nholtware/workflows
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(actions): default registry and gitops clone URL to https://git.lab.holtlabs.xyz

Browse source 
Compatible change (inputs unchanged); drop insecure-registry wording.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
Noah Holt 2026-11-11 11:50:48 -06:00
parent c1ea61f544
commit 0616dae98a
3 changed files with 7 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

2
README.md
View file

@ -8,7 +8,7 @@ actions, not reusable workflows: Forgejo LTS 11 does not support
- `lint-checks` — prettier + eslint + conventional-commit checks (each - `lint-checks` — prettier + eslint + conventional-commit checks (each
`--if-present`/config-gated); run after `node-checks` in the same job `--if-present`/config-gated); run after `node-checks` in the same job
- `build-push` — docker build + push to the Forgejo registry - `build-push` — docker build + push to the Forgejo registry
(`192.168.1.230:3000`), tags `<short-sha>` + `latest` (`git.lab.holtlabs.xyz`), tags `<short-sha>` + `latest`
- `gitops-bump` — set the image tag in `nholtware/gitops` via - `gitops-bump` — set the image tag in `nholtware/gitops` via
`kustomize edit set image`; ArgoCD deploys from there `kustomize edit set image`; ArgoCD deploys from there

8
build-push/action.yaml
View file

@ -2,8 +2,8 @@ name: build-push
description: > description: >
Language-agnostic image build + push to the homelab Forgejo registry. Language-agnostic image build + push to the homelab Forgejo registry.
The app's Dockerfile owns the toolchain. Run after actions/checkout, on The app's Dockerfile owns the toolchain. Run after actions/checkout, on
the `host` runner label (host docker daemon has the insecure-registry the `host` runner label (the registry is served over HTTPS with a real
config -- see homelab nixos/hosts/forgejo/default.nix). Tags pushed: Let's Encrypt cert, so no insecure-registry config is needed). Tags pushed:
<short-sha> and latest. <short-sha> and latest.
inputs: inputs:
app-name: app-name:
@ -18,9 +18,9 @@ inputs:
required: false required: false
default: Dockerfile default: Dockerfile
registry: registry:
description: Registry host:port description: Registry host (HTTPS, real cert; add :port only if non-443)
required: false required: false
default: "192.168.1.230:3000" default: "git.lab.holtlabs.xyz"
registry-user: registry-user:
description: Registry login user (pass secrets.REGISTRY_USER) description: Registry login user (pass secrets.REGISTRY_USER)
required: true required: true

4
gitops-bump/action.yaml
View file

@ -18,7 +18,7 @@ inputs:
registry: registry:
description: Registry host:port (must match build-push) description: Registry host:port (must match build-push)
required: false required: false
default: "192.168.1.230:3000" default: "git.lab.holtlabs.xyz"
runs: runs:
using: composite using: composite
steps: steps:
@ -31,7 +31,7 @@ runs:
IMAGE="${{ inputs.registry }}/$GITHUB_REPOSITORY_OWNER/${{ inputs.app-name }}" IMAGE="${{ inputs.registry }}/$GITHUB_REPOSITORY_OWNER/${{ inputs.app-name }}"
DIR="$(mktemp -d)" DIR="$(mktemp -d)"
trap 'rm -rf "$DIR"' EXIT trap 'rm -rf "$DIR"' EXIT
git clone --depth 1 "http://ci-bot:${GITOPS_TOKEN}@192.168.1.230:3000/${{ inputs.gitops-repo }}.git" "$DIR" git clone --depth 1 "https://ci-bot:${GITOPS_TOKEN}@git.lab.holtlabs.xyz/${{ inputs.gitops-repo }}.git" "$DIR"
cd "$DIR/manifests/${{ inputs.app-name }}" cd "$DIR/manifests/${{ inputs.app-name }}"
kustomize edit set image "${{ inputs.app-name }}=$IMAGE:$TAG" kustomize edit set image "${{ inputs.app-name }}=$IMAGE:$TAG"
cd "$DIR" cd "$DIR"