on: [push, tag]
jobs:
  build:
    runs-on: native
    steps:
      - uses: actions/checkout@v4
      - run: nix run .#make
        env:
          SCIMSERVICEPROVIDER_CRT: ${{ secrets.SCIMSERVICEPROVIDER_CRT }}
          SCIMSERVICEPROVIDER_KEY: ${{ secrets.SCIMSERVICEPROVIDER_KEY }}
      - uses: actions/upload-artifact@v3
        with:
          path: build/scimserviceprovider*.tar.gz*
  release:
    runs-on: native
    needs: [build]
    if: github.ref_type == 'tag'
    steps:
      - uses: actions/checkout@v4
      - uses: actions/download-artifact@v3
      - run: nix run .#release
      - run: nix run .#publish
        env:
          NC_STORE_TOKEN: ${{ secrets.NC_STORE_TOKEN }}