4 files changed, 88 insertions, 60 deletions
diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
deleted file mode 100644
index 1a9a6ea..0000000
--- a/.github/workflows/check.yml
+++ /dev/null
@@ -1,30 +0,0 @@
-name: check flake
-
-on:
-  pull_request:
-    paths:
-      - "**.nix"
-  push:
-    paths:
-      - "**.nix"
-  workflow_dispatch:
-  workflow_call:
-
-jobs:
-  check:
-    runs-on: ubuntu-latest
-    steps:
-      - name: checkout repo
-        uses: actions/checkout@v3
-
-      - name: install nix
-        uses: cachix/install-nix-action@v20
-        with:
-          github_access_token: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: run nix flake check
-        run: |
-          export NIXPKGS_ALLOW_UNSUPPORTED_SYSTEM=1
-          export NIXPKGS_ALLOW_BROKEN=1
-          export NIXPKGS_ALLOW_UNFREE=1
-          nix flake check --impure
diff --git a/.github/workflows/update-inputs.yaml b/.github/workflows/update-inputs.yaml
new file mode 100644
index 0000000..35b22d4
--- /dev/null
+++ b/.github/workflows/update-inputs.yaml
@@ -0,0 +1,44 @@
+name: update all inputs
+
+on:
+  #schedule:
+  #  # run every saturday
+  #  - cron: "0 0 * * 6"
+  workflow_dispatch:
+
+permissions: read-all
+
+jobs:
+  update-lock:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: checkout repo
+        uses: actions/checkout@v3
+
+      - name: install nix
+        uses: cachix/install-nix-action@v20
+        with:
+          github_access_token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: setup cachix
+        uses: cachix/cachix-action@v12
+        with:
+          name: getchoo
+
+      - name: update all inputs
+        uses: DeterminateSystems/update-flake-lock@v19
+        with:
+          inputs: nixpkgs nixpkgsUnstable
+          commit-msg: "chore: update all inputs"
+          pr-title: "chore: update all inputs"
+          pr-body: |
+            Automated changes by the [update-flake-lock](https://github.com/DeterminateSystems/update-flake-lock) GitHub Action.
+
+            ```
+            ${{ env.GIT_COMMIT_MESSAGE }}
+            ```
+
+            bors r+
+          nix-options: "--accept-flake-config"
+          token: ${{ secrets.FLAKE_UPDATE }}
diff --git a/.github/workflows/update-nixpkgs.yaml b/.github/workflows/update-nixpkgs.yaml
new file mode 100644
index 0000000..1e86fe6
--- /dev/null
+++ b/.github/workflows/update-nixpkgs.yaml
@@ -0,0 +1,44 @@
+name: update nixpkgs inputs
+
+on:
+  #schedule:
+  #  # run every 2 days, sunday-friday
+  #  - cron: "0 0 * * 0-5/2"
+  workflow_dispatch:
+
+permissions: read-all
+
+jobs:
+  update-nixpkgs:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: checkout repo
+        uses: actions/checkout@v3
+
+      - name: install nix
+        uses: cachix/install-nix-action@v20
+        with:
+          github_access_token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: setup cachix
+        uses: cachix/cachix-action@v12
+        with:
+          name: getchoo
+
+      - name: update nixpkgs inputs
+        uses: DeterminateSystems/update-flake-lock@v19
+        with:
+          inputs: nixpkgs nixpkgs-stable
+          commit-msg: "chore: update nixpkgs inputs"
+          pr-title: "chore: update nixpkgs inputs"
+          pr-body: |
+            Automated changes by the [update-flake-lock](https://github.com/DeterminateSystems/update-flake-lock) GitHub Action.
+
+            ```
+            ${{ env.GIT_COMMIT_MESSAGE }}
+            ```
+
+            bors r+
+          nix-options: "--accept-flake-config"
+          token: ${{ secrets.FLAKE_UPDATE }}
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
deleted file mode 100644
index 6125d2f..0000000
--- a/.github/workflows/update.yml
+++ /dev/null
@@ -1,30 +0,0 @@
-name: update nixpkgs inputs
-
-on:
-  schedule:
-    - cron: "0 0 * * *"
-  workflow_dispatch:
-
-jobs:
-  update-lock:
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: checkout repo
-        uses: actions/checkout@v3
-
-      - name: install nix
-        uses: cachix/install-nix-action@v20
-        with:
-          github_access_token: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: update inputs
-        run: nix flake lock --update-input nixpkgs --update-input nixpkgsUnstable --update-input openwrt-imagebuilder
-
-      - name: add and commit
-        uses: EndBug/add-and-commit@v9
-        with:
-          default_author: github_actions
-          message: "chore: update nixpkgs inputs"
-  check:
-    uses: ./.github/workflows/check.yml