From dd51b8ca80568f0ea25dc2b6e79ceb72bf7e63d5 Mon Sep 17 00:00:00 2001
From: Tracewebstudio Dev <dev@tracewebstudio.com>
Date: Fri, 17 Apr 2026 01:01:45 +0200
Subject: [PATCH] ci: fix secrets injection using secrets: block

---
 .woodpecker.yml | 34 ++++++++++++++++++++++------------
 1 file changed, 22 insertions(+), 12 deletions(-)

diff --git a/.woodpecker.yml b/.woodpecker.yml
index 72bac81..135404c 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -28,16 +28,21 @@ matrix:
     - ugc-content-creators
     - cron
 
+secrets:
+  - secret: REGISTRY_HOSTPORT
+    name: REGISTRY_HOSTPORT
+  - secret: REGISTRY_USERNAME
+    name: REGISTRY_USERNAME
+  - secret: REGISTRY_PASSWORD
+    name: REGISTRY_PASSWORD
+
 steps:
   - name: build-and-push
     image: registry.nxtgauge.com/docker:28-cli
     environment:
-      REGISTRY_HOSTPORT:
-        from_secret: REGISTRY_HOSTPORT
-      REGISTRY_USERNAME:
-        from_secret: REGISTRY_USERNAME
-      REGISTRY_PASSWORD:
-        from_secret: REGISTRY_PASSWORD
+      REGISTRY_HOSTPORT: ${REGISTRY_HOSTPORT}
+      REGISTRY_USERNAME: ${REGISTRY_USERNAME}
+      REGISTRY_PASSWORD: ${REGISTRY_PASSWORD}
     commands:
       - echo "${REGISTRY_PASSWORD}" | docker login "${REGISTRY_HOSTPORT}" -u "${REGISTRY_USERNAME}" --password-stdin
       - docker build -t "${REGISTRY_HOSTPORT}/nxtgauge-rust-${SERVICE}" --build-arg SERVICE_NAME=${SERVICE} -f Dockerfile.simple .
@@ -48,16 +53,21 @@ when:
   branch: [main, high-performance]
   event: push
 
+secrets:
+  - secret: REGISTRY_HOSTPORT
+    name: REGISTRY_HOSTPORT
+  - secret: REGISTRY_USERNAME
+    name: REGISTRY_USERNAME
+  - secret: REGISTRY_PASSWORD
+    name: REGISTRY_PASSWORD
+
 steps:
   - name: build-and-push-migrate
     image: registry.nxtgauge.com/docker:28-cli
     environment:
-      REGISTRY_HOSTPORT:
-        from_secret: REGISTRY_HOSTPORT
-      REGISTRY_USERNAME:
-        from_secret: REGISTRY_USERNAME
-      REGISTRY_PASSWORD:
-        from_secret: REGISTRY_PASSWORD
+      REGISTRY_HOSTPORT: ${REGISTRY_HOSTPORT}
+      REGISTRY_USERNAME: ${REGISTRY_USERNAME}
+      REGISTRY_PASSWORD: ${REGISTRY_PASSWORD}
     commands:
       - echo "${REGISTRY_PASSWORD}" | docker login "${REGISTRY_HOSTPORT}" -u "${REGISTRY_USERNAME}" --password-stdin
       - docker build -t "${REGISTRY_HOSTPORT}/nxtgauge-db-migrate" -f Dockerfile.migrate .