From 222253b7c873b6aa1635b6464e0abc64d5dfd111 Mon Sep 17 00:00:00 2001
From: Graham McIntire <graham@mcintire.me>
Date: Tue, 5 May 2026 10:57:24 -0500
Subject: [PATCH] ci: move container image to codeberg.org/gmcintire/towerops
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The repo got renamed towerops-web → towerops on the Codeberg side,
so the published image follows: image is now
codeberg.org/gmcintire/towerops with the same main-<ts>-<sha> tag
pattern. Login URL is the hardcoded env.REGISTRY rather than
secrets.REGISTRY_URL so a stale URL secret can't push to the wrong
registry.
---
 .forgejo/workflows/production.yaml | 10 +++++++---
 k8s/deployment.yaml                |  4 ++--
 2 files changed, 9 insertions(+), 5 deletions(-)

diff --git a/.forgejo/workflows/production.yaml b/.forgejo/workflows/production.yaml
index 981370b6..1875b48a 100644
--- a/.forgejo/workflows/production.yaml
+++ b/.forgejo/workflows/production.yaml
@@ -5,9 +5,13 @@ on:
     branches:
       - main
 
+# Image hosted on Codeberg's container registry. The shared
+# REGISTRY_USER / REGISTRY_PASSWORD secrets carry Codeberg credentials;
+# login URL is the hardcoded env.REGISTRY rather than secrets.REGISTRY_URL
+# so a stale URL secret can't push to the wrong registry.
 env:
-  REGISTRY: git.mcintire.me
-  IMAGE_NAME: graham/towerops-web
+  REGISTRY: codeberg.org
+  IMAGE_NAME: gmcintire/towerops
 
 jobs:
   test-exunit:
@@ -127,7 +131,7 @@ jobs:
           echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login \
             --username "${{ secrets.REGISTRY_USER }}" \
             --password-stdin \
-            "${{ secrets.REGISTRY_URL }}"
+            "${{ env.REGISTRY }}"
 
           docker push "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${IMAGE_TAG}"
           docker push "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:production"
diff --git a/k8s/deployment.yaml b/k8s/deployment.yaml
index d5aa8657..b8eede47 100644
--- a/k8s/deployment.yaml
+++ b/k8s/deployment.yaml
@@ -32,7 +32,7 @@ spec:
           type: RuntimeDefault
       initContainers:
         - name: migrate
-          image: git.mcintire.me/graham/towerops-web:main-1777403311-23304e1
+          image: codeberg.org/gmcintire/towerops:main-1777403311-23304e1
           imagePullPolicy: IfNotPresent
           command: ["/app/bin/migrate"]
           securityContext:
@@ -100,7 +100,7 @@ spec:
               cpu: "500m"
       containers:
         - name: towerops
-          image: git.mcintire.me/graham/towerops-web:main-1777403311-23304e1
+          image: codeberg.org/gmcintire/towerops:main-1777403311-23304e1
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false