ci: switch upload to registry to not use separate login

.gitea/workflows/deploy.yml

@@ -7,13 +7,11 @@ on:
 jobs:
   deploy:
     runs-on: nixos
-    env:
-      NIX_CONFIG: "experimental-features = nix-command flakes"
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      - name: Build and Push Docker Image
+      - name: Build and deploy
         env:
           REGISTRY_USERNAME: ${{ secrets.CONTAINER_REGISTRY_GITEA_USERNAME }}
           REGISTRY_PASSWORD: ${{ secrets.CONTAINER_REGISTRY_GITEA_PASSWORD }}

flake.nix

@@ -24,17 +24,22 @@
           # 2. Authenticate if CI environment variables are present
           if [ -n "''${REGISTRY_USERNAME:-}" ] && [ -n "''${REGISTRY_PASSWORD:-}" ]; then
             echo "CI Environment detected: Logging in to registry."
-            ${pkgs.skopeo}/bin/skopeo login gitlab.julian-mutter.de \
+
-              --username "''${REGISTRY_USERNAME}" \
+            # 3. Upload to container registry
-              --password "''${REGISTRY_PASSWORD}"
+            ${pkgs.skopeo}/bin/skopeo copy \
+                --dest-creds "''${REGISTRY_USERNAME}:''${REGISTRY_PASSWORD}" \
+                --insecure-policy \
+                docker-archive:result \
+                docker://gitlab.julian-mutter.de/julian/sheetless-server:latest
           else
             echo "Local Environment detected: Skipping login, relying on existing auth."
-          fi
 
-          # 3. Upload to container registry
+            # 3. Upload to container registry
-          ${pkgs.skopeo}/bin/skopeo copy \
+            ${pkgs.skopeo}/bin/skopeo copy \
-              docker-archive:result \
+                --insecure-policy \
-              docker://gitlab.julian-mutter.de/julian/sheetless-server:latest
+                docker-archive:result \
+                docker://gitlab.julian-mutter.de/julian/sheetless-server:latest
+          fi
         '';
       in {
         devShells.default = pkgs.mkShell {