| 1 | --- |
| 2 | name: Apply DNS changes |
| 3 | |
| 4 | on: |
| 5 | push: |
| 6 | branches: |
| 7 | - main |
| 8 | paths: |
| 9 | - "dns/**" |
| 10 | workflow_dispatch: |
| 11 | |
| 12 | permissions: {} |
| 13 | |
| 14 | jobs: |
| 15 | dnscontrol: |
| 16 | runs-on: ubuntu-latest |
| 17 | strategy: |
| 18 | fail-fast: true |
| 19 | steps: |
| 20 | - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 |
| 21 | with: |
| 22 | persist-credentials: false |
| 23 | - uses: cachix/install-nix-action@630ae543ea3a38a9a4166f03376c02c50f408342 # v31 |
| 24 | - name: dnscontrol push |
| 25 | env: |
| 26 | GANDI_TOKEN: "${{ secrets.GANDI_TOKEN }}" # Expires 2027-05-29 |
| 27 | GANDI_SHARING_ID: "${{ secrets.GANDI_SHARING_ID }}" |
| 28 | working-directory: ./dns/ |
| 29 | run: | |
| 30 | nix run --inputs-from . nixpkgs#dnscontrol -- push |