub-push@main
  with:
    rolling: true

- uses: DeterminateSystems/flakehub-push@main
  with:
    rolling: true
    rolling-minor: 2

on:
  push:
    tags:
      - v?[0-9]+.[0-9]+.[0-9]+*
  workflow_dispatch:
    inputs:
      tag:
        description: The existing tag to publish to FlakeHub
        type: string
        required: true

jobs:
  flakehub-publish:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    steps:
      - uses: actions/checkout@v6
        with:
          # Checking out only the tag isn't necessary but should speed things up
          ref: ${{ inputs.tag }}
      - uses: DeterminateSystems/determinate-nix-action@main
      - uses: DeterminateSystems/flakehub-push@main
        with:
          visibility: private
          tag: ${{ inputs.tag }}

- uses: DeterminateSystems/flakehub-push@main
  with:
    include-output-paths: true

name: Publish multiple flakes to FlakeHub

on:
  push:
    branches:
      - main

jobs:
  flakehub-publish:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    steps:
      - uses: actions/checkout@v6
      - uses: DeterminateSystems/determinate-nix-action@main

      # Publish my-subflake-1
      - uses: DeterminateSystems/flakehub-push@main
        with:
          rolling: true
          directory: my-subflake-1
          visibility: public

      # Publish my-subflake-2
      - uses: DeterminateSystems/flakehub-push@main
        with:
          rolling: true
          directory: my-subflake-2
          visibility: public

name: Notify external system that flake has been published

on:
  push:
    branches:
      - main

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: DeterminateSystems/determinate-nix-action@main # Install Determinate Nix
      - uses: DeterminateSystems/flakehub-push@main # Publish to FlakeHub
        id: flakehub_push
        with:
          visibility: private
          rolling: true
          include-output-paths: true

      - name: Notify external system
        run: |
          curl -XPOST https://my-recording-system.dev \
            -H "Content-Type: application/json" \
            -H "Bearer: ${{ secrets.RECORDING_SYSTEM_API_KEY }}" \
            -d '{"flake_version":"${{ steps.flakehub_push.outputs.version }}"}'