ci: only run the scripts that need envs to be added on main

.gitlab-ci.yml

@@ -40,19 +40,24 @@ update:
     variables:
       - $UPDATE_FLAKE == "yes"
 
+.scripts_base: &scripts_base
+  # load nix environment
+  - . "$HOME/.nix-profile/etc/profile.d/nix.sh"
+  - git pull origin main
+
+.scripts_deploy: &scripts_deploy
+  # setup ssh key
+  - eval $(ssh-agent -s)
+  - echo "$DEPLOY_KEY" | tr -d '\r' | ssh-add - > /dev/null
+  - mkdir -p ~/.ssh
+  - chmod 700 ~/.ssh
+
 # every commit on main will build and deploy
 .build_template: &builder
   tags:
     - nix
   before_script:
-    # setup ssh key
-    - eval $(ssh-agent -s)
-    - echo "$DEPLOY_KEY" | tr -d '\r' | ssh-add - > /dev/null
-    - mkdir -p ~/.ssh
-    - chmod 700 ~/.ssh
-    # load nix environment
-    - . "$HOME/.nix-profile/etc/profile.d/nix.sh"
-    - git pull origin main
+    - *scripts_base
   only:
     changes:
       - applications/**/*
@@ -63,6 +68,9 @@ update:
 
 # deploy items only run on main
 .deploy_template: &deployment
+  before_script:
+    - *scripts_deploy
+    - *scripts_base
   only:
     refs:
       - main