From 12af1b2981df4224427e28fc042c085d9244ecde Mon Sep 17 00:00:00 2001
From: Mathias Dollenbacher <hello@mdollenbacher.net>
Date: Wed, 29 Apr 2026 00:43:12 +0200
Subject: [PATCH] ci: use job token instead of pat

---
 .gitea/workflows/build-and-deploy.yml | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/.gitea/workflows/build-and-deploy.yml b/.gitea/workflows/build-and-deploy.yml
index fada314..e338454 100644
--- a/.gitea/workflows/build-and-deploy.yml
+++ b/.gitea/workflows/build-and-deploy.yml
@@ -1,5 +1,9 @@
 on: [ push ]
 
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   build:
     runs-on: debian-latest
@@ -20,8 +24,8 @@ jobs:
         uses: docker/login-action@v4
         with:
           registry: viziona.dev
-          username: ${{ vars.DOCKER_PUSH_USER }}
-          password: ${{ secrets.DOCKER_PUSH_TOKEN }}
+          username: ${{ gitea.actor }}
+          password: ${{ secrets.GITEA_TOKEN }}
       - name: Build docker image
         run: docker build -t viziona.dev/taiqane/discord-webhook-proxy:nightly .
       - name: Push to docker registry
@@ -38,8 +42,8 @@ jobs:
         uses: docker/login-action@v4
         with:
           registry: viziona.dev
-          username: ${{ vars.DOCKER_PUSH_USER }}
-          password: ${{ secrets.DOCKER_PUSH_TOKEN }}
+          username: ${{ gitea.actor }}
+          password: ${{ secrets.GITEA_TOKEN }}
       - name: Build docker image
         run: docker build -t viziona.dev/taiqane/discord-webhook-proxy:${{ gitea.ref_name }} .
       - name: Push to docker registry