2 files changed, 62 insertions, 4 deletions

diff --git a/.github/workflows/publish-docker.yml b/.github/workflows/publish-docker.yml
new file mode 100644
index 0000000..d958e57
--- /dev/null
+++ b/.github/workflows/publish-docker.yml
@@ -0,0 +1,35 @@
+name: pubish docker image
+
+on:
+  push:
+    branches:
+      - master
+
+jobs:
+  build-and-publish:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: checkout repository
+        uses: actions/checkout@v4
+
+      - name: install nix
+        uses: cachix/install-nix-action@v27
+        with:
+          github_access_token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: build docker image
+        run: nix build -L .#dockerImage
+
+      - name: log in to github container registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: publish docker image
+        run: |
+          docker load < result
+          docker tag lurker:latest ghcr.io/${{ github.repository_owner }}/lurker:latest
+          docker push ghcr.io/${{ github.repository_owner }}/lurker:latest
diff --git a/flake.nix b/flake.nix
index f1f3456..2384dcd 100644
--- a/flake.nix
+++ b/flake.nix
@@ -17,7 +17,10 @@
         ];
       });
   in {
-    overlays.default = final: prev: {
+    overlays.default = final: prev: let
+      pname = "lurker";
+      version = "0.1.0";
+    in {
       node_modules = with final;
         stdenv.mkDerivation {
           pname = "lurker-node-modules";
@@ -44,8 +47,7 @@
         };
       lurker = with final;
         stdenv.mkDerivation {
-          pname = "lurker";
-          version = "0.0.1";
+          inherit pname version;
           src = ./.;
           nativeBuildInputs = [makeBinaryWrapper];
           buildInputs = [bun];
@@ -71,6 +73,27 @@
 
           '';
         };
+      dockerImage = with final;
+        final.dockerTools.buildImage {
+          name = pname;
+          tag = "latest";
+
+          copyToRoot = final.buildEnv {
+            name = "image-root";
+            paths = [ final.lurker ];
+            pathsToLink = [ "/bin" ];
+          };
+
+          runAsRoot = ''
+            mkdir -p /data
+          '';
+
+          config = {
+            Cmd = ["/bin/${pname}"];
+            WorkingDir = "/data";
+            Volumes = {"/data" = {};};
+          };
+        };
     };
 
     devShell = forAllSystems (system: let
@@ -84,7 +107,7 @@
       });
 
     packages = forAllSystems (system: {
-      inherit (nixpkgsFor."${system}") lurker node_modules;
+      inherit (nixpkgsFor."${system}") lurker node_modules dockerImage;
     });
 
     defaultPackage = forAllSystems (system: nixpkgsFor."${system}".lurker);