[P9] Use FQDN registry refs for all container images #103

New Issue

kert · 2026-03-22T15:46:25Z

kert commented

2026-03-22 15:46:25 +00:00

Problem

localhost:3000/homelab/... only works from the host. Containers on different networks, buildkit builders, and future remote agents cannot resolve it. The gitea:3000 alternative fails because the Docker daemon runs on the host.

Solution

Once DNS (#101) and CA trust (#102) are in place:

Change all repo: in .woodpecker/deploy.yml and rebuild-all.yml from localhost:3000/homelab/... to gitea.homelab.fhirworx.io/homelab/...
Change registry: from localhost:3000 to gitea.homelab.fhirworx.io
Update trivy image_ref: to match
Update compose.yml image names or add retag step in deploy
Remove daemon_off, buildkit_driveropt, and Docker socket volume mounts from buildx steps (no longer needed with proper HTTPS push)

Depends on

#101 (DNS)
#102 (CA trust)

Acceptance criteria

All buildx steps use gitea.homelab.fhirworx.io/homelab/...
No localhost:3000 references in pipeline files
No insecure: true in any pipeline
Deploy pipeline passes end-to-end
rebuild-all pipeline passes end-to-end

## Problem `localhost:3000/homelab/...` only works from the host. Containers on different networks, buildkit builders, and future remote agents cannot resolve it. The `gitea:3000` alternative fails because the Docker daemon runs on the host. ## Solution Once DNS (#101) and CA trust (#102) are in place: 1. Change all `repo:` in `.woodpecker/deploy.yml` and `rebuild-all.yml` from `localhost:3000/homelab/...` to `gitea.homelab.fhirworx.io/homelab/...` 2. Change `registry:` from `localhost:3000` to `gitea.homelab.fhirworx.io` 3. Update trivy `image_ref:` to match 4. Update compose.yml image names or add retag step in deploy 5. Remove `daemon_off`, `buildkit_driveropt`, and Docker socket volume mounts from buildx steps (no longer needed with proper HTTPS push) ## Depends on - #101 (DNS) - #102 (CA trust) ## Acceptance criteria - [ ] All buildx steps use `gitea.homelab.fhirworx.io/homelab/...` - [ ] No `localhost:3000` references in pipeline files - [ ] No `insecure: true` in any pipeline - [ ] Deploy pipeline passes end-to-end - [ ] `rebuild-all` pipeline passes end-to-end

kert added this to the P9: CI/CD Unification milestone 2026-03-22 15:46:25 +00:00

kert added the ci label 2026-03-22 15:46:25 +00:00

kert referenced this issue from a commit

2026-03-22 16:09:26 +00:00

add CoreDNS + Traefik UDP DNS for FQDN registry refs #101 #102 #103

kert closed this issue

2026-03-23 17:56:50 +00:00

Sign in to join this conversation.