Use registry token for image push

.github/workflows/docker-build.yml

@@ -6,6 +6,7 @@ on:
 
 env:
   REGISTRY: git.mischlabs.de
+  REGISTRY_IMAGE: git.mischlabs.de/mrdiderot/photography
 
 jobs:
   build-and-push:
@@ -44,23 +45,27 @@ jobs:
         run: docker version
 
       - name: Log in to package registry
-        uses: docker/login-action@v3
+        env:
-        with:
+          REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
-          registry: ${{ env.REGISTRY }}
+          REGISTRY_TOKEN: ${{ secrets.REGISTRY_TOKEN }}
-          username: ${{ github.actor }}
+        run: |
-          password: ${{ secrets.GITHUB_TOKEN }}
+          if [ -z "$REGISTRY_USERNAME" ] || [ -z "$REGISTRY_TOKEN" ]; then
+            echo "Missing registry credentials."
+            echo "Create repository secrets REGISTRY_USERNAME and REGISTRY_TOKEN."
+            echo "REGISTRY_TOKEN must be a Gitea access token with package write permission."
+            exit 1
+          fi
+
+          echo "$REGISTRY_TOKEN" | docker login "$REGISTRY" -u "$REGISTRY_USERNAME" --password-stdin
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Lowercase image name
-        run: echo "IMAGE_NAME=$(echo '${{ github.repository }}' | tr '[:upper:]' '[:lower:]')" >> $GITHUB_ENV
-
       - name: Build and push Docker image
         uses: docker/build-push-action@v5
         with:
           context: .
           push: true
           tags: |
-            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
+            ${{ env.REGISTRY_IMAGE }}:latest
-            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }}
+            ${{ env.REGISTRY_IMAGE }}:${{ github.sha }}