deploy_production:
  stage: deploy
  before_script:
    - 'which ssh-agent || ( apk add --update --no-cache openssh )'
    - mkdir -p ~/.ssh
    - echo "$SSH_PRIVATE_KEY" | tr -d '\r' > ~/.ssh/gitlab
    - chmod 700 ~/.ssh/gitlab
    - eval "$(ssh-agent -s)"
    - ssh-add ~/.ssh/gitlab
    - ssh-keyscan -H 'vimium.com' >> ~/.ssh/known_hosts
    - ssh-keyscan -H 'git.vimium.com' >> ~/.ssh/known_hosts
    - apk add --no-cache rsync
    - apk add --no-cache curl
  script:
    - echo "Deploying to pki.vimium.com"
    - rsync -avz --progress /builds/vimium/pki/*.{cer,crl,html} pki@vimium.com:/var/www/pki.vimium.com
    - ssh -t pki@vimium.com 'sudo systemctl reload nginx'
    - echo "Deployed"
  artifacts:
    paths:
      - /builds/vimium/pki/
  environment:
    name: production
    url: https://pki.vimium.com
  only:
    - master