feat(gitops): migrate domain to riotpiao.com, add CNPG + Forgejo HA on Redis/Postgres, wire ArgoCD apps — enables cluster rebuild after etcd wipe and unblocks the git-source chicken-egg via standalone Helm-source Applications

k8s/security/ci-cd/example-workflows/ci.yml

@@ -37,7 +37,7 @@ jobs:
       # ── 2. Build + push OCI image ───────────────────────────────────────────
       - name: build and push image
         env:
-          REGISTRY: forgejo.forge.riotpiao.homelab.com
+          REGISTRY: forgejo.forge.riotpiao.com
           OWNER: rock
         run: |
           REPO_NAME=${{ github.event.repository.name }}
@@ -60,7 +60,7 @@ jobs:
       # Argo CD notices the commit and rolls out the new image.
       - name: bump deploy repo
         env:
-          REGISTRY: forgejo.forge.riotpiao.homelab.com
+          REGISTRY: forgejo.forge.riotpiao.com
           OWNER: rock
         run: |
           git clone \
@@ -75,7 +75,7 @@ jobs:
 
           git -C /tmp/deploy \
             -c user.name="ci-bot" \
-            -c user.email="[email protected].homelab.com" \
+            -c user.email="[email protected]" \
             commit -am "${REPO_NAME}: deploy ${TAG}"
 
           git -C /tmp/deploy push