diff --git a/.codeclimate.yml b/.codeclimate.yml
new file mode 100644
index 0000000000000000000000000000000000000000..c820af6b1e42ca776e8a890baebb90ba64e0d6b2
--- /dev/null
+++ b/.codeclimate.yml
@@ -0,0 +1,8 @@
+plugins:
+  phpmd:
+    enabled: true
+    config:
+      file_extensions:
+        - php
+        - inc
+      rulesets: "unusedcode,codesize,naming,controversial,design"
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index e7d8d0e8ba0011af79d91fa36ec755726086d7f8..a58866531f0b712abc0d598a11174fecb2ea6c88 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1,15 +1,33 @@
+stages:
+  - test
+  - performance
+  - dast
+  - deploy
+
 include:
   - project: "e/infra/ecloud/nextcloud-apps/ci-templates"
     ref: main
     file: "nc-apps-checkout-deploy.yml"
+  - project: "e/infra/ecloud/nextcloud-apps/ci-templates"
+    ref: main
+    file: "mr-review-tools.yml"
+  - project: "e/infra/ecloud/nextcloud-apps/ci-templates"
+    ref: main
+    file: "git-operations.yml"
+  - project: "e/infra/ecloud/nextcloud-apps/ci-templates"
+    ref: main
+    file: "populate-code-climate-default-config.yml"
 
 .deploy:nextcloud-app-by-checkout:
   script:
+    # exit on failure
+    - set -e
     # print var to confirm
     - echo "Deploying $APP_NAME to $CI_ENVIRONMENT_NAME ($DEPLOYMENT_HOST):${DEPLOYMENT_PATH}${APP_PATH}"
     # clone repo to /tmp
     - |
       ssh $SSH_USER@$DEPLOYMENT_HOST /bin/bash -s << EOT
+      set -e
       git clone --depth 1 $CI_REPOSITORY_URL --branch $CI_COMMIT_REF_NAME --single-branch /tmp/${CI_JOB_ID}/${APP_NAME}/snappymail
       sudo rsync -avzh --chown www-data:www-data --delete --exclude '.git*' /tmp/${CI_JOB_ID}/${APP_NAME} ${DEPLOYMENT_PATH}${APP_PATH}
       EOT