make the template nixago-able

src/std/templates/microservice-aws-github/flake.nix

@@ -11,6 +11,8 @@
         (runnables "operables")
         (containers "oci-images" {ci.publish = true;})
         (kubectl "deployments" {ci.apply = true;})
+        # For rendering the Github Action CI/CD
+        (nixago "action")
       ];
     };
 
@@ -20,7 +22,11 @@
     std.url = "github:divnix/std";
     std.inputs.nixpkgs.follows = "nixpkgs";
     std.inputs.n2c.follows = "n2c";
+    std.inputs.nixago.follows = "nixago";
     n2c.url = "github:nlewo/nix2container";
-    n2c.inputs.nixpkgs.follows = "std/nixpkgs";
+    n2c.inputs.nixpkgs.follows = "nixpkgs";
+    nixago.url = "github:nix-community/nixago";
+    nixago.inputs.nixpkgs.follows = "nixpkgs";
+    nixago.inputs.nixago-exts.follows = "";
   };
 }

src/std/templates/microservice-aws-github/ops/github/action.nix

@@ -2,11 +2,14 @@ let
   inherit (inputs.nixpkgs) lib;
   inherit (inputs.std.lib) dev;
 
-  renderFile = (import ./action/template.nix) lib args;
+  template = (import ./action/template.nix) lib;
 in {
+  inherit template;
   ci = dev.mkNixago {
     output = ".github/workflows/ci-cd.yaml";
-    data = renderFile {
+    format = "yaml";
+    hook.mode = "copy";
+    data = template {
       default_branch = "main";
       platform = "aws"; # gc, azure, digitalocean
       # set up with nixbuild.net to speed up builds

src/std/templates/microservice-aws-github/ops/github/action/template.nix

@@ -25,7 +25,7 @@ lib: {
     steps =
       []
       # account is part of ecr url, thus part of `hits` output and needs to pass so we can't mask it
-      ++ lib.optionals (platform == "aws") [lib.recursiveUpdate aws.credentials {mask-aws-account-id = false;}]
+      ++ lib.optionals (platform == "aws") [(lib.recursiveUpdate aws.credentials {mask-aws-account-id = false;})]
       ++ lib.optionals (platform == "aws") [aws.ecr]
       ++ lib.optionals (!withPersistentDiscovery) [installNixAction]
       ++ lib.optionals withNixbuild [useNixbuildAction]