[ci] Switch build to Woodpecker dual-push (registry-private + Forgejo)

Phase 1 of the registry consolidation rolling out across the homelab — infra/docs/plans/2026-05-07-forgejo-registry-consolidation-plan.md. * New .woodpecker.yml builds + dual-pushes to registry.viktorbarzin.me:5050/beadboard AND forgejo.viktorbarzin.me/viktor/beadboard. * GHA build-and-deploy.yml renamed to .disabled — would otherwise race the Woodpecker build and clobber Forgejo with a stale image during the bake. Re-enable only on rollback. * No deploy step yet — Phase 3 flips infra/stacks/beads-server/main.tf image= reference; pods still pull from registry.viktorbarzin.me through the bake. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-07 15:58:44 +00:00 · 2026-05-07 15:58:44 +00:00 · 648fbbfed8
commit 648fbbfed8
parent 17a38e435f
2 changed files with 44 additions and 0 deletions
--- a/.github/workflows/build-and-deploy.yml.disabled
+++ b/.github/workflows/build-and-deploy.yml.disabled
@ -0,0 +1,75 @@
+name: Build and Deploy
+
+on:
+  push:
+    branches: [main, master]
+  workflow_dispatch:
+
+env:
+  IMAGE_NAME: beadboard
+  REGISTRY: registry.viktorbarzin.me:5050
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    outputs:
+      image_tag: ${{ steps.meta.outputs.sha }}
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: docker/setup-buildx-action@v3
+
+      - id: meta
+        run: echo "sha=$(echo ${{ github.sha }} | cut -c1-8)" >> "$GITHUB_OUTPUT"
+
+      - name: Log in to private registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ secrets.REGISTRY_USERNAME }}
+          password: ${{ secrets.REGISTRY_PASSWORD }}
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: Dockerfile
+          push: true
+          platforms: linux/amd64
+          tags: |
+            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.meta.outputs.sha }}
+            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+  deploy:
+    needs: build
+    runs-on: ubuntu-latest
+    if: github.event_name == 'push'
+    steps:
+      - name: Trigger Woodpecker deploy
+        env:
+          # TODO: set WOODPECKER_REPO_ID once the beadboard repo is registered
+          # with Woodpecker (infra CLAUDE.md: "Woodpecker API uses numeric repo IDs").
+          WOODPECKER_REPO_ID: "TBD"
+        run: |
+          if [ "$WOODPECKER_REPO_ID" = "TBD" ]; then
+            echo "Woodpecker repo not yet registered — skipping deploy trigger."
+            echo "Image built and pushed as ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ needs.build.outputs.image_tag }}"
+            exit 0
+          fi
+          for attempt in 1 2 3; do
+            STATUS=$(curl -s -o /dev/null -w "%{http_code}" -X POST \
+              "https://ci.viktorbarzin.me/api/repos/${WOODPECKER_REPO_ID}/pipelines" \
+              -H "Authorization: Bearer ${{ secrets.WOODPECKER_TOKEN }}" \
+              -H "Content-Type: application/json" \
+              -d "{\"branch\":\"main\",\"variables\":{\"IMAGE_TAG\":\"${{ needs.build.outputs.image_tag }}\"}}")
+            if [ "$STATUS" -ge 200 ] && [ "$STATUS" -lt 300 ]; then
+              echo "Woodpecker deploy triggered (HTTP $STATUS)"
+              exit 0
+            fi
+            echo "Attempt $attempt failed (HTTP $STATUS), retrying in 30s..."
+            sleep 30
+          done
+          echo "Failed to trigger Woodpecker deploy after 3 attempts"
+          exit 1