···312312 TAGS=$(cat .build-meta/image-tags.txt)
313313 SHA=$(cat .build-meta/image-sha.txt)
314314315315- # Registry configuration — expects secrets to be set via Tangled repo settings:
316316- # REGISTRY_URL - e.g. ghcr.io or a custom registry
317317- # REGISTRY_IMAGE - e.g. ohcnetwork/care
318318- # REGISTRY_USERNAME - auth username
319319- # REGISTRY_TOKEN - auth token/password
320320- REGISTRY_URL="${REGISTRY_URL:-}"
321321- REGISTRY_IMAGE="${REGISTRY_IMAGE:-}"
322322- REGISTRY_USERNAME="${REGISTRY_USERNAME:-}"
315315+ # Registry configuration — Docker Hub by default.
316316+ # Override via Tangled repo secrets to push elsewhere.
317317+ # REGISTRY_URL - defaults to docker.io (Docker Hub)
318318+ # REGISTRY_IMAGE - defaults to ohcnetwork/care
319319+ # REGISTRY_USERNAME - Docker Hub username (secret)
320320+ # REGISTRY_TOKEN - Docker Hub access token (secret)
321321+ REGISTRY_URL="${REGISTRY_URL:-docker.io}"
322322+ REGISTRY_IMAGE="${REGISTRY_IMAGE:-tellmey/care}"
323323+ REGISTRY_USERNAME="${REGISTRY_USERNAME:-tellmey}"
323324 REGISTRY_TOKEN="${REGISTRY_TOKEN:-}"
324325325325- if [ -z "$REGISTRY_URL" ] || [ -z "$REGISTRY_IMAGE" ] || [ -z "$REGISTRY_TOKEN" ]; then
326326- echo "Registry credentials not configured. Skipping push."
326326+ if [ -z "$REGISTRY_TOKEN" ]; then
327327+ echo "Registry token not configured. Skipping push."
327328 echo ""
328329 echo "To enable pushing, set these secrets in your Tangled repo settings:"
329329- echo " REGISTRY_URL (e.g. ghcr.io)"
330330- echo " REGISTRY_IMAGE (e.g. ohcnetwork/care)"
331331- echo " REGISTRY_USERNAME (e.g. your-username)"
332332- echo " REGISTRY_TOKEN (e.g. your-token)"
330330+ echo " REGISTRY_USERNAME (Docker Hub username)"
331331+ echo " REGISTRY_TOKEN (Docker Hub access token)"
332332+ echo ""
333333+ echo "Optional overrides (have sensible defaults):"
334334+ echo " REGISTRY_URL (default: docker.io)"
335335+ echo " REGISTRY_IMAGE (default: ohcnetwork/care)"
333336 echo ""
334337 echo "The following tags would have been pushed:"
335338 for TAG in $TAGS; do
336336- echo " - ${REGISTRY_URL:-<registry>}/${REGISTRY_IMAGE:-<image>}:${TAG}"
339339+ echo " - ${REGISTRY_URL}/${REGISTRY_IMAGE}:${TAG}"
337340 done
338341 exit 0
339342 fi
+16-8
care/CLAUDE.md
···360360361361## Secrets Required (to be set in Tangled repo settings)
362362363363-| Secret | Used for |
364364-|---|---|
365365-| `REGISTRY_URL` | Registry hostname (e.g. `ghcr.io`) |
366366-| `REGISTRY_IMAGE` | Image path (e.g. `ohcnetwork/care`) |
367367-| `REGISTRY_USERNAME` | `skopeo login` username |
368368-| `REGISTRY_TOKEN` | `skopeo login` password/token |
369369-| `ADDITIONAL_PLUGS` | (Optional) JSON array of extra plugin specs |
363363+The workflow pushes to **Docker Hub** (`docker.io/ohcnetwork/care`) by default.
364364+Only the credentials need to be configured as secrets — the registry URL and
365365+image name have sensible defaults built into the workflow.
366366+367367+| Secret | Required | Default | Used for |
368368+|---|---|---|---|
369369+| `REGISTRY_USERNAME` | **Yes** | _(none)_ | Docker Hub username for `skopeo login` |
370370+| `REGISTRY_TOKEN` | **Yes** | _(none)_ | Docker Hub access token for `skopeo login` |
371371+| `REGISTRY_URL` | No | `docker.io` | Registry hostname (override for GHCR, ECR, etc.) |
372372+| `REGISTRY_IMAGE` | No | `ohcnetwork/care` | Image path within the registry |
373373+| `ADDITIONAL_PLUGS` | No | _(none)_ | JSON array of extra plugin specs |
370374371375Sentry is explicitly out of scope for this workflow.
372376373373-**The push step gracefully skips if registry secrets are not configured.** This means the workflow can be tested/iterated on without any secrets set — it will build the image and report what tags would have been pushed.
377377+**The push step gracefully skips if `REGISTRY_TOKEN` is not configured.** This means the workflow can be tested/iterated on without any secrets set — it will build the image and report what tags would have been pushed.
378378+379379+To enable pushing, create a Docker Hub access token at
380380+https://hub.docker.com/settings/security and set `REGISTRY_USERNAME` and
381381+`REGISTRY_TOKEN` in the Tangled repo secrets.
374382375383---
376384