From 1f80b737437e0eb68764f4322e214f6facb8847d Mon Sep 17 00:00:00 2001
From: Aleksandr Meshchriakov <avm@sh-inc.ru>
Date: Mon, 2 Feb 2026 14:32:59 +0100
Subject: [PATCH] fix(ci): use internal IP 10.10.0.10:3000 for registry
 everywhere

---
 .gitea/workflows/ci-cd.yml | 10 +++++-----
 docker-compose.prod.yml    |  6 +++---
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.gitea/workflows/ci-cd.yml b/.gitea/workflows/ci-cd.yml
index cdb8c8c..bd1d2f1 100644
--- a/.gitea/workflows/ci-cd.yml
+++ b/.gitea/workflows/ci-cd.yml
@@ -129,14 +129,14 @@ jobs:
           
           BRANCH_TAG=$(echo ${GITHUB_REF_NAME} | sed 's/\//-/g')
           SHA_SHORT=$(echo ${GITHUB_SHA} | cut -c1-7)
-          REGISTRY_HOST="git.dev.nii-ecos.ru"
+          REGISTRY_HOST="10.10.0.10:3000"
           REGISTRY="${REGISTRY_HOST}/${{ github.repository_owner }}"
           
           # Debug
           echo "Registry: ${REGISTRY_HOST}"
           echo "Actor: ${GITHUB_ACTOR}"
           
-          # Login to Gitea container registry (requires REGISTRY_TOKEN secret with write:package scope)
+          # Login to Gitea container registry (HTTP, requires --insecure)
           echo "${REGISTRY_PASSWORD}" | ./crane auth login --insecure ${REGISTRY_HOST} -u "${REGISTRY_USER}" --password-stdin
           
           # Build and push web image
@@ -166,7 +166,7 @@ jobs:
 
       - name: Image summary
         run: |
-          echo "Images pushed to git.dev.nii-ecos.ru/${{ github.repository_owner }}/"
+          echo "Images pushed to 10.10.0.10:3000/${{ github.repository_owner }}/"
 
   deploy:
     name: Deploy to Server
@@ -189,8 +189,8 @@ jobs:
           ssh -i ~/.ssh/deploy_key -o StrictHostKeyChecking=no ${DEPLOY_USER}@${DEPLOY_HOST} "
             cd /opt/mostovik-backend
             
-            # Login to registry
-            echo '${REGISTRY_PASSWORD}' | docker login --username '${REGISTRY_USER}' --password-stdin git.dev.nii-ecos.ru
+            # Login to registry (HTTP on internal IP)
+            echo '${REGISTRY_PASSWORD}' | docker login --username '${REGISTRY_USER}' --password-stdin 10.10.0.10:3000
             
             # Pull new images
             export IMAGE_TAG=${BRANCH_TAG}
diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
index b3b94a6..26e6d61 100644
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -36,7 +36,7 @@ services:
       retries: 3
 
   web:
-    image: git.dev.nii-ecos.ru/avm/mostovik-web:${IMAGE_TAG:-dev}
+    image: 10.10.0.10:3000/avm/mostovik-web:${IMAGE_TAG:-dev}
     container_name: mostovik_web
     restart: unless-stopped
     depends_on:
@@ -69,7 +69,7 @@ services:
              gunicorn config.wsgi:application --bind 0.0.0.0:8000 --workers 3"
 
   celery_worker:
-    image: git.dev.nii-ecos.ru/avm/mostovik-celery:${IMAGE_TAG:-dev}
+    image: 10.10.0.10:3000/avm/mostovik-celery:${IMAGE_TAG:-dev}
     container_name: mostovik_celery_worker
     restart: unless-stopped
     depends_on:
@@ -94,7 +94,7 @@ services:
     command: celery -A config worker --loglevel=info
 
   celery_beat:
-    image: git.dev.nii-ecos.ru/avm/mostovik-celery:${IMAGE_TAG:-dev}
+    image: 10.10.0.10:3000/avm/mostovik-celery:${IMAGE_TAG:-dev}
     container_name: mostovik_celery_beat
     restart: unless-stopped
     depends_on: