nixos-config/.github/workflows/update.yml

name: Update flake
on:
  schedule:
    - cron: "35 4 * * *"
  workflow_dispatch: {}
jobs:
  update-flake:
    name: Update flake
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          token: ${{ secrets.PUBLISH_TOKEN }}
      - uses: cachix/install-nix-action@v17
        with:
          extra_nix_config: |
            substituters = https://cache.nixos.org/ https://f000.backblazeb2.com/file/cache-chir-rs/
            trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= nixcache:8KKuGz95Pk4UJ5W/Ni+pN+v+LDTkMMFV4yrGmAYgkDg= hydra.nixos.org-1:CNHJZBh9K4tP3EKF6FkkgeVYsS3ohTl+oS0Qa8bezVs=
      # instantiate the current derivations
      - id: update-step
        run: |
          nix flake update
          echo "Difference between this PR and main:" > report
          echo "" >> report
          for job in nixos-8gb-fsn1-1 nutty-noon thinkrac installer nas; do
            old_job=$(nix build --dry-run "github:DarkKirb/nixos-config/main#$hydraJobs.$job.x86_64-linux" 2>&1 | tail -n1)
            new_job=$(nix build --dry-run ".#$hydraJobs.$job.x86_64-linux" 2>&1 | tail -n1)
            echo "<details>" >> report
            echo "<summary>expression difference for $job</summary>" >> report
            nix run 'nixpkgs#nix-diff' $old_job $new_job >> report
            echo "</details>" >> report
          done

          body=$(cat report.txt)
          body="${body//'%'/'%25'}"
          body="${body//$'\n'/'%0A'}"
          body="${body//$'\r'/'%0D'}"
          echo ::set-output name=body::$body
      - uses: peter-evans/create-pull-request@v4
        if: steps.update-step.outputs.body != ''
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          body: ${{ steps.update-step.outputs.body }}
          commit-message: Update flake.lock
          committer: GitHub <noreply@github.com>
          author: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
          branch: update-flake
          delete-branch: true
          title: "Update flake.nix"
          labels: |
            update
            automated
          assignees: darkkirb
          reviewers: darkkirb
          add-paths: flake.lock