rock/homelab-frontend
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

fix: use env vars for docker registry credentials #2

Merged
rock merged 3 commits from fix/registry-login-env into main 2026-09-07 06:50:50 +00:00
Conversation 0 Commits 3 Files Changed 1
+24 -32
rock commented 2026-09-07 06:38:21 +00:00
Owner
Copy Link
Copy Source

Fix registry login by passing FORGEJO_REGISTRY_USER and FORGEJO_REGISTRY_TOKEN via environment variables instead of direct secret interpolation.

Uses the proven pattern from riotpiao.com reference commit.

This prevents credentials from being exposed in logs or shell history while keeping the standard docker login approach.

After merge + org-level secrets configured:

  • All repos inherit FORGEJO_REGISTRY_USER and FORGEJO_REGISTRY_TOKEN
  • CI validates credentials exist before docker login
  • Image pushed to registry on main push
Fix registry login by passing FORGEJO_REGISTRY_USER and FORGEJO_REGISTRY_TOKEN via environment variables instead of direct secret interpolation. Uses the proven pattern from riotpiao.com reference commit. This prevents credentials from being exposed in logs or shell history while keeping the standard docker login approach. After merge + org-level secrets configured: - All repos inherit FORGEJO_REGISTRY_USER and FORGEJO_REGISTRY_TOKEN - CI validates credentials exist before docker login - Image pushed to registry on main push
rock added 2 commits 2026-09-07 06:38:22 +00:00
fix: standardize CI workflow to unified pattern
CI / Test (pull_request) Successful in 3m23s
Details
CI / Build & Push Image (pull_request) Skipped
Details
5c30fd4fb7 
Reference: riotpiao.com action run 496/707

Unified structure:
- test job: all branches + PRs
- build-push job: main push only, depends on test
- Install Node.js before checkout
- Install docker only in build-push
- Proper secrets and env handling
- Docker login + build + push + prune
fix: validate registry credentials before docker login 152e4259ae 
Add credential validation step to catch missing secrets early with clear error message.
Use direct secret injection (not env vars) for better security.
Isolate docker config to /tmp/docker-config.
rock force-pushed fix/registry-login-env from 8ab60b6d6d to c1a720687e 2026-09-07 06:40:53 +00:00 Compare
rock added 1 commit 2026-09-07 06:49:31 +00:00
fix: use env vars for docker registry credentials
CI / Test (pull_request) Successful in 1m36s
Details
CI / Build & Push Image (pull_request) Skipped
Details
67a1a01b4e 
Pass FORGEJO_REGISTRY_USER and FORGEJO_REGISTRY_TOKEN via environment variables.
Image: forgejo.riotpiao.com/rock/api-gateway (API gateway service)
rock force-pushed fix/registry-login-env from c1a720687e to 67a1a01b4e 2026-09-07 06:49:31 +00:00 Compare
rock merged commit 736c0d7724 into main 2026-09-07 06:50:50 +00:00
rock deleted branch fix/registry-login-env 2026-09-07 06:50:53 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
rock (Rock)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: rock/homelab-frontend#2