From 0789de39f01ccc1627cfed6d1882baa9f802c9ee Mon Sep 17 00:00:00 2001
From: "deploy-debbie[bot]" <deploy-debbie[bot]@users.noreply.github.com>
Date: Wed, 18 Mar 2026 18:37:47 +0000
Subject: [PATCH] Switch base images from Docker Hub to GHCR mirror

Avoids Docker Hub 429 rate limits by pulling node:20-alpine and
nginx:stable-alpine from ghcr.io/cartsnitch/mirror/. GHCR login
now runs on all builds (not just main push) to authenticate pulls.

Ref: cartsnitch/infra#7, CAR-55

Co-Authored-By: Paperclip <noreply@paperclip.ing>
---
 .github/workflows/ci.yml | 1 -
 Dockerfile               | 4 ++--
 2 files changed, 2 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 585655d..2f9b668 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -52,7 +52,6 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Log in to GHCR
-        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
         uses: docker/login-action@v3
         with:
           registry: ${{ env.REGISTRY }}
diff --git a/Dockerfile b/Dockerfile
index 6a8b88d..4fe4b77 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # Stage 1: Build
-FROM node:20-alpine AS build
+FROM ghcr.io/cartsnitch/mirror/node:20-alpine AS build
 
 WORKDIR /app
 
@@ -10,7 +10,7 @@ COPY . .
 RUN npm run build
 
 # Stage 2: Production
-FROM nginx:stable-alpine AS prod
+FROM ghcr.io/cartsnitch/mirror/nginx:stable-alpine AS prod
 
 COPY --from=build /app/dist /usr/share/nginx/html
 COPY nginx.conf /etc/nginx/conf.d/default.conf