fix docker build

.gitea/workflows/build-and-deploy.yml

@@ -11,10 +11,8 @@ concurrency:
 
 env:
   NODE_VERSION: "20"
-  # Gitea built-in container registry (HTTPS on port 443)
   REGISTRY_HOST: 192.168.3.80
   DOCKERFILE_PATH: Dockerfile.production
-  # VPS deployment target
   DEPLOY_ROOT: /opt/rentaldrivego
 
 jobs:
@@ -26,8 +24,6 @@ jobs:
       docker_image: ${{ steps.image-meta.outputs.full }}
     steps:
       - uses: actions/checkout@v4
-        env:
-          GIT_SSL_NO_VERIFY: "true"
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
@@ -35,7 +31,6 @@ jobs:
       - name: Docker image metadata
         id: image-meta
         run: |
-          # Gitea container registry path: host/owner/repo
           REPO="${{ gitea.repository }}"
           TAG="${{ gitea.sha }}"
           echo "repository=${REPO}" >> "$GITHUB_OUTPUT"
@@ -45,25 +40,48 @@ jobs:
       - name: Check Docker registry credentials
         id: registry-check
         run: |
-          if [ -n "${{ secrets.REGISTRY_TOKEN }}" ]; then
+          if [ -n "${{ secrets.REGISTRY_USERNAME }}" ] && [ -n "${{ secrets.REGISTRY_PASSWORD }}" ]; then
             echo "available=true" >> "$GITHUB_OUTPUT"
           else
+            echo "::warning::REGISTRY_USERNAME or REGISTRY_PASSWORD secrets not set — push will be skipped"
             echo "available=false" >> "$GITHUB_OUTPUT"
           fi
 
-      - name: Install Docker CLI
-        if: steps.registry-check.outputs.available == 'true'
+      - name: Validate public URLs
+        shell: bash
+        env:
+          NEXT_PUBLIC_API_URL: ${{ secrets.NEXT_PUBLIC_API_URL }}
+          NEXT_PUBLIC_MARKETPLACE_URL: ${{ secrets.NEXT_PUBLIC_MARKETPLACE_URL }}
+          NEXT_PUBLIC_DASHBOARD_URL: ${{ secrets.NEXT_PUBLIC_DASHBOARD_URL }}
+          NEXT_PUBLIC_ADMIN_URL: ${{ secrets.NEXT_PUBLIC_ADMIN_URL }}
         run: |
-          apt-get update -qq
-          apt-get install -y -qq docker.io
+          for variable in \
+            NEXT_PUBLIC_API_URL \
+            NEXT_PUBLIC_MARKETPLACE_URL \
+            NEXT_PUBLIC_DASHBOARD_URL \
+            NEXT_PUBLIC_ADMIN_URL
+          do
+            value="${!variable}"
+            if [ -z "$value" ]; then
+              echo "::error::$variable is missing — add it to Gitea Actions secrets"
+              exit 1
+            fi
+            case "$value" in
+              http://*|https://*) ;;
+              *)
+                echo "::error::$variable must be an absolute URL (got: $value)"
+                exit 1
+                ;;
+            esac
+          done
 
       - name: Log in to Gitea Container Registry
         if: steps.registry-check.outputs.available == 'true'
-        run: |
-          echo "${{ secrets.REGISTRY_TOKEN }}" | \
-            docker login "$REGISTRY_HOST" \
-            -u "${{ gitea.actor }}" \
-            --password-stdin
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY_HOST }}
+          username: ${{ secrets.REGISTRY_USERNAME }}
+          password: ${{ secrets.REGISTRY_PASSWORD }}
 
       - name: Build and push
         uses: docker/build-push-action@v6
@@ -92,8 +110,6 @@ jobs:
       IMAGE_REPOSITORY: ${{ needs.build-image.outputs.image_repository }}
     steps:
       - uses: actions/checkout@v4
-        env:
-          GIT_SSL_NO_VERIFY: "true"
 
       - name: Check deploy credentials
         id: check-creds
@@ -143,14 +159,14 @@ jobs:
       - name: Run deploy script on VPS
         if: steps.check-creds.outputs.skip == 'false'
         run: |
-          REGISTRY_PASSWORD_B64="$(printf '%s' "${{ secrets.REGISTRY_TOKEN }}" | base64 | tr -d '\n')"
+          REGISTRY_PASSWORD_B64="$(printf '%s' "${{ secrets.REGISTRY_PASSWORD }}" | base64 | tr -d '\n')"
           ssh "${{ secrets.VPS_USER }}@${{ secrets.VPS_IP }}" "
             set -e
             cd '$DEPLOY_ROOT'
             APP_IMAGE='$IMAGE_REPOSITORY' \
             APP_VERSION='${{ gitea.sha }}' \
             REGISTRY_HOST='$REGISTRY_HOST' \
-            REGISTRY_USER='${{ gitea.actor }}' \
+            REGISTRY_USER='${{ secrets.REGISTRY_USERNAME }}' \
             REGISTRY_PASSWORD=\$(printf '%s' '$REGISTRY_PASSWORD_B64' | base64 -d) \
             bash scripts/docker-prod-deploy.sh
           "