From 49466839a3a4726a2243f1bf16084ad95551736a Mon Sep 17 00:00:00 2001
From: WorkClub Automation <automation@workclub.local>
Date: Sun, 8 Mar 2026 15:02:25 +0100
Subject: [PATCH] fix(cd): add insecure registry config for HTTP push

- Add Docker daemon configuration step to both backend and frontend jobs
- Configure insecure-registries to allow HTTP connections to registry
- Restart Docker daemon and verify configuration
- Resolves HTTP error when pushing to HTTP-only registry at 192.168.241.13:8080
---
 .gitea/workflows/cd-bootstrap.yml | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)

diff --git a/.gitea/workflows/cd-bootstrap.yml b/.gitea/workflows/cd-bootstrap.yml
index 888d090..26f657d 100644
--- a/.gitea/workflows/cd-bootstrap.yml
+++ b/.gitea/workflows/cd-bootstrap.yml
@@ -82,6 +82,20 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
       
+      - name: Configure insecure registry
+        run: |
+          sudo mkdir -p /etc/docker
+          
+          if [ -f /etc/docker/daemon.json ] && [ -s /etc/docker/daemon.json ]; then
+            echo "$(jq '. + {"insecure-registries": ["${{ env.REGISTRY_HOST }}"]}' /etc/docker/daemon.json)" | sudo tee /etc/docker/daemon.json
+          else
+            echo '{"insecure-registries": ["${{ env.REGISTRY_HOST }}"]}' | sudo tee /etc/docker/daemon.json
+          fi
+          
+          sudo systemctl restart docker
+          sleep 5
+          docker info | grep "Insecure Registries" -A 2
+      
       - name: Login to registry (if credentials provided)
         if: ${{ secrets.REGISTRY_USERNAME != '' && secrets.REGISTRY_PASSWORD != '' }}
         run: |
@@ -141,6 +155,20 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
       
+      - name: Configure insecure registry
+        run: |
+          sudo mkdir -p /etc/docker
+          
+          if [ -f /etc/docker/daemon.json ] && [ -s /etc/docker/daemon.json ]; then
+            echo "$(jq '. + {"insecure-registries": ["${{ env.REGISTRY_HOST }}"]}' /etc/docker/daemon.json)" | sudo tee /etc/docker/daemon.json
+          else
+            echo '{"insecure-registries": ["${{ env.REGISTRY_HOST }}"]}' | sudo tee /etc/docker/daemon.json
+          fi
+          
+          sudo systemctl restart docker
+          sleep 5
+          docker info | grep "Insecure Registries" -A 2
+      
       - name: Login to registry (if credentials provided)
         if: ${{ secrets.REGISTRY_USERNAME != '' && secrets.REGISTRY_PASSWORD != '' }}
         run: |