From 3cb8f648a1479a5efacbfcd42616ba933ea8beb1 Mon Sep 17 00:00:00 2001
From: Wyatt <wyatt@leeworks.dev>
Date: Sat, 20 Jun 2026 17:49:43 -0400
Subject: [PATCH] fix(ci): push docs-site image to gitea.leeworks.dev registry

registry.leeworks.dev serves Traefik's default self-signed cert (TLS verify
fails). Gitea's built-in container registry at gitea.leeworks.dev has a valid
Let's Encrypt cert, so push there instead.
---
 .gitea/workflows/build-docs.yaml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/build-docs.yaml b/.gitea/workflows/build-docs.yaml
index 0a07560..66e24ce 100644
--- a/.gitea/workflows/build-docs.yaml
+++ b/.gitea/workflows/build-docs.yaml
@@ -95,14 +95,17 @@ jobs:
           docker info >/dev/null   # confirms the dind daemon is reachable
 
       - name: Log in to container registry
+        # Use Gitea's built-in container registry (gitea.leeworks.dev), which
+        # has a valid Let's Encrypt cert. The standalone registry.leeworks.dev
+        # serves Traefik's default self-signed cert and fails TLS verification.
         run: |
-          echo "${{ secrets.GITEA_TOKEN }}" | docker login registry.leeworks.dev \
+          echo "${{ secrets.GITEA_TOKEN }}" | docker login gitea.leeworks.dev \
             -u ${{ gitea.actor }} --password-stdin
 
       - name: Build and push docs-site image
         working-directory: api-company/docs-site
         run: |
-          IMAGE="registry.leeworks.dev/leeworks-agents/docs-site"
+          IMAGE="gitea.leeworks.dev/leeworks-agents/docs-site"
           SHA="${{ gitea.sha }}"
           docker build -t "$IMAGE:$SHA" -t "$IMAGE:latest" .
           docker push "$IMAGE:$SHA"