Build .drone.yml with jsonnet instead of drone

The Drone tool completely ignores the environment key, because of course
it does. It seems the CLI tool has been abandoned for feature parity
here in favour of the built-in enterprise jsonnet parser, so guess we're
doing this.

.drone.yml

@@ -1,76 +1,103 @@
 ---
-kind: pipeline
-type: docker
-name: nixpkgs-unstable
-
-platform:
-  os: linux
-  arch: amd64
-
-steps:
-- name: build
-  image: nixos/nix
-  commands:
-  - nix-channel --add https://nixos.org/channels/nixpkgs-unstable nixos
-  - nix-channel --update
-  - nix-build ci.nix -A buildOutputs
-  - nix eval -f default.nix 'lib'
-  - nix eval -f default.nix 'modules'
-  - nix eval -f default.nix 'overlays'
-
-- name: deploy
-  image: nixpkgs/cachix
-  commands:
-  - nix-build ci.nix -A cacheOutputs | cachix push "${CACHIX_CACHE}"
-
+{
+   "environment": {
+      "CACHIX_CACHE": "xeals",
+      "CACHIX_SIGNING_KEY": {
+         "from_secret": "cachix_key"
+      },
+      "NUR_REPO": "xeals"
+   },
+   "kind": "pipeline",
+   "name": "nixpkgs-unstable",
+   "steps": [
+      {
+         "commands": [
+            "nix-channel --add https://nixos.org/channels/nixpkgs-unstable nixos",
+            "nix-channel --update",
+            "nix-build ci.nix -A buildOutputs",
+            "nix eval -f default.nix 'lib'",
+            "nix eval -f default.nix 'modules'",
+            "nix eval -f default.nix 'overlays'"
+         ],
+         "image": "nixos/nix",
+         "name": "build"
+      },
+      {
+         "commands": [
+            "nix-build ci.nix -A cacheOutputs | cachix push \"${CACHIX_CACHE}\""
+         ],
+         "image": "nixpkgs/cachix",
+         "name": "deploy"
+      }
+   ],
+   "type": "docker"
+}
 ---
-kind: pipeline
-type: docker
-name: nixos-unstable
-
-platform:
-  os: linux
-  arch: amd64
-
-steps:
-- name: build
-  image: nixos/nix
-  commands:
-  - nix-channel --add https://nixos.org/channels/nixos-unstable nixos
-  - nix-channel --update
-  - nix-build ci.nix -A buildOutputs
-  - nix eval -f default.nix 'lib'
-  - nix eval -f default.nix 'modules'
-  - nix eval -f default.nix 'overlays'
-
-- name: deploy
-  image: nixpkgs/cachix
-  commands:
-  - nix-build ci.nix -A cacheOutputs | cachix push "${CACHIX_CACHE}"
-
+{
+   "environment": {
+      "CACHIX_CACHE": "xeals",
+      "CACHIX_SIGNING_KEY": {
+         "from_secret": "cachix_key"
+      },
+      "NUR_REPO": "xeals"
+   },
+   "kind": "pipeline",
+   "name": "nixos-unstable",
+   "steps": [
+      {
+         "commands": [
+            "nix-channel --add https://nixos.org/channels/nixos-unstable nixos",
+            "nix-channel --update",
+            "nix-build ci.nix -A buildOutputs",
+            "nix eval -f default.nix 'lib'",
+            "nix eval -f default.nix 'modules'",
+            "nix eval -f default.nix 'overlays'"
+         ],
+         "image": "nixos/nix",
+         "name": "build"
+      },
+      {
+         "commands": [
+            "nix-build ci.nix -A cacheOutputs | cachix push \"${CACHIX_CACHE}\""
+         ],
+         "image": "nixpkgs/cachix",
+         "name": "deploy"
+      }
+   ],
+   "type": "docker"
+}
 ---
-kind: pipeline
-type: docker
-name: nixos-20.03
-
-platform:
-  os: linux
-  arch: amd64
-
-steps:
-- name: build
-  image: nixos/nix
-  commands:
-  - nix-channel --add https://nixos.org/channels/nixos-20.03 nixos
-  - nix-channel --update
-  - nix-build ci.nix -A buildOutputs
-  - nix eval -f default.nix 'lib'
-  - nix eval -f default.nix 'modules'
-  - nix eval -f default.nix 'overlays'
-
-- name: deploy
-  image: nixpkgs/cachix
-  commands:
-  - nix-build ci.nix -A cacheOutputs | cachix push "${CACHIX_CACHE}"
-
+{
+   "environment": {
+      "CACHIX_CACHE": "xeals",
+      "CACHIX_SIGNING_KEY": {
+         "from_secret": "cachix_key"
+      },
+      "NUR_REPO": "xeals"
+   },
+   "kind": "pipeline",
+   "name": "nixos-20.03",
+   "steps": [
+      {
+         "commands": [
+            "nix-channel --add https://nixos.org/channels/nixos-20.03 nixos",
+            "nix-channel --update",
+            "nix-build ci.nix -A buildOutputs",
+            "nix eval -f default.nix 'lib'",
+            "nix eval -f default.nix 'modules'",
+            "nix eval -f default.nix 'overlays'"
+         ],
+         "image": "nixos/nix",
+         "name": "build"
+      },
+      {
+         "commands": [
+            "nix-build ci.nix -A cacheOutputs | cachix push \"${CACHIX_CACHE}\""
+         ],
+         "image": "nixpkgs/cachix",
+         "name": "deploy"
+      }
+   ],
+   "type": "docker"
+}
 ...

shell.nix

@@ -2,6 +2,6 @@
 
 pkgs.mkShell {
   buildInputs = [
-    pkgs.jsonnet pkgs.drone-cli
+    pkgs.jsonnet
   ];
 }