ci: add Gitea Actions CI and Renovate coverage

CI workflow gates on nixfmt formatting and evaluates all three host toplevels (aarch64 evaluates without emulation; no full builds in CI). renovate.json enables the nix manager and weekly lockFileMaintenance for flake.lock, plus grouped github-actions updates (Renovate matches .gitea/workflows). A self-hosted Renovate workflow runs it on Gitea, since Gitea has no built-in Renovate; it needs a RENOVATE_TOKEN secret.
2026-06-02 15:29:59 +00:00
parent 826ef58a9d
commit 659912e0af
3 changed files with 98 additions and 0 deletions
@@ -0,0 +1,37 @@
+# Flake CI: formatting gate + evaluation of every host configuration.
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  flake:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install Nix
+        uses: cachix/install-nix-action@v30
+        with:
+          extra_nix_config: |
+            experimental-features = nix-command flakes
+            accept-flake-config = true
+
+      - name: Check formatting
+        run: nix build --print-build-logs '.#checks.x86_64-linux.formatting'
+
+      # Evaluate (not build) each host's toplevel so eval errors fail CI cheaply.
+      # aarch64 hosts evaluate fine on an x86_64 runner; only building would need
+      # emulation, which we deliberately avoid here.
+      - name: Evaluate host configurations
+        run: |
+          set -euo pipefail
+          for host in lyrathorpe-mbp lyrathorpe-x1c emmathorpe-edaas; do
+            echo "::group::eval $host"
+            nix eval --raw ".#nixosConfigurations.$host.config.system.build.toplevel.drvPath"
+            echo
+            echo "::endgroup::"
+          done