diff --git a/.woodpecker.yml b/.woodpecker.yml
index 1ce0c6a..e528d72 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -36,6 +36,9 @@ steps:
       REGISTRY_PASSWORD:
         from_secret: REGISTRY_PASSWORD
     commands:
+      - test -n "${REGISTRY_HOSTPORT}"
+      - test -n "${REGISTRY_USERNAME}"
+      - test -n "${REGISTRY_PASSWORD}"
       - echo "${REGISTRY_PASSWORD}" | docker login "${REGISTRY_HOSTPORT}" -u "${REGISTRY_USERNAME}" --password-stdin
       - docker build -t "${REGISTRY_HOSTPORT}/nxtgauge-rust-${SERVICE}" --build-arg SERVICE_NAME=${SERVICE} -f Dockerfile.simple .
       - docker push "${REGISTRY_HOSTPORT}/nxtgauge-rust-${SERVICE}"
@@ -56,6 +59,9 @@ steps:
       REGISTRY_PASSWORD:
         from_secret: REGISTRY_PASSWORD
     commands:
+      - test -n "${REGISTRY_HOSTPORT}"
+      - test -n "${REGISTRY_USERNAME}"
+      - test -n "${REGISTRY_PASSWORD}"
       - echo "${REGISTRY_PASSWORD}" | docker login "${REGISTRY_HOSTPORT}" -u "${REGISTRY_USERNAME}" --password-stdin
       - docker build -t "${REGISTRY_HOSTPORT}/nxtgauge-db-migrate" -f Dockerfile.migrate .
       - docker push "${REGISTRY_HOSTPORT}/nxtgauge-db-migrate"
diff --git a/.woodpecker/README.md b/.woodpecker/README.md
index 5376c38..eabfc95 100644
--- a/.woodpecker/README.md
+++ b/.woodpecker/README.md
@@ -7,11 +7,6 @@ The following Woodpecker secrets are required for CI/CD pipelines:
 | `REGISTRY_HOSTPORT`  | Registry host:port (e.g., `registry.nxtgauge.com`)             |
 | `REGISTRY_USERNAME`  | Registry username for authentication                           |
 | `REGISTRY_PASSWORD`  | Registry password/token for authentication                     |
-| `DOCKERHUB_USERNAME` | Docker Hub username (optional, for Docker Hub pushes)          |
-| `DOCKERHUB_TOKEN`    | Docker Hub access token (optional, for Docker Hub pushes)      |
-| `GHCR_USERNAME`      | GitHub Container Registry username (optional, for GHCR pushes) |
-| `GHCR_TOKEN`         | GitHub Container Registry token (optional, for GHCR pushes)    |
-| `GITOPS_REPO_URL`    | GitOps repository URL (optional)                               |
 
 ## Usage
 
diff --git a/Dockerfile.migrate b/Dockerfile.migrate
index c5ef565..390bc2a 100644
--- a/Dockerfile.migrate
+++ b/Dockerfile.migrate
@@ -1,4 +1,4 @@
-FROM rust:1.75-alpine AS builder
+FROM registry.nxtgauge.com/rust:alpine AS builder
 
 WORKDIR /app
 
diff --git a/README.md b/README.md
index cf98aa7..cc4382e 100644
--- a/README.md
+++ b/README.md
@@ -16,3 +16,12 @@ Rust migration target for `nxtgauge-nov-2025-backend`, preserving the same micro
 - Replace service implementations one by one.
 
 See `docs/MIGRATION_MASTER_PLAN.md` for full staged plan.
+
+## CI (Woodpecker)
+
+Required secrets:
+- `REGISTRY_HOSTPORT`
+- `REGISTRY_USERNAME`
+- `REGISTRY_PASSWORD`
+
+See `.woodpecker/README.md` for details.