ci: push Docker images to Gitea registry (git.farh.net)

CTO decision: use Gitea built-in OCI registry per CAR-963. - Replace GHCR login with Gitea Container Registry login - REGISTRY: ghcr.io -> git.farh.net - Use secrets.GITEA_TOKEN for authentication - Tag convention unchanged: CalVer, latest, sha-<hash> Co-Authored-By: Paperclip <noreply@paperclip.ing>
release: promote uat → main (seed tooling CAR-812 + auth health)
2026-05-23 15:33:24 +00:00 · 2026-05-04 21:55:13 +00:00 · 2026-05-04 19:42:36 +00:00
1 changed files with 13 additions and 13 deletions
@@ -16,7 +16,7 @@ permissions:
  security-events: write

 env:
-  REGISTRY: ghcr.io
+  REGISTRY: git.farh.net
  IMAGE_NAME: cartsnitch/cartsnitch
  RECEIPTWITNESS_IMAGE_NAME: cartsnitch/receiptwitness
  API_IMAGE_NAME: cartsnitch/api
@@ -133,13 +133,13 @@ jobs:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

-      - name: Log in to GHCR
+      - name: Log in to Gitea Container Registry
        if: github.event_name == 'push'
        uses: docker/login-action@v3
        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          registry: git.farh.net
+          username: cartsnitch
+          password: ${{ secrets.GITEA_TOKEN }}

      - name: Extract metadata
        id: meta
@@ -227,13 +227,13 @@ jobs:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

-      - name: Log in to GHCR
+      - name: Log in to Gitea Container Registry
        if: github.event_name == 'push'
        uses: docker/login-action@v3
        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          registry: git.farh.net
+          username: cartsnitch
+          password: ${{ secrets.GITEA_TOKEN }}

      - name: Extract metadata
        id: meta
@@ -319,13 +319,13 @@ jobs:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

-      - name: Log in to GHCR
+      - name: Log in to Gitea Container Registry
        if: github.event_name == 'push'
        uses: docker/login-action@v3
        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          registry: git.farh.net
+          username: cartsnitch
+          password: ${{ secrets.GITEA_TOKEN }}

      - name: Extract metadata (API)
        id: meta