From 8e2d3f915e30d70f960d881cd6f16f1aaa00be20 Mon Sep 17 00:00:00 2001
From: Jean-Luc Makiola <business@jeanlucmakiola.de>
Date: Sat, 10 Oct 2026 11:52:50 +0200
Subject: [PATCH] ci: drop the Docker image build and move release to the light
 runner

The dind runner is retired and the Gearbox Coolify deployment was
removed, so the Develop deploy job (image build + Coolify trigger) goes
away. The release job keeps the changelog and the Gitea release.
---
 .gitea/workflows/ci.yml      | 40 ------------------------------------
 .gitea/workflows/release.yml | 16 ++-------------
 CLAUDE.md                    |  2 +-
 3 files changed, 3 insertions(+), 55 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 4be6605..e162d1a 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -29,46 +29,6 @@ jobs:
       - name: Build
         run: bun run build
 
-  deploy:
-    needs: ci
-    if: gitea.ref == 'refs/heads/Develop' && gitea.event_name == 'push'
-    runs-on: dind
-    steps:
-      - name: Clone repository
-        run: |
-          apk add --no-cache git curl docker-cli docker-cli-buildx
-          git clone https://${{ secrets.GITEA_TOKEN }}@gitea.jeanlucmakiola.de/${{ gitea.repository }}.git repo
-          cd repo
-          git checkout Develop
-
-      - name: Build and push Docker image
-        working-directory: repo
-        run: |
-          REGISTRY="gitea.jeanlucmakiola.de"
-          IMAGE="${REGISTRY}/${{ gitea.repository_owner }}/gearbox"
-          echo "${{ secrets.REGISTRY_TOKEN }}" | docker login "$REGISTRY" -u "${{ gitea.repository_owner }}" --password-stdin
-          docker buildx build \
-            --cache-from type=registry,ref=${IMAGE}:buildcache \
-            --cache-to type=registry,ref=${IMAGE}:buildcache \
-            -t "${IMAGE}:develop" \
-            --push .
-
-      - name: Trigger Coolify deploy
-        env:
-          COOLIFY_TOKEN: ${{ secrets.COOLIFY_TOKEN }}
-          COOLIFY_WEBHOOK: ${{ vars.COOLIFY_WEBHOOK }}
-        run: |
-          TOKEN=$(printf '%s' "${COOLIFY_TOKEN}" | tr -d '[:space:]')
-          RESPONSE=$(curl -s -w '\n%{http_code}' -X GET "${COOLIFY_WEBHOOK}" \
-            -H "Authorization: Bearer ${TOKEN}")
-          STATUS=$(echo "$RESPONSE" | tail -1)
-          BODY=$(echo "$RESPONSE" | sed '$d')
-          echo "Coolify deploy: HTTP ${STATUS}"
-          if [ "$STATUS" -ge 400 ]; then
-            echo "::error::Coolify deploy failed with HTTP ${STATUS} - ${BODY}"
-            exit 1
-          fi
-
   e2e:
     if: false  # E2E tests need rewrite: auth moved from local login to OIDC (Logto). Tests still expect username/password flow.
     needs: ci
diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml
index ca3755d..6f98c8c 100644
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -28,11 +28,11 @@ jobs:
 
   release:
     needs: ci
-    runs-on: dind
+    runs-on: light
     steps:
       - name: Clone repository
         run: |
-          apk add --no-cache git curl jq docker-cli docker-cli-buildx
+          apt-get update && apt-get install -y --no-install-recommends jq
           git clone https://${{ secrets.GITEA_TOKEN }}@gitea.jeanlucmakiola.de/${{ gitea.repository }}.git repo
           cd repo
           git checkout ${{ gitea.ref_name }}
@@ -61,18 +61,6 @@ jobs:
           echo "$CHANGELOG" >> "$GITHUB_ENV"
           echo "CHANGELOG_EOF" >> "$GITHUB_ENV"
 
-      - name: Build and push Docker image
-        working-directory: repo
-        run: |
-          REGISTRY="gitea.jeanlucmakiola.de"
-          IMAGE="${REGISTRY}/${{ gitea.repository_owner }}/gearbox"
-          echo "${{ secrets.REGISTRY_TOKEN }}" | docker login "$REGISTRY" -u "${{ gitea.repository_owner }}" --password-stdin
-          docker buildx build \
-            --cache-from type=registry,ref=${IMAGE}:buildcache \
-            --cache-to type=registry,ref=${IMAGE}:buildcache \
-            -t "${IMAGE}:${VERSION}" -t "${IMAGE}:latest" \
-            --push .
-
       - name: Create Gitea release
         run: |
           API_URL="${GITHUB_SERVER_URL}/api/v1/repos/${{ gitea.repository }}/releases"
diff --git a/CLAUDE.md b/CLAUDE.md
index b014af2..af0a379 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -64,7 +64,7 @@ bun run build               # Vite build → dist/client/
 
 ## Releasing
 
-Releases are tag-driven. The Gitea Actions workflow (`.gitea/workflows/release.yml`) triggers on any pushed tag matching `v*` — it runs CI (lint, test, build), generates a changelog from the previous tag, builds and pushes a Docker image, and creates a Gitea release. The version comes from the tag name.
+Releases are tag-driven. The Gitea Actions workflow (`.gitea/workflows/release.yml`) triggers on any pushed tag matching `v*` — it runs CI (lint, test, build), generates a changelog from the previous tag, and creates a Gitea release. (The Docker image build was removed when the dind runner was retired.) The version comes from the tag name.
 
 To release, tag the desired commit on `Develop` and push:
 ```bash