chore(release): 1.18.2 [skip ci]

## [1.18.2](https://github.com/asepharyana/zesdex/compare/v1.18.1...v1.18.2) (2026-08-20) ### Bug Fixes * **nix:** add perl to nativeBuildInputs for openssl-sys Configure ([033f964](https://github.com/asepharyana/zesdex/commit/033f964be0c695106eef74329524ad7b4b8dba14)) * **nix:** correct cargoBuildFlags package name zesdex-backend -> zesdex-gateway ([2de5b57](https://github.com/asepharyana/zesdex/commit/2de5b57133f6c7295d8a85e63cb86504ea2a7d3e))
fix(nix): add perl to nativeBuildInputs for openssl-sys Configure
2026-08-20 12:04:35 +00:00 · 2026-08-20 19:00:29 +07:00 · 2026-08-20 18:44:21 +07:00 · 2026-08-20 18:23:30 +07:00
4 changed files with 72 additions and 3 deletions
@@ -0,0 +1,61 @@
+name: Build & Deploy (Nix)
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+concurrency:
+  group: deploy
+  cancel-in-progress: false
+
+permissions:
+  contents: read
+
+env:
+  VPS_HOST: ${{ secrets.VPS_HOST }}
+  VPS_USER: ${{ secrets.VPS_USER }}
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+
+      - name: Install Nix
+        uses: DeterminateSystems/nix-installer-action@v22
+        with:
+          determinate: false
+          extra-conf: |
+            sandbox = false
+            accept-flake-config = true
+
+      - name: Cache Nix
+        uses: DeterminateSystems/magic-nix-cache-action@v14
+
+      - name: Build zesdex
+        id: build
+        run: |
+          nix build .#default --impure --option sandbox false --print-build-logs
+          STORE_PATH=$(readlink result)
+          echo "store-path=$STORE_PATH" >> "$GITHUB_OUTPUT"
+          echo "Build OK: $STORE_PATH"
+
+      - name: Setup SSH key
+        env:
+          SSH_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
+        run: |
+          mkdir -p ~/.ssh
+          echo "$SSH_KEY" > ~/.ssh/id_ed25519
+          chmod 600 ~/.ssh/id_ed25519
+          sed -i 's/\r$//' ~/.ssh/id_ed25519
+          ssh-keygen -y -f ~/.ssh/id_ed25519 >/dev/null 2>&1 || { echo "SSH key invalid"; exit 1; }
+          ssh-keyscan -H "$VPS_HOST" >> ~/.ssh/known_hosts 2>/dev/null
+
+      - name: Deploy zesdex to VPS
+        run: |
+          STORE_PATH="${{ steps.build.outputs.store-path }}"
+          ssh "$VPS_USER@$VPS_HOST" "nix copy --to file:///nix/store $STORE_PATH && nix-env --install --force $STORE_PATH --profile /nix/var/nix/profiles/zesdex && systemctl restart zesdex"
@@ -1,3 +1,11 @@
+## [1.18.2](https://github.com/asepharyana/zesdex/compare/v1.18.1...v1.18.2) (2026-08-20)
+
+
+### Bug Fixes
+
+* **nix:** add perl to nativeBuildInputs for openssl-sys Configure ([033f964](https://github.com/asepharyana/zesdex/commit/033f964be0c695106eef74329524ad7b4b8dba14))
+* **nix:** correct cargoBuildFlags package name zesdex-backend -> zesdex-gateway ([2de5b57](https://github.com/asepharyana/zesdex/commit/2de5b57133f6c7295d8a85e63cb86504ea2a7d3e))
+
 ## [1.18.1](https://github.com/asepharyana/zesdex/compare/v1.18.0...v1.18.1) (2026-08-01)


@@ -15,7 +15,7 @@ members = [
 ]

 [workspace.package]
-version = "1.18.1"
+version = "1.18.2"
 edition = "2021"
 authors = ["asepharyana <superaseph@gmail.com>"]

@@ -42,9 +42,9 @@
          };

          # Build only the main binary
-          cargoBuildFlags = [ "-p" "zesdex-backend" "--bin" "zesdex" ];
+          cargoBuildFlags = [ "-p" "zesdex-gateway" "--bin" "zesdex" ];

-          nativeBuildInputs = with pkgs; [ pkg-config ];
+          nativeBuildInputs = with pkgs; [ pkg-config perl ];
          buildInputs = with pkgs; [ openssl sqlite ];

          doCheck = false; # Tests require filesystem access
Author	SHA1	Message	Date
semantic-release-bot	924576d2ee	chore(release): 1.18.2 [skip ci] ## [1.18.2](https://github.com/asepharyana/zesdex/compare/v1.18.1...v1.18.2) (2026-08-20) ### Bug Fixes * nix: add perl to nativeBuildInputs for openssl-sys Configure ([`033f964`](https://github.com/asepharyana/zesdex/commit/033f964be0c695106eef74329524ad7b4b8dba14)) * nix: correct cargoBuildFlags package name zesdex-backend -> zesdex-gateway ([`2de5b57`](https://github.com/asepharyana/zesdex/commit/2de5b57133f6c7295d8a85e63cb86504ea2a7d3e))	2026-08-20 12:04:35 +00:00
mytheclipsebotreview	033f964be0	fix(nix): add perl to nativeBuildInputs for openssl-sys Configure openssl-sys vendors an OpenSSL source that runs ./Configure via perl during the build phase. The Nix sandbox had no perl on PATH, causing the gatekeeper build of the zesdex binary to fail ('Command failed ... openssl-build ... Configure'). Adding perl to nativeBuildInputs makes the vendored build resolve. This unblocks the GHA-only deploy workflow.	2026-08-20 19:00:29 +07:00
mytheclipsebotreview	2de5b57133	fix(nix): correct cargoBuildFlags package name zesdex-backend -> zesdex-gateway The gateway crate's package name is zesdex-gateway (not zesdex-backend); the stale -p flag caused to fail in CI with 'package ID specification zesdex-backend did not match any packages'. This unblocks the GHA-only deploy workflow.	2026-08-20 18:44:21 +07:00
mytheclipsebotreview	d1929f2fd4	ci: add nix build-and-deploy GitHub Actions workflow [skip ci] Adds the canonical Nix CI/CD deploy workflow (install Nix, build .#default, copy to VPS via SSH, update profile, systemctl restart) previously missing from this repo. Enforces push-to-GitHub + GHA deploy only (no direct deploy).	2026-08-20 18:23:30 +07:00