Limit CI build to tagged commits

.gitlab-ci.yml

 ---
 
+workflow:
+  rules:
+  - if: '$CI_COMMIT_TAG'
+
+
 makepkg:
   stage: build
   script:
-    - seblu-build
+  - seblu-build
   artifacts:
     name: $CI_PROJECT_NAME-$CI_COMMIT_REF_NAME-$CI_COMMIT_SHA
     expire_in: 3 month
-    paths:
-      - config.x86_64
-      - "*.pkg.tar.*"
-  only:
-    - branches
-    - tags
-    - web
+    ths:
+    - config.x86_64
+    - "*.pkg.tar.*"
 
 commitpkg:
   stage: deploy
   script:
-    - eval $(ssh-agent -s)
-    # - trap "kill $SSH_AGENT_PID" 0
-    # trap is broken in gitlab runner, see:
-    # https://gitlab.com/gitlab-org/gitlab-runner/issues/3009
-    # use a workaournd with sleep and kill:
-    - sleep 300 && kill "$SSH_AGENT_PID" & disown
-    - echo "$SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add - > /dev/null
-    - seblu-push
-  only:
-    - tags
-    - web
+  - eval $(ssh-agent -s)
+  # - trap "kill $SSH_AGENT_PID" 0
+  # trap is broken in gitlab runner, see:
+  # https://gitlab.com/gitlab-org/gitlab-runner/issues/3009
+  # use a workaournd with sleep and kill:
+  - sleep 300 && kill "$SSH_AGENT_PID" & disown
+  - echo "$SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add - > /dev/null
+  - seblu-push