move habor to docker.io

.gitea/workflows/build-deploy.yml

@@ -1,14 +1,18 @@
-name: Harbor Build Once → Deploy Many (Compose)
+name: Docker Build Once → Deploy Many (Compose)
 
 on:
   workflow_call:
     inputs:
-      harbor_registry:
+      docker_registry:
+        description: Registry host (docker.io, ghcr.io, registry.example.com)
         type: string
-        default: harbor.hcmc.online
-      harbor_project:
+        default: docker.io
+
+      docker_namespace:
+        description: Docker namespace / org / username
         type: string
-        default: ci
+        required: true
+
       image_repo:
         type: string
         required: true
@@ -23,9 +27,8 @@ on:
         type: string
         default: linux/amd64,linux/arm64
 
-      # IMPORTANT CHANGE
       deploy_runners_json:
-        description: 'JSON array of runner labels'
+        description: JSON array of runner labels
         type: string
         required: true
 
@@ -37,10 +40,8 @@ on:
         default: up -d --pull always --remove-orphans
 
     secrets:
-      HARBOR_PUSH_USERNAME: { required: true }
-      HARBOR_PUSH_PASSWORD: { required: true }
-      HARBOR_PULL_USERNAME: { required: true }
-      HARBOR_PULL_PASSWORD: { required: true }
+      DOCKER_HUB_USERNAME: { required: true }
+      DOCKER_HUB_ACCESS_TOKEN: { required: true }
 
 jobs:
 
@@ -65,7 +66,7 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-          IMAGE="${{ inputs.harbor_registry }}/${{ inputs.harbor_project }}/${{ inputs.image_repo }}"
+          IMAGE="${{ inputs.docker_registry }}/${{ inputs.docker_namespace }}/${{ inputs.image_repo }}"
           SHORT_SHA=$(echo "${{ github.sha }}" | cut -c1-12)
           BRANCH="${{ github.ref_name }}"
 
@@ -73,14 +74,13 @@ jobs:
           echo "sha_tag=sha-$SHORT_SHA" >> $GITHUB_OUTPUT
           echo "branch_tag=$BRANCH" >> $GITHUB_OUTPUT
 
-      - name: Login Harbor (push)
+      - name: Login Registry (push)
         uses: docker/login-action@v3
         with:
-          registry: ${{ inputs.harbor_registry }}
-          username: ${{ secrets.HARBOR_PUSH_USERNAME }}
-          password: ${{ secrets.HARBOR_PUSH_PASSWORD }}
+          registry: ${{ inputs.docker_registry }}
+          username: ${{ secrets.DOCKER_HUB_USERNAME }}
+          password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
 
-      # Cached multi-platform build
       - name: Build & Push Image
         id: build
         uses: docker/build-push-action@v6
@@ -116,17 +116,16 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - name: Login Harbor (pull)
+      - name: Login Registry (pull)
         uses: docker/login-action@v3
         with:
-          registry: ${{ inputs.harbor_registry }}
-          username: ${{ secrets.HARBOR_PULL_USERNAME }}
-          password: ${{ secrets.HARBOR_PULL_PASSWORD }}
+          registry: ${{ inputs.docker_registry }}
+          username: ${{ secrets.DOCKER_HUB_USERNAME }}
+          password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
 
       - name: Show image
         run: echo "Deploying ${{ needs.build_and_push.outputs.image_ref }}"
 
-      # Linux/macOS
       - name: Compose Up (Unix)
         if: runner.os != 'Windows'
         shell: bash
@@ -137,7 +136,6 @@ jobs:
           set -euo pipefail
           docker compose ${{ inputs.compose_args }}
 
-      # Windows runners support
       - name: Compose Up (Windows)
         if: runner.os == 'Windows'
         shell: pwsh