feat: change the workflow to use owner secrets.

.gitea/workflows/release.yml

@@ -21,5 +21,7 @@ jobs:
       - name: Publish package
         working-directory: debian-package
         env:
-          GITEA_PACKAGES_TOKEN: ${{ secrets.CI_TOKEN }}
+          SERVER_URL: ${{ secrets.CI_URL }}
+          OWNER: ${{ secrets.CI_OWNER }}
+          PACKAGES_TOKEN: ${{ secrets.CI_TOKEN }}
         run: ./publish.sh

debian-package/publish.sh

@@ -8,9 +8,9 @@ case "$(uname -s)" in
     *)      printf 'ERROR: unsupported platform %s\n' "$(uname -s)" >&2; exit 1 ;;
 esac
 
-OWNER=slawek
-GITEA_URL=https://gitea.koszewscy.waw.pl
-GITEA_PACKAGES_TOKEN="${GITEA_PACKAGES_TOKEN:-$(cat ~/.gitea-packages-token)}"
+OWNER="${OWNER:-slawek}"
+SERVER_URL="${SERVER_URL:-https://gitea.koszewscy.waw.pl}"
+PACKAGES_TOKEN="${PACKAGES_TOKEN:-$(cat ~/.gitea-packages-token)}"
 
 # Reads the changelog copied into the builder image, so no bind mount is needed.
 changelog_field() {
@@ -27,14 +27,14 @@ if [ ! -f "$DEB" ]; then
     exit 1
 fi
 
-STATUS="$(curl -s -o /dev/null -w '%{http_code}' --user "$OWNER:$GITEA_PACKAGES_TOKEN" \
-    "$GITEA_URL/api/v1/packages/$OWNER/debian/$PACKAGE/$VERSION")"
+STATUS="$(curl -s -o /dev/null -w '%{http_code}' --user "$OWNER:$PACKAGES_TOKEN" \
+    "$SERVER_URL/api/v1/packages/$OWNER/debian/$PACKAGE/$VERSION")"
 case "$STATUS" in
     200) printf '%s %s is already published, skipping.\n' "$PACKAGE" "$VERSION"; exit 0 ;;
     404) ;;
     *)   printf 'ERROR: version check returned HTTP %s.\n' "$STATUS" >&2; exit 1 ;;
 esac
 
-curl --fail-with-body --user "$OWNER:$GITEA_PACKAGES_TOKEN" \
+curl --fail-with-body --user "$OWNER:$PACKAGES_TOKEN" \
     --upload-file "$DEB" \
-    "$GITEA_URL/api/packages/$OWNER/debian/pool/noble/main/upload"
+    "$SERVER_URL/api/packages/$OWNER/debian/pool/noble/main/upload"