How nix-os works: a merged pull request is the deploy

How nix-os works: a merged pull request is the deploy A workflow diagram generated by Archify. 01 / You 02 / GitHub Actions 03 / The VPS 04 / After the deploy pull request · a branch, never main · You pull request a branch, never main ci.yml · flake check, fmt, statix, deadnix · GitHub Actions ci.yml flake check, fmt, statix, deadnix deploy.yml · builds the system on the runner · GitHub Actions deploy.yml builds the system on the runner cache.nixos.org · what the VPS fetches · The VPS cache.nixos.org what the VPS fetches deploy-rs switch · copies over SSH, activates · The VPS deploy-rs switch copies over SSH, activates magic rollback · no SSH in 60 s: old system · The VPS magic rollback no SSH in 60 s: old system cves.yml · vulnix report, and weekly · After the deploy cves.yml vulnix report, and weekly freeze.yml · the VPS's package list · After the deploy freeze.yml the VPS's package list every push merge to main the closure store paths SSH silent? after it same push