ci: switch upload to registry to not use separate login

.gitea/workflows/deploy.yml

@@ -11,7 +11,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      - name: Build and Push Docker Image
+      - name: Build and deploy
         env:
           REGISTRY_USERNAME: ${{ secrets.CONTAINER_REGISTRY_GITEA_USERNAME }}
           REGISTRY_PASSWORD: ${{ secrets.CONTAINER_REGISTRY_GITEA_PASSWORD }}

flake.nix

@@ -23,18 +23,23 @@
 
           # 2. Authenticate if CI environment variables are present
           if [ -n "''${REGISTRY_USERNAME:-}" ] && [ -n "''${REGISTRY_PASSWORD:-}" ]; then
-            echo "CI Environment detected: Logging in to Harbor."
-            ${pkgs.skopeo}/bin/skopeo login gitlab.julian-mutter.de \
-              --username "''${HARBOR_USERNAME}" \
-              --password "''${HARBOR_PASSWORD}"
+            echo "CI Environment detected: Logging in to registry."
+
+            # 3. Upload to container registry
+            ${pkgs.skopeo}/bin/skopeo copy \
+                --dest-creds "''${REGISTRY_USERNAME}:''${REGISTRY_PASSWORD}" \
+                --insecure-policy \
+                docker-archive:result \
+                docker://gitlab.julian-mutter.de/julian/sheetless-server:latest
           else
             echo "Local Environment detected: Skipping login, relying on existing auth."
-          fi
 
-          # 3. Upload to container registry
-          ${pkgs.skopeo}/bin/skopeo copy \
-              docker-archive:result \
-              docker://gitlab.julian-mutter.de/julian/sheetless-server:latest
+            # 3. Upload to container registry
+            ${pkgs.skopeo}/bin/skopeo copy \
+                --insecure-policy \
+                docker-archive:result \
+                docker://gitlab.julian-mutter.de/julian/sheetless-server:latest
+          fi
         '';
       in {
         devShells.default = pkgs.mkShell {