up

.gitea/workflows/deploy.yml

@@ -23,6 +23,11 @@ on:
         description: 'The deployment environment'
         required: true
         type: string
+      # The environment type (e.g., worker).
+      env_type:
+        description: 'The environment type'
+        required: true
+        type: string
 
     # ------------------ SECRETS ------------------
     # These are secrets that the calling workflow must pass.
@@ -52,18 +57,6 @@ on:
       VAULT_PASSWORD:
         description: 'Ansible Vault Password'
         required: true
-      # Docker registry username.
-      DOCKER_USERNAME:
-        description: 'Docker Registry Username'
-        required: true
-      # Docker registry password or token.
-      DOCKER_PASSWORD:
-        description: 'Docker Registry Password'
-        required: true
-      # The URL of the Docker registry.
-      DOCKER_REGISTRY:
-        description: 'Docker Registry URL'
-        required: true
       # The address of the HashiCorp Vault server.
       VAULT_ADDR:
         description: 'Vault server address (e.g., https://vault.example.com:8200)'
@@ -76,6 +69,11 @@ on:
       VAULT_SECRETS_PATH:
         description: 'Path to the secrets in Vault'
         required: true
+      # The URL of the Docker registry.
+      DOCKER_REGISTRY:
+        description: 'Docker Registry URL'
+        required: true
+        type: string
 
 jobs:
   # ============================================================================
@@ -178,7 +176,7 @@ jobs:
       contents: read
     outputs:
       image_tag: ${{ steps.meta.outputs.version }}
-      image_name: ${{ secrets.DOCKER_REGISTRY }}/${{ github.repository_owner }}/${{ inputs.app_name }}
+      image_name: ${{ inputs.DOCKER_REGISTRY }}/${{ github.repository_owner }}/${{ inputs.app_name }}
     steps:
       - name: Checkout Code
         uses: actions/checkout@v4
@@ -197,18 +195,18 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Log in to Docker Registry
+      - name: Log in to Gitea's Docker Registry
         uses: docker/login-action@v3
         with:
-          registry: ${{ secrets.DOCKER_REGISTRY }}
-          username: ${{ secrets.DOCKER_USERNAME }}
-          password: ${{ secrets.DOCKER_PASSWORD }}
+          registry: ${{ inputs.DOCKER_REGISTRY }}
+          username: ${{ gitea.actor }}
+          password: ${{ secrets.token }}
 
       - name: Docker metadata
         id: meta
         uses: docker/metadata-action@v5
         with:
-          images: ${{ secrets.DOCKER_REGISTRY }}/${{ github.repository_owner }}/${{ inputs.app_name }}
+          images: ${{ inputs.DOCKER_REGISTRY }}/${{ github.repository_owner }}/${{ inputs.app_name }}
           tags: |
             type=sha,prefix=,format=long
             type=raw,value=latest,enable=${{ github.ref == 'refs/heads/main' }}
@@ -290,6 +288,6 @@ jobs:
                           docker_image_tag=${{ needs.build.outputs.image_tag }} \
                           docker_image_name=${{ needs.build.outputs.image_name }} \
                           docker_image_full=${{ needs.build.outputs.image_name }}:${{ needs.build.outputs.image_tag }} \
-                          docker_registry=${{ secrets.DOCKER_REGISTRY }} \
+                          docker_registry=${{ inputs.DOCKER_REGISTRY }} \
                           $auth_method_var" \
             --vault-password-file .vault_pass