ci: make git registry aliases optional

.gitea/workflows/ci-cd.yml

@@ -201,6 +201,7 @@ jobs:
           GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
           REGISTRY_USER: ${{ secrets.REGISTRY_USER }}
           REGISTRY_PASSWORD: ${{ secrets.REGISTRY_TOKEN }}
+          GITEA_REGISTRY_TOKEN: ${{ secrets.GITEA_REGISTRY_TOKEN }}
         run: |
           set -euo pipefail
 
@@ -223,7 +224,7 @@ jobs:
           DOKPLOY_BEAT_REF="${DOKPLOY_REGISTRY_PATH}/${DOKPLOY_DEV_BEAT_SERVICE_IMAGE}"
           REGISTRY_USER="${REGISTRY_USER:-${GITHUB_ACTOR}}"
           REGISTRY_PASSWORD="${REGISTRY_PASSWORD:-${GITEA_TOKEN:-}}"
-          GITEA_REGISTRY_PASSWORD="${GITEA_TOKEN:-${REGISTRY_PASSWORD}}"
+          GITEA_ALIAS_PUSH_ENABLED="false"
 
           unset http_proxy https_proxy HTTP_PROXY HTTPS_PROXY all_proxy ALL_PROXY
           export NO_PROXY="${NO_PROXY:-},${REGISTRY_HOST},${GITEA_REGISTRY_HOST}"
@@ -238,25 +239,36 @@ jobs:
             | docker login "${REGISTRY_HOST}" \
               -u "${REGISTRY_USER}" \
               --password-stdin
-          echo "${GITEA_REGISTRY_PASSWORD}" \
+          if [ -n "${GITEA_REGISTRY_TOKEN:-}" ]; then
+            echo "${GITEA_REGISTRY_TOKEN}" \
               | docker login "${GITEA_REGISTRY_HOST}" \
                 -u "${GITHUB_ACTOR}" \
                 --password-stdin
+            GITEA_ALIAS_PUSH_ENABLED="true"
+          else
+            echo "GITEA_REGISTRY_TOKEN is not set; skip Dokploy-compatible git.dev image aliases"
+          fi
 
           WEB_TAGS=(
             -t "${WEB_REF}:${BRANCH_TAG}"
             -t "${WEB_REF}:${BRANCH_TAG}-${SHA_SHORT}"
-            -t "${DOKPLOY_WEB_REF}:latest"
-            -t "${DOKPLOY_WEB_REF}:${BRANCH_TAG}-${SHA_SHORT}"
           )
           CELERY_TAGS=(
             -t "${CELERY_REF}:${BRANCH_TAG}"
             -t "${CELERY_REF}:${BRANCH_TAG}-${SHA_SHORT}"
+          )
+          if [ "${GITEA_ALIAS_PUSH_ENABLED}" = "true" ]; then
+            WEB_TAGS+=(
+              -t "${DOKPLOY_WEB_REF}:latest"
+              -t "${DOKPLOY_WEB_REF}:${BRANCH_TAG}-${SHA_SHORT}"
+            )
+            CELERY_TAGS+=(
               -t "${DOKPLOY_WORKER_REF}:latest"
               -t "${DOKPLOY_WORKER_REF}:${BRANCH_TAG}-${SHA_SHORT}"
               -t "${DOKPLOY_BEAT_REF}:latest"
               -t "${DOKPLOY_BEAT_REF}:${BRANCH_TAG}-${SHA_SHORT}"
             )
+          fi
           if [ "${GITHUB_REF_NAME}" = "main" ]; then
             WEB_TAGS+=(-t "${WEB_REF}:latest")
             CELERY_TAGS+=(-t "${CELERY_REF}:latest")
@@ -327,6 +339,7 @@ jobs:
             echo "- ${WEB_REF}:${BRANCH_TAG}-${SHA_SHORT}"
             echo "- ${CELERY_REF}:${BRANCH_TAG}"
             echo "- ${CELERY_REF}:${BRANCH_TAG}-${SHA_SHORT}"
+            if [ "${GITEA_ALIAS_PUSH_ENABLED}" = "true" ]; then
               echo "Dokploy-compatible aliases:"
               echo "- ${DOKPLOY_WEB_REF}:latest"
               echo "- ${DOKPLOY_WEB_REF}:${BRANCH_TAG}-${SHA_SHORT}"
@@ -334,6 +347,9 @@ jobs:
               echo "- ${DOKPLOY_WORKER_REF}:${BRANCH_TAG}-${SHA_SHORT}"
               echo "- ${DOKPLOY_BEAT_REF}:latest"
               echo "- ${DOKPLOY_BEAT_REF}:${BRANCH_TAG}-${SHA_SHORT}"
+            else
+              echo "Dokploy-compatible aliases skipped: GITEA_REGISTRY_TOKEN is not set."
+            fi
           } >> "${GITHUB_STEP_SUMMARY:-/dev/stdout}"
 
   notify: