From 8f0e97dacf66479bad66a3fc42197504dc501fd4 Mon Sep 17 00:00:00 2001
From: Story Crater Bot <19826264+Riotpiaole@users.noreply.github.com>
Date: Fri, 21 Aug 2026 20:36:17 -0700
Subject: [PATCH] ci(prod): add image build workflow for prod deployments

---
 .gitea/workflows/build-prod.yaml | 36 ++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)
 create mode 100644 .gitea/workflows/build-prod.yaml

diff --git a/.gitea/workflows/build-prod.yaml b/.gitea/workflows/build-prod.yaml
new file mode 100644
index 0000000..5d2f46c
--- /dev/null
+++ b/.gitea/workflows/build-prod.yaml
@@ -0,0 +1,36 @@
+name: build-prod
+
+on:
+  push:
+    branches: [prod]
+
+jobs:
+  build-push:
+    runs-on: docker
+    permissions:
+      packages: write
+    steps:
+      - name: install buildx and git
+        run: apk add --no-cache docker git
+
+      - uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build and push image (commit SHA + latest)
+        run: |
+          COMMIT_SHA=${{ github.sha }}
+          SHORT_SHA=${COMMIT_SHA:0:7}
+          IMAGE_NAME="forgejo.riotpiao.com/rock/kmsvc-manage"
+          
+          docker build \
+            -t ${IMAGE_NAME}:${SHORT_SHA} \
+            -t ${IMAGE_NAME}:latest \
+            .
+          
+          # For now, tag locally. When registry auth is configured:
+          # docker push ${IMAGE_NAME}:${SHORT_SHA}
+          # docker push ${IMAGE_NAME}:latest
+          
+          echo "Built image: ${IMAGE_NAME}:${SHORT_SHA} and ${IMAGE_NAME}:latest"