name: Build haze images

on:
  push:
    branches: ["main"]
    paths:
      - ".forgejo/workflows/docker.yaml"
      - "nix/image/**"

permissions:
  contents: read

jobs:
  build-images:
    runs-on: nix

    strategy:
      matrix:
        php-version: ["8.0", "8.1", "8.2", "8.3", "8.4", "8.5"]

    name: haze-${{ matrix.php-version }}

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - uses: https://codeberg.org/icewind/attic-action@v1
        with:
          name: link
          instance: https://cache.icewind.link
          authToken: "${{ secrets.ATTIC_TOKEN }}"

      - name: Build image
        run: |
          nix build .#'"haze-image-php-${{ matrix.php-version }}"'

      - name: Push image
        if: github.ref == 'refs/heads/main'
        run: |
          skopeo copy --insecure-policy --dest-creds="${{ secrets.DOCKER_USERNAME }}:${{ secrets.DOCKER_PASSWORD }}" \
            "docker-archive:$(nix build .#'"haze-image-php-${{ matrix.php-version }}"' --print-out-paths)" "docker://icewind1991/haze:${{ matrix.php-version }}"