From 37e2495e3d1c4fb60827514779f608dfc21a80f6 Mon Sep 17 00:00:00 2001
From: Kroonk <Tom.misch2@gmail.com>
Date: Wed, 20 May 2026 17:27:14 +0200
Subject: [PATCH] Use Gitea job token for registry login

---
 .gitea/workflows/docker-build.yml | 11 ++++-------
 1 file changed, 4 insertions(+), 7 deletions(-)

diff --git a/.gitea/workflows/docker-build.yml b/.gitea/workflows/docker-build.yml
index 0ac9c47..1c1b248 100644
--- a/.gitea/workflows/docker-build.yml
+++ b/.gitea/workflows/docker-build.yml
@@ -11,6 +11,9 @@ env:
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -43,13 +46,7 @@ jobs:
       - name: Log in to Gitea Package Registry
         shell: sh
         run: |
-          if [ -z "${{ secrets.REGISTRY_USER }}" ] || [ -z "${{ secrets.REGISTRY_TOKEN }}" ]; then
-            echo "Missing registry credentials."
-            echo "Create repository secrets REGISTRY_USER and REGISTRY_TOKEN."
-            echo "REGISTRY_TOKEN must be a Gitea access token with package write permission."
-            exit 1
-          fi
-          echo "${{ secrets.REGISTRY_TOKEN }}" | docker login "${{ env.REGISTRY }}" -u "${{ secrets.REGISTRY_USER }}" --password-stdin
+          echo "${{ gitea.token }}" | docker login "${{ env.REGISTRY }}" -u "${{ gitea.actor }}" --password-stdin
 
       - name: Build and push Docker image
         shell: sh