nix ci: cachix push

.github/workflows/nix.yml

@@ -12,9 +12,8 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - uses: DeterminateSystems/nix-installer-action@main
-        with:
-          extra-conf: |
-            trusted-substituters = https://gepetto.cachix.org
-            trusted-public-keys = gepetto.cachix.org-1:toswMl31VewC0jGkN6+gOelO2Yom0SOHzPwJMY2XiDY=
       - uses: DeterminateSystems/magic-nix-cache-action@main
-      - run: nix build --accept-flake-config
+      - run: nix --accept-flake-config build -L
+      - run: nix --accept-flake-config run .#cachix push gepetto $(readlink result)
+        env:
+          CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }}

flake.nix

@@ -37,8 +37,9 @@
           ...
         }:
         {
-          packages.default = pkgs.callPackage ./. {
-            hpp-util = inputs.hpp-util.packages.${system}.default;
+          packages = {
+            inherit (pkgs) cachix;
+            default = pkgs.callPackage ./. { hpp-util = inputs.hpp-util.packages.${system}.default; };
           };
           devShells.default = pkgs.mkShell { inputsFrom = [ self'.packages.default ]; };
         };