From ab440d471bc3f46d994694845e27f8a67c308046 Mon Sep 17 00:00:00 2001
From: copilotcoder <copilotcoder@darkhelm.org>
Date: Mon, 18 May 2026 18:54:50 -0400
Subject: [PATCH] fix: pin registry hostname to LAN IP in CI

---
 .gitea/workflows/cicd.yml | 112 +++++++++++++++++++++++++++++++++++++-
 1 file changed, 111 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/cicd.yml b/.gitea/workflows/cicd.yml
index 19b08c6..22f698c 100644
--- a/.gitea/workflows/cicd.yml
+++ b/.gitea/workflows/cicd.yml
@@ -10,7 +10,9 @@ env:
   GITEA_SSH_HOST: 10.18.75.2
   GITEA_SSH_PORT: "2222"
   GITEA_REPO_SSH_URL: ssh://git@10.18.75.2:2222/DarkHelm.org/plex-playlist.git
-  GITEA_REGISTRY: 10.18.75.2:3001
+  GITEA_REGISTRY: kankali.darkhelm.lan:3001
+  GITEA_REGISTRY_IP: 10.18.75.2
+  GITEA_REGISTRY_HOST: kankali.darkhelm.lan
 
 jobs:
   setup-base:
@@ -73,6 +75,10 @@ jobs:
         run: |
           echo "=== Building CICD Base Image ==="
 
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
+
           # Defensive fallback if output propagation failed for any reason.
           BASE_HASH="${BASE_HASH:-$(sha256sum Dockerfile.cicd-base | cut -d' ' -f1 | head -c16)}"
           if [ -z "${BASE_HASH}" ]; then
@@ -219,6 +225,10 @@ jobs:
           trap 'rm -f /tmp/ssh_key' EXIT
           echo "=== Building Complete CICD Image with Secure Secrets ==="
 
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
+
           # Login to registry
           echo "${PACKAGE_ACCESS_TOKEN}" | docker login "http://${GITEA_REGISTRY}" -u "${REGISTRY_USER}" --password-stdin
 
@@ -284,6 +294,11 @@ jobs:
     runs-on: ubuntu-act
     needs: setup
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login "http://${GITEA_REGISTRY}" -u ${{ github.actor }} --password-stdin
       - name: Check trailing whitespace with pre-commit
@@ -299,6 +314,11 @@ jobs:
     runs-on: ubuntu-act
     needs: setup
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login "http://${GITEA_REGISTRY}" -u ${{ github.actor }} --password-stdin
       - name: Check end of file with pre-commit
@@ -314,6 +334,11 @@ jobs:
     runs-on: ubuntu-act
     needs: setup
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login "http://${GITEA_REGISTRY}" -u ${{ github.actor }} --password-stdin
       - name: Check YAML files with pre-commit
@@ -329,6 +354,11 @@ jobs:
     runs-on: ubuntu-act
     needs: setup
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login "http://${GITEA_REGISTRY}" -u ${{ github.actor }} --password-stdin
       - name: Check TOML files with pre-commit
@@ -344,6 +374,11 @@ jobs:
     runs-on: ubuntu-act
     needs: setup
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login "http://${GITEA_REGISTRY}" -u ${{ github.actor }} --password-stdin
       - name: Check line endings with pre-commit
@@ -359,6 +394,11 @@ jobs:
     runs-on: ubuntu-act
     needs: setup
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: |
           echo "=== Network-Resilient Docker Registry Login ==="
@@ -408,6 +448,11 @@ jobs:
     runs-on: ubuntu-act
     needs: setup
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login "http://${GITEA_REGISTRY}" -u ${{ github.actor }} --password-stdin
       - name: Run ruff linting with pre-commit
@@ -423,6 +468,11 @@ jobs:
     runs-on: ubuntu-act
     needs: setup
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login "http://${GITEA_REGISTRY}" -u ${{ github.actor }} --password-stdin
       - name: Check ruff formatting with pre-commit
@@ -438,6 +488,11 @@ jobs:
     runs-on: ubuntu-act
     needs: setup
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login "http://${GITEA_REGISTRY}" -u ${{ github.actor }} --password-stdin
       - name: Run pyright type checking with pre-commit
@@ -453,6 +508,11 @@ jobs:
     runs-on: ubuntu-act
     needs: setup
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login "http://${GITEA_REGISTRY}" -u ${{ github.actor }} --password-stdin
       - name: Run darglint docstring linting with pre-commit
@@ -468,6 +528,11 @@ jobs:
     runs-on: ubuntu-act
     needs: setup
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login "http://${GITEA_REGISTRY}" -u ${{ github.actor }} --password-stdin
       - name: Run no docstring types check with pre-commit
@@ -484,6 +549,11 @@ jobs:
     runs-on: ubuntu-act
     needs: setup
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login "http://${GITEA_REGISTRY}" -u ${{ github.actor }} --password-stdin
       - name: Run ESLint with pre-commit
@@ -499,6 +569,11 @@ jobs:
     runs-on: ubuntu-act
     needs: setup
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login "http://${GITEA_REGISTRY}" -u ${{ github.actor }} --password-stdin
       - name: Check Prettier formatting with pre-commit
@@ -514,6 +589,11 @@ jobs:
     runs-on: ubuntu-act
     needs: setup
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login "http://${GITEA_REGISTRY}" -u ${{ github.actor }} --password-stdin
       - name: Run TypeScript type checking with pre-commit
@@ -529,6 +609,11 @@ jobs:
     runs-on: ubuntu-act
     needs: setup
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login "http://${GITEA_REGISTRY}" -u ${{ github.actor }} --password-stdin
       - name: Run TSDoc linting with pre-commit
@@ -545,6 +630,11 @@ jobs:
     runs-on: ubuntu-act
     needs: setup
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login "http://${GITEA_REGISTRY}" -u ${{ github.actor }} --password-stdin
       - name: Run backend tests with coverage
@@ -561,6 +651,11 @@ jobs:
     runs-on: ubuntu-act
     needs: setup
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login "http://${GITEA_REGISTRY}" -u ${{ github.actor }} --password-stdin
       - name: Run frontend tests with coverage
@@ -577,6 +672,11 @@ jobs:
     runs-on: ubuntu-act
     needs: setup
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login "http://${GITEA_REGISTRY}" -u ${{ github.actor }} --password-stdin
       - name: Run backend doctests
@@ -603,6 +703,11 @@ jobs:
     runs-on: ubuntu-act
     needs: [backend-tests, frontend-tests]
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: echo "${{ secrets.PACKAGE_ACCESS_TOKEN }}" | docker login "http://${GITEA_REGISTRY}" -u ${{ github.actor }} --password-stdin
       - name: Run integration tests
@@ -623,6 +728,11 @@ jobs:
     runs-on: ubuntu-act
     needs: [backend-tests, frontend-tests]
     steps:
+      - name: Configure registry host resolution
+        run: |
+          if ! grep -q "${GITEA_REGISTRY_HOST}" /etc/hosts; then
+            echo "${GITEA_REGISTRY_IP} ${GITEA_REGISTRY_HOST}" >> /etc/hosts
+          fi
       - name: Login to Gitea Container Registry
         run: |
           echo "=== Network-Resilient Docker Registry Login ==="