WIP CI: Split pipeline into two stages

.forgejo/workflows/deploy.yaml

@@ -28,8 +28,6 @@ jobs:
           apk add nodejs-current
           # For website build.
           apk add tzdata coreutils curl jq git
-          # For uploading.
-          apk add rsync openssh
 
       - uses: actions/checkout@v4
 
@@ -42,23 +40,41 @@ jobs:
           ./fetch-calendar.sh
           hugo
 
+      - uses: actions/upload-artifact@v3
+        with:
+          name: website-build
+          path: public/
+
+  deploy:
+    needs: [build]
+    runs-on: docker
+    container:
+      image: alpine
+    if: github.event_name == 'push'
+    steps:
+      - name: Install packages
+        run: |
+          apk update
+          # For CI actions.
+          apk add nodejs-current
+          # For uploading.
+          apk add rsync openssh
+
       - name: Deploy - Prepare keys
-        if: github.event_name == 'push'
         run: |
           echo "${{ secrets.SSH_DEPLOY_KEY }}" > deploykey.priv
           chmod 400 deploykey.priv
           echo "${{ secrets.SSH_KNOWN_HOSTS_FILE }}" > ./known_hosts
 
+      - uses: actions/download-artifact@v3
+        with:
+          name: website-build
+
       - name: Deploy - Upload to staging
-        if: github.event_name == 'push' && github.ref_name != 'main'
+        if: github.ref_name != 'main'
         run: |
           rsync -v -r --delete -e "ssh -i deploykey.priv -o 'UserKnownHostsFile ./known_hosts'" public/ ccchh-website-deploy@public-web-static-intern.hamburg.ccc.de:/var/www/next.hamburg.ccc.de/
       - name: Deploy - Upload to prod
-        if: github.event_name == 'push' && github.ref_name == 'main'
+        if: github.ref_name == 'main'
         run: |
           rsync -v -r --delete -e "ssh -i deploykey.priv -o 'UserKnownHostsFile ./known_hosts'" public/ ccchh-website-deploy@public-web-static-intern.hamburg.ccc.de:/var/www/hamburg.ccc.de/
-
-      - uses: actions/upload-artifact@v3
-        with:
-          name: website-build
-          path: public/