services:
  build:
    image: docker.io/gentoo/stage3
    command: /build/build-image.sh
    volumes:
      - ./artifacts:/artifacts
      - ./build:/build
  sign:
    image: docker.io/vladgh/gpg
    command: --batch --import /run/secrets/signing_key_private --passphrase-file /run/secrets/signing_key_password
    secrets:
     - signing_key_password
     - signing_key_private
     - signing_key_public
    volumes:
     - ./artifacts:/artifacts
  serve:
    image: docker.io/halverneus/static-file-server
    volumes:
     - ./artifacts:/artifacts

secrets:
  signing_key_password:
    file: secrets/signing_key_password.txt
  signing_key_private:
    file: secrets/HalogenOS_private.asc
  signing_key_public:
    file: secrets/HalogenOS_public.asc