From bcbdd950ceb4544bb3d10802acc3a820470c00a3 Mon Sep 17 00:00:00 2001
From: NexVeridian <nexveridian@gmail.com>
Date: Fri, 22 Aug 2025 00:57:07 -0700
Subject: [PATCH] fix: docker

---
 .forgejo/workflows/docker.yml | 62 ++++++-----------------------------
 1 file changed, 10 insertions(+), 52 deletions(-)

diff --git a/.forgejo/workflows/docker.yml b/.forgejo/workflows/docker.yml
index 278a963..251f073 100644
--- a/.forgejo/workflows/docker.yml
+++ b/.forgejo/workflows/docker.yml
@@ -1,89 +1,47 @@
 name: docker
 
 on:
-  # workflow_run:
-  # workflows: [crane]
   push:
     branches: [main]
-    # types:
-    # - completed
-  # schedule:
-  # - cron: 0 0 * * 1
-  #   # Publish semver tags as releases.
-  #   tags: [ 'v*.*.*' ]
-  # pull_request:
-  #   branches: [ "main" ]
 
 env:
-  # Use docker.io for Docker Hub if empty
   REGISTRY: git.nexveridian.com
-  # github.repository as <account>/<repo>
   IMAGE_NAME: ${{ github.repository }}
   NIX_CONFIG: "experimental-features = nix-command flakes"
 
 jobs:
   build:
     runs-on: docker
-    # https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#running-a-workflow-based-on-the-conclusion-of-another-workflow
-    # if: ${{ github.event.workflow_run.conclusion == 'success' }}
     permissions:
       contents: read
       packages: write
-      # This is used to complete the identity challenge
-      # with sigstore/fulcio when running outside of PRs.
       id-token: write
 
     steps:
-      - run: nix run -I nixpkgs=channel:nixos-unstable nixpkgs#attic-client login nex https://nix.nexveridian.com ${{ secrets.ATTIC_TOKEN }} || true
-      - run: nix run -I nixpkgs=channel:nixos-unstable nixpkgs#attic-client cache create nexveridian-web || true
-      - run: nix run -I nixpkgs=channel:nixos-unstable nixpkgs#attic-client use nexveridian-web || true
-
-      - name: Install Node.js
+      - name: Setup Attic cache
         run: |
-          mkdir -p ~/.local/bin
-          nix build -I nixpkgs=channel:nixos-unstable nixpkgs#nodejs_24 -o ~/.local/nodejs
-          ln -sf ~/.local/nodejs/bin/node ~/.local/bin/node
-          ln -sf ~/.local/nodejs/bin/npm ~/.local/bin/npm
-          echo "$HOME/.local/bin" >> $GITHUB_PATH
+          nix run -I nixpkgs=channel:nixos-unstable nixpkgs#attic-client login nex https://nix.nexveridian.com ${{ secrets.ATTIC_TOKEN }} || true
+          nix run -I nixpkgs=channel:nixos-unstable nixpkgs#attic-client use nexveridian-web || true
 
       - uses: actions/checkout@v4
 
-      - name: Install Docker
-        run: |
-          mkdir -p ~/.local/bin
-          nix build -I nixpkgs=channel:nixos-unstable nixpkgs#docker -o ~/.local/docker
-          ln -sf ~/.local/docker/bin/docker ~/.local/bin/docker
-          echo "$HOME/.local/bin" >> $GITHUB_PATH
-
       - name: Log into registry ${{ env.REGISTRY }}
-        if: github.event_name != 'pull_request'
         uses: docker/login-action@v3
         with:
           registry: ${{ env.REGISTRY }}
-          username: ${{ env.GITHUB_ACTOR }}
-          password: ${{ env.GITHUB_TOKEN }}
-
-      - name: Extract Docker metadata
-        id: meta
-        uses: docker/metadata-action@v5
-        with:
-          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build Nix package
         run: nix build .#my-docker
 
-      # https://github.com/orgs/community/discussions/25768#discussioncomment-3249183
-      - name: Downcase REPO
+      - name: Prepare repository variables
         run: |
           echo "REPO=${GITHUB_REPOSITORY,,}" >> ${GITHUB_ENV}
-
-      - name: Strip REPO Username
-        run: |
-          STRIP_REPO_USERNAME=${REPO#nexveridian/}
+          STRIP_REPO_USERNAME=${GITHUB_REPOSITORY,,#nexveridian/}
           echo "STRIP_REPO_USERNAME=${STRIP_REPO_USERNAME}" >> ${GITHUB_ENV}
 
-      # https://github.com/docker/build-push-action/issues/538
-      - name: Push and tag Docker image
+      - name: Load, tag and push Docker image
         run: |
           docker load < result
           docker tag ${{ env.STRIP_REPO_USERNAME }}:latest ${{ env.REGISTRY }}/${{ env.REPO }}:latest
@@ -100,7 +58,7 @@ jobs:
           done
 
           if [ -n "$valid_paths" ]; then
-            for i in {1..10}; do
-              nix run -I nixpkgs=channel:nixos-unstable nixpkgs#attic-client push nexveridian-web $valid_paths && break || [ $i -eq 5 ] || sleep 5
+            for i in {1..3}; do
+              nix run -I nixpkgs=channel:nixos-unstable nixpkgs#attic-client push nexveridian-web $valid_paths && break || [ $i -eq 3 ] || sleep 5
             done
           fi