ci(github-actions): do Docker builds for deployments

And do Tailscale auth flow over OIDC workload federation to lessen the
OAuth client secrets to manage btw.

Signed-off-by: Andrei Jiroh Halili <[email protected]>

Author: ajhalili2006

.github/workflows/deploy.yml

@@ -23,7 +23,7 @@ jobs:
     name: Build and push Docker images
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Log in to GitHub Container Registry
         uses: docker/login-action@v2
@@ -44,11 +44,16 @@ jobs:
         uses: docker/metadata-action@v5
         with:
           images: |
-            ghcr.io/recaptime-dev/infra/proxyparty-caddy
-            registry.gitlab.com/recaptime-dev/infra/proxyparty-caddy
+            ghcr.io/recaptime-dev/proxyparty-caddy/caddy-builds
+            registry.gitlab.com/recaptime-dev/proxyparty-caddy/caddy-builds
           tags: |
             type=ref,event=branch,prefix=branch-
             type=sha,format=long,prefix=commit-
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+      - name: Set up Docker Buildx
+        id: buildx
+        uses: docker/setup-buildx-action@v3
 
       - name: Build and push proxyparty-caddy image
         id: proxyparty-caddy-image
@@ -59,6 +64,7 @@ jobs:
           push: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
+          platforms: linux/amd64,linux/arm64
 
   production-azure:
     name: Dedicated Caddy server on GCP Compute Engine
@@ -67,7 +73,7 @@ jobs:
       name: production
       url: https://proxyparty.recaptime.dev
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Setup Tailscale (using OIDC workload federation)
         uses: tailscale/github-action@v4