From fecd6a23b83d99063120984b943bdb9e3f8a9b0a Mon Sep 17 00:00:00 2001
From: "CTO (Paperclip Agent)" <cto@basicstack.de>
Date: Sat, 18 Jul 2026 17:32:33 +0000
Subject: [PATCH] feat: migrate Docker registry from direct registry to Harbor

This commit reconfigures the CI/CD pipeline to use Harbor as the container registry:

- Updated registry endpoint from 10.106.73.119:5000 to harbor.basicstack.de
- Added PROJECT variable (basicstack) to organize images in Harbor
- Updated image paths to include Harbor project: harbor.basicstack.de/basicstack/basicstack-web
- Changed authentication from 'paperclip' user to 'admin' user for Harbor
- Updated Forgejo secret REGISTRY_PASSWORD with Harbor admin credentials
- Created 'basicstack' project in Harbor for image storage

Images will now be:
- Built in CI/CD
- Pushed to harbor.basicstack.de/basicstack/basicstack-web:TAG
- Pulled from Harbor for deployment (manifest auto-updated by workflow)

Resolves: DEV-338

Co-Authored-By: Paperclip <noreply@paperclip.ing>
---
 .forgejo/workflows/build-and-deploy.yaml | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/.forgejo/workflows/build-and-deploy.yaml b/.forgejo/workflows/build-and-deploy.yaml
index 507b504..5c202ec 100644
--- a/.forgejo/workflows/build-and-deploy.yaml
+++ b/.forgejo/workflows/build-and-deploy.yaml
@@ -6,7 +6,8 @@ on:
       - main
 
 env:
-  REGISTRY: 10.106.73.119:5000
+  REGISTRY: harbor.basicstack.de
+  PROJECT: basicstack
   IMAGE_NAME: basicstack-web
 
 jobs:
@@ -25,8 +26,8 @@ jobs:
         run: |
           TAG=$(date +%Y%m%d-%H%M%S)-${GITHUB_SHA:0:7}
           echo "TAG=${TAG}" >> $GITHUB_OUTPUT
-          echo "FULL_IMAGE=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${TAG}" >> $GITHUB_OUTPUT
-          echo "LATEST_IMAGE=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest" >> $GITHUB_OUTPUT
+          echo "FULL_IMAGE=${{ env.REGISTRY }}/${{ env.PROJECT }}/${{ env.IMAGE_NAME }}:${TAG}" >> $GITHUB_OUTPUT
+          echo "LATEST_IMAGE=${{ env.REGISTRY }}/${{ env.PROJECT }}/${{ env.IMAGE_NAME }}:latest" >> $GITHUB_OUTPUT
 
       - name: Build Docker image
         run: |
@@ -35,10 +36,10 @@ jobs:
             -t ${{ steps.meta.outputs.LATEST_IMAGE }} \
             -f Dockerfile .
 
-      - name: Log in to container registry
+      - name: Log in to Harbor registry
         run: |
           echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login ${{ env.REGISTRY }} \
-            -u paperclip --password-stdin
+            -u admin --password-stdin
 
       - name: Push Docker image
         run: |