Switch base images from Docker Hub to GHCR mirror

Avoids Docker Hub 429 rate limits by pulling node:20-alpine and nginx:stable-alpine from ghcr.io/cartsnitch/mirror/. GHCR login now runs on all builds (not just main push) to authenticate pulls. Ref: cartsnitch/infra#7, CAR-55 Co-Authored-By: Paperclip <noreply@paperclip.ing>
feat: add Renovate dependency update config
2026-03-18 18:37:47 +00:00 · 2026-03-18 18:21:31 +00:00 · 2026-03-18 18:20:31 +00:00 · 2026-03-18 18:11:01 +00:00 · 2026-03-18 16:36:02 +00:00 · 2026-03-18 14:27:23 +00:00
3 changed files with 6 additions and 3 deletions
@@ -52,7 +52,6 @@ jobs:
      - uses: actions/checkout@v4

      - name: Log in to GHCR
-        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
@@ -1,5 +1,5 @@
 # Stage 1: Build
-FROM node:20-alpine AS build
+FROM ghcr.io/cartsnitch/mirror/node:20-alpine AS build

 WORKDIR /app

@@ -10,7 +10,7 @@ COPY . .
 RUN npm run build

 # Stage 2: Production
-FROM nginx:stable-alpine AS prod
+FROM ghcr.io/cartsnitch/mirror/nginx:stable-alpine AS prod

 COPY --from=build /app/dist /usr/share/nginx/html
 COPY nginx.conf /etc/nginx/conf.d/default.conf
@@ -0,0 +1,4 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["local>cartsnitch/.github:renovate-config"]
+}
Author	SHA1	Message	Date
deploy-debbie[bot]	0789de39f0	Switch base images from Docker Hub to GHCR mirror Avoids Docker Hub 429 rate limits by pulling node:20-alpine and nginx:stable-alpine from ghcr.io/cartsnitch/mirror/. GHCR login now runs on all builds (not just main push) to authenticate pulls. Ref: cartsnitch/infra#7, CAR-55 Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-03-18 18:37:47 +00:00
deploy-debbie[bot]	e57baa4468	feat: add Renovate dependency update config Extends the shared CartSnitch Renovate preset from cartsnitch/.github. Minor/patch automerge, major requires review, dependency PRs labeled and grouped. Co-authored-by: Deploy Debbie <debbie@cartsnitch.com> Co-authored-by: Paperclip <noreply@paperclip.ing>	2026-03-18 18:21:31 +00:00
deploy-debbie[bot]	e42b7e1a66	fix(ci): remove unnecessary Docker Hub login step The build-and-push job had an unconditional Docker Hub login step that was failing because DOCKERHUB_USERNAME and DOCKERHUB_TOKEN secrets are not provisioned. Since we push images to GHCR (not Docker Hub), this step is not needed. Closes cartsnitch/infra#5 Co-authored-by: deploy-debbie[bot] <268472978+deploy-debbie[bot]@users.noreply.github.com> Co-authored-by: Paperclip <noreply@paperclip.ing>	2026-03-18 18:20:31 +00:00
chip-overstock[bot]	265f2ae654	Merge pull request #9 from cartsnitch/fix/ci-docker-ratelimit Fix CI: add Docker Hub credentials for base image pulls	2026-03-18 18:11:01 +00:00
Deploy Debbie	2c4e78f0a7	fix(ci): add Docker Hub login to avoid rate limit on base image pulls The build-and-push job pulls node:20-alpine and nginx:stable-alpine from Docker Hub during docker build. Without authentication these pulls hit the unauthenticated rate limit, causing intermittent build failures. Closes #8 Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-03-18 16:36:02 +00:00
chip-overstock[bot]	da775d362a	Merge pull request #7 from cartsnitch/feature/dockerfile feat: add multi-stage Dockerfile for PWA	2026-03-18 14:27:23 +00:00