dotfiles/.forgejo/workflows/tailscale.yml

40 lines
1.1 KiB
YAML
Executable file

name: sync tailscale acls
on:
push:
branches: [ "main" ]
pull_request:
branches: [ "main" ]
jobs:
acls:
runs-on: ubuntu-latest
steps:
- name: checkout code
uses: actions/checkout@v5.0.0
with:
sparse-checkout-cone-mode: false
sparse-checkout: |
policy.hujson
- name: fetch version cache
uses: actions/cache@v4.3.0
with:
path: ./version-cache.json
key: version-cache.json-${{ github.run_id }}
restore-keys: |
version-cache.json-
- name: test acl
id: test-acl
uses: https://github.com/tailscale/gitops-acl-action@v1.3.1
with:
api-key: ${{ secrets.TS_API_KEY }}
tailnet: ${{ secrets.TS_TAILNET }}
action: test
- name: deploy acl
if: forgejo.event_name == 'push'
id: deploy-acl
uses: https://github.com/tailscale/gitops-acl-action@v1.3.1
with:
api-key: ${{ secrets.TS_API_KEY }}
tailnet: ${{ secrets.TS_TAILNET }}
action: apply