# The Docker image that will be used to build your app
image:
  name: "$CI_DEPENDENCY_PROXY_GROUP_IMAGE_PREFIX/nixos/nix:latest"
  entrypoint:
    - /nix/store/smkzrg2vvp3lng3hq7v9svfni5mnqjh2-bash-interactive-5.2p37/bin/bash
stages:
  - test
  - build

default:
  before_script:
    - echo "experimental-features = nix-command flakes" >> /etc/nix/nix.conf
    - nix profile remove git-minimal
    - nix profile install nixpkgs#curl nixpkgs#gitFull nixpkgs#which nixpkgs#ncurses nixpkgs#devenv -vv --show-trace
    - devenv shell echo "trigger install"
    - curl --silent "https://gitlab.com/gitlab-org/incubation-engineering/mobile-devops/download-secure-files/-/raw/main/installer" | bash

# Global builds and stuff
variables:
  #DEBUG: "1" # MAY HORRIBLY LEAK SECRETS, PROCEED WITH CAUTION
  # feature flags
  FF_ENABLE_COMMIT_DATA: "true"
  FF_GENERATE_SOCIAL_CARDS: "true"
  #FF_GIT_COMMITTERS_API: "true"
  SECURE_FILES_DOWNLOAD_PATH: .secretskit
  GIT_DEPTH: "0"
  # ignore pipfile and rely on the lockfile for deterministic builds
  PIPENV_IGNORE_PIPFILE: "true"
  # dotenvx stuff
  DOTENV_PRIVATE_KEY: $DOTENV_PRIVATE_KEY_CI
  MKDOCS_GIT_COMMITTERS_PLUGIN_TOKEN: $CI_JOB_TOKEN

pages:
  stage: build
  script:
    - devenv shell doppler run -- npm run deploy:cf
  artifacts:
    paths:
      # The folder that contains the files to be exposed at the Page URL
      - public
  variables:
    # doppler
    DOPPLER_TOKEN: $DOPPLER_TOKEN
  rules:
    # This ensures that only pushes to the default branch will trigger
    # a pages deploy
    - if: $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH