Docker #9

	name: Docker

	# This workflow uses actions that are not certified by GitHub.
	# They are provided by a third-party and are governed by
	# separate terms of service, privacy policy, and support
	# documentation.

	on:
	schedule:
	- cron: "45 5 * * *"
	push:
	branches: ["main"]
	pull_request:
	branches: ["main"]

	env:
	# Use docker.io for Docker Hub if empty
	REGISTRY: docker.io
	# github.repository as <account>/<repo>
	IMAGE_NAME: jessebot/pixelfed-glitch

	jobs:
	build:
	strategy:
	matrix:
	branch:
	- develop
	- main
	webserver:
	- nginx

	runs-on: ubuntu-latest
	permissions:
	contents: read
	packages: write
	# This is used to complete the identity challenge
	# with sigstore/fulcio when running outside of PRs.
	id-token: write

	steps:
	- name: Checkout repository
	uses: actions/checkout@v4.2.2

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3.8.0

	- name: Login to Docker Hub
	uses: docker/login-action@v3
	with:
	username: ${{ secrets.DOCKERHUB_USERNAME }}
	password: ${{ secrets.DOCKERHUB_TOKEN }}

	# Build and push Docker image with Buildx (don't push on PR)
	# https://github.com/docker/build-push-action
	- name: Build and push Docker image
	id: build-and-push
	uses: docker/build-push-action@v6
	with:
	context: .
	build-args: \|
	BRANCH=${{ matrix.branch }}
	push: true
	tags: \|
	jessebot/pixelfed-glitch
	labels: ${{ steps.docker_meta.outputs.labels }}
	cache-from: type=gha
	cache-to: type=gha,mode=max
	file: Dockerfile.${{ matrix.webserver }}
	platforms: linux/amd64,linux/arm64

Provide feedback