From 21ec8a33aea349fbd8d8fa53ff57021fb1806852 Mon Sep 17 00:00:00 2001
From: Marc Mintel <marc@mintel.me>
Date: Tue, 3 Mar 2026 12:54:13 +0100
Subject: [PATCH] fix(ci): use explicit registry token instead of GITHUB_TOKEN
 for docker login

---
 .gitea/workflows/pipeline.yml          | 4 ++--
 packages/infra/gitea/deploy-action.yml | 6 +++---
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.gitea/workflows/pipeline.yml b/.gitea/workflows/pipeline.yml
index 445aaa2..1dc8af4 100644
--- a/.gitea/workflows/pipeline.yml
+++ b/.gitea/workflows/pipeline.yml
@@ -203,8 +203,8 @@ jobs:
         uses: docker/login-action@v3
         with:
           registry: git.infra.mintel.me
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          username: ${{ secrets.REGISTRY_USER }}
+          password: ${{ secrets.REGISTRY_PASS }}
 
       - name: 🏗️ Build & Push ${{ matrix.name }}
         uses: docker/build-push-action@v5
diff --git a/packages/infra/gitea/deploy-action.yml b/packages/infra/gitea/deploy-action.yml
index e080747..fc5a51f 100644
--- a/packages/infra/gitea/deploy-action.yml
+++ b/packages/infra/gitea/deploy-action.yml
@@ -181,8 +181,8 @@ jobs:
         uses: docker/login-action@v3
         with:
           registry: git.infra.mintel.me
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          username: ${{ secrets.REGISTRY_USER }}
+          password: ${{ secrets.REGISTRY_PASS }}
 
       - name: 🏗️ Docker Build & Push
         uses: docker/build-push-action@v5
@@ -262,7 +262,7 @@ jobs:
             set -e
             cd "/home/deploy/sites/${{ github.event.repository.name }}"
             chmod 600 "$ENV_FILE"
-            echo "${{ secrets.GITHUB_TOKEN }}" | docker login git.infra.mintel.me -u "${{ github.actor }}" --password-stdin
+            echo "${{ secrets.REGISTRY_PASS }}" | docker login git.infra.mintel.me -u "${{ secrets.REGISTRY_USER }}" --password-stdin
             docker compose -p "$PROJECT_NAME" --env-file "$ENV_FILE" pull
             docker compose -p "$PROJECT_NAME" --env-file "$ENV_FILE" up -d --remove-orphans
             docker system prune -f --filter "until=24h"