ci: migrate from GitLab CI to Gitea Actions

- Add Gitea Actions workflow (.gitea/workflows/ci.yaml)
- Update K8s deployment image registry to oci.unbound.se

.gitea/workflows/ci.yaml

@@ -0,0 +1,48 @@
+name: geo-service
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    env:
+      BUILDTOOLS_CONTENT: ${{ secrets.BUILDTOOLS_CONTENT }}
+      GITEA_REPOSITORY: ${{ gitea.repository }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: buildtool/setup-buildtools-action@v1
+      - name: Compare tokens
+        run: |
+          TOKEN_FROM_CONTENT=$(echo "$BUILDTOOLS_CONTENT" | grep 'token:' | head -1 | awk '{print $2}')
+          REGISTRY_TOKEN="${{ secrets.REGISTRY_TOKEN }}"
+          echo "Token from BUILDTOOLS_CONTENT length: ${#TOKEN_FROM_CONTENT}"
+          echo "REGISTRY_TOKEN length: ${#REGISTRY_TOKEN}"
+          if [ "$TOKEN_FROM_CONTENT" = "$REGISTRY_TOKEN" ]; then
+            echo "Tokens match!"
+          else
+            echo "Tokens DO NOT match!"
+            echo "BUILDTOOLS token hash: $(echo -n "$TOKEN_FROM_CONTENT" | sha256sum | cut -c1-16)"
+            echo "REGISTRY_TOKEN hash: $(echo -n "$REGISTRY_TOKEN" | sha256sum | cut -c1-16)"
+          fi
+      - name: Build and push
+        run: |
+          unset GITHUB_REPOSITORY_OWNER GITEA_TOKEN
+          build && push
+
+  deploy-prod:
+    needs: build
+    if: gitea.ref == 'refs/heads/master'
+    runs-on: ubuntu-latest
+    env:
+      BUILDTOOLS_CONTENT: ${{ secrets.BUILDTOOLS_CONTENT }}
+      GITEA_REPOSITORY: ${{ gitea.repository }}
+    environment: prod
+    steps:
+      - uses: actions/checkout@v4
+      - uses: buildtool/setup-buildtools-action@v1
+      - name: Deploy
+        run: deploy prod

build-tools-dockerfile

@@ -0,0 +1,10 @@
+FROM amd64/golang:1.25.5@sha256:ad03ba93327b8a6143b49373790b5d92c28067bdb814418509466122ee9c9e63 as builder
+WORKDIR /src
+COPY * ./
+RUN go get
+RUN CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o geo-service .
+
+FROM scratch
+COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
+COPY --from=builder /src/geo-service /
+CMD ["/geo-service"]

k8s/deploy.yaml

@@ -41,7 +41,7 @@ spec:
             requests:
               memory: "100Mi"
           imagePullPolicy: Always
-          image: registry.gitlab.com/unboundsoftware/dancefinder/geo-service:${COMMIT}
+          image: oci.unbound.se/unboundsoftware/dancefinder/geo-service:${COMMIT}
           ports:
             - containerPort: 80
               name: http