Remove hardcoded nomad-addr input — NOMAD_ADDR is now injected by the
Forgejo runner via container.options using host.docker.internal.
Switch Nomad Variable path from static-sites/s3 to nomad/jobs so all
jobs in the namespace can read it without explicit ACL policies.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
Extracts sign+push logic into a reusable push-nix-cache action.
Both the site deploy and the image build now use it.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
NixOS test boots a VM, loads the static-server image, starts it with
index.html + foo.html, and verifies that /foo routes to foo.html
(extensionless URL routing). Also adds flake.lock pinning nixpkgs.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
Use nix eval --raw --impure + builtins.getEnv instead of Python for
Nomad job JSON generation. Add flake-output input (default: default)
so projects can build non-default outputs like docs.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
S3_BUCKET and S3_ENDPOINT are config, not secrets. Move them to
inputs with defaults (s3.toph.so / nix-cache). Calling workflows
only need to supply AWS credentials, NIX_SIGNING_KEY, NOMAD_TOKEN.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
- deploy-static-site/images/flake.nix: moved from images/flake.nix
- .forgejo/workflows/build-static-server.yaml: moved from images/.forgejo/
(Forgejo only picks up workflows from repo root .forgejo/workflows/)
- updated path reference in build workflow
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
