ci: extract hardcoded registry URL from all Woodpecker pipelines #133

New Issue

kert · 2026-03-23T23:41:17Z

kert commented

2026-03-23 23:41:17 +00:00

Problem

gitea.homelab.fhirworx.io appears in deploy.yml (12 times), harden.yml (11 times), rebuild-all.yml (13 times) as:

YAML registry: settings
buildkit_config blocks
Trivy scan image references
Deploy pull/tag commands

Fix

Woodpecker supports from_secret for settings. Add a registry_host secret (or derive from DOMAIN) and use it everywhere:

variables:
  - &buildx_base
    registry:
      from_secret: registry_host

For buildkit_config and Trivy commands that need string interpolation, use a prep step that reads the secret into an env var.

Files

.woodpecker/deploy.yml
.woodpecker/harden.yml
.woodpecker/rebuild-all.yml

## Problem `gitea.homelab.fhirworx.io` appears in `deploy.yml` (12 times), `harden.yml` (11 times), `rebuild-all.yml` (13 times) as: - YAML `registry:` settings - `buildkit_config` blocks - Trivy scan image references - Deploy pull/tag commands ## Fix Woodpecker supports `from_secret` for settings. Add a `registry_host` secret (or derive from `DOMAIN`) and use it everywhere: ```yaml variables: - &buildx_base registry: from_secret: registry_host ``` For `buildkit_config` and Trivy commands that need string interpolation, use a prep step that reads the secret into an env var. ## Files - `.woodpecker/deploy.yml` - `.woodpecker/harden.yml` - `.woodpecker/rebuild-all.yml`

kert added this to the P18: Config Consolidation — eliminate hardcoded values milestone 2026-03-23 23:41:17 +00:00

kert added the ci label 2026-03-23 23:41:17 +00:00

kert referenced this issue from a commit

2026-03-23 23:51:17 +00:00

P18: config consolidation — fix #132 #133 #134 #137 #138 #139 #141

kert closed this issue

2026-03-23 23:51:29 +00:00

Sign in to join this conversation.