From 5bb1c61647ce57d2b497303f9bf1dec0710cabb6 Mon Sep 17 00:00:00 2001
From: florian <flo@meergans.org>
Date: Sat, 11 Oct 2025 20:58:03 +0200
Subject: [PATCH] Github Actions: Build image and push to GHCR

---
 .gitea/workflows/build.yaml | 39 +++++++++++++++++++++++++++++++++++++
 1 file changed, 39 insertions(+)
 create mode 100644 .gitea/workflows/build.yaml

diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml
new file mode 100644
index 0000000..50fc89c
--- /dev/null
+++ b/.gitea/workflows/build.yaml
@@ -0,0 +1,39 @@
+on:
+  push:
+    branches:
+      - main
+
+env:
+  GHCR_ORG: gansejunge
+  IMAGE_NAME: app-notifications-service-docker-repository-query
+  IMAGE_PATH: ghcr.io/gansejunge/app-notifications-service-docker-repository-query
+  OPS_ORG: notifier
+  OPS_REPO: ops-deployment
+  OPS_BRANCH_BASE: main
+  OPS_PATH: service-docker-repository-query/deployment.yaml
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Log in to GHCR
+        run: echo "${{ secrets.GHCR_TOKEN }}" | docker login ghcr.io -u ${{ secrets.GHCR_USERNAME }} --password-stdin
+
+      - name: Get Latest Tag
+        id: get_tag
+        run: |
+          BASE64_TOKEN=$(echo "${{ secrets.GHCR_TOKEN }}" | base64)
+          LATEST_TAG=$(curl -s -H "Authorization: Bearer $BASE64_TOKEN" \
+            https://ghcr.io/v2/${{ env.GHCR_ORG }}/${{ env.IMAGE_NAME }}/tags/list \
+            | jq -r '.tags | map(select(test("^[0-9]+$"))) | map(tonumber) | max // 0')
+          NEXT_TAG=$((LATEST_TAG + 1))
+          echo "latest=$LATEST_TAG" >> $GITHUB_OUTPUT
+          echo "next=$NEXT_TAG" >> $GITHUB_OUTPUT
+
+      - name: Build and Push Docker Image
+        run: |
+          docker build -t ghcr.io/gansejunge/${{ env.IMAGE_NAME }}:${{ steps.get_tag.outputs.next }} .
+          docker push ghcr.io/gansejunge/${{ env.IMAGE_NAME }}:${{ steps.get_tag.outputs.next }}
\ No newline at end of file