on:
  workflow_dispatch:
  push:
    branches:
      - main
  schedule:
    - cron: 0 0 * * 0
jobs:
  build:
    runs-on: archlinux-latest
    steps:
      - name: setup
        run: |
          pacman-key --init
          pacman -Syu --noconfirm --needed base-devel git jq nodejs openssh rsync
          sed -i -E 's/(^OPTIONS=\([^)]*)\b(debug)\b/\1!\2/' /etc/makepkg.conf
          useradd -m builder
          echo "${{ secrets.GPG_PRIVATE_KEY }}" > /home/builder/private.asc
          echo "${{ secrets.GPG_KEY_PASSWD }}" > /home/builder/gpgpasswd
          chown builder: /home/builder/private.asc /home/builder/gpgpasswd
      - name: checkout repo
        uses: actions/checkout@v6
      - name: add ssh key
        uses: actions/ssh-setup@v2
        with:
          ssh-key: ${{ secrets.ACTIONS_SSH_KEY }}
          add-hosts: "toufy.me"
          run-as: "builder"
      - name: build
        run: |
          chown -R builder: .
          su builder -c "./build.sh"