.clone_and_replace_www:
  script:
    - git clone https://gitlab-ci-token:${CI_JOB_TOKEN}@gitlab.com/faradaysec/faraday-angular.git frontend
    - cd frontend
    - (git branch -a | grep $CI_COMMIT_REF_NAME) && export FRONT_REF=$CI_COMMIT_REF_NAME || export FRONT_REF=white/master
    - (git branch -a | grep $ANGULAR_REF) && export FRONT_REF=$ANGULAR_REF || export FRONT_REF=$FRONT_REF
    - echo $FRONT_REF
    - git checkout $FRONT_REF
    - cd ..
    - rm faraday/server/www
    - mv frontend/www/ faraday/server/www/
    - rm -fr frontend

generate_build_file:
    image: registry.gitlab.com/faradaysec/devops
    stage: pre_build
    script:
        - "/bin/mkdir faraday_copy"
        - !reference [.clone_and_replace_www, script]
        - "/usr/bin/rsync -aq --exclude 'faraday_copy' --exclude '.cache' . faraday_copy"
        - "/bin/tar -zcf faraday.tar.gz faraday_copy"
    rules:
      - !reference [.on-master-staging, rules]
      - !reference [.be-built, rules]
      - when: never
    artifacts:
        name: 'faraday'
        paths:
            - "faraday.tar.gz"
        expire_in: 15 days

build_nix_python3:
  image: nixorg/nix
  stage: pre_build
  script:
    - nix-env -if pynixify/nixpkgs.nix -A cachix gnugrep
    - nix-env -if pynixify/nixpkgs.nix -A vault
    - !reference [ .get_secrets, script ]
    - mkdir -p ~/.config/cachix
    - export USER=$(whoami)
    - echo "$CACHIX_CONFG" >~/.config/cachix/cachix.dhall
    - !reference [ .clone_and_replace_www, script ]
    - cachix use faradaysec
    - nix-build
    - tar cf /py3.tar $(nix-store --query --requisites $(readlink result))
    - mkdir -p /opt/faraday
    - cp -r $(readlink result)/* /opt/faraday
    - tar rvf /py3.tar /opt/faraday
    - mv /py3.tar $CI_PROJECT_DIR
  artifacts:
    name: python3
    paths:
      - py3.tar
    expire_in: 15 days # in the future we don't need to expire this.
  rules:
      - !reference [.on-master-staging, rules]
      - !reference [.be-built, rules]
      - when: never