From 776a0e23eaa8327a3ce52f22efdccb7226604c91 Mon Sep 17 00:00:00 2001
From: Oleks <oleks.kuksenko@gmail.com>
Date: Sun, 15 Mar 2026 11:56:02 +0200
Subject: [PATCH] Use nix-ci image with gitea_clone_token for CI builds

The nix-ci entrypoint sets up ~/.netrc from GITEA_CLONE_TOKEN
so Nix can fetch private flake inputs like fleet-pins.
---
 .woodpecker.yaml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.woodpecker.yaml b/.woodpecker.yaml
index c17b9a7..907d3ff 100644
--- a/.woodpecker.yaml
+++ b/.woodpecker.yaml
@@ -5,8 +5,11 @@ when:
 steps:
   - name: build
     image: git.oleks.space/oleks/nix-ci:latest
+    environment:
+      GITEA_CLONE_TOKEN:
+        from_secret: gitea_clone_token
     commands:
-      - echo "extra-experimental-features = nix-command flakes" >> /etc/nix/nix.conf
+      - nixos-ci-entrypoint true
       - nix build .#xonsh --no-link --print-out-paths
       - nix build .#hello-world --no-link --print-out-paths
     backend_options: