.gitea/workflows/ci.yml

@@ -30,7 +30,7 @@ jobs:
 
       - name: Docker Build Test
         env:
-          NODE_IMAGE: mirror.soroushasad.com/repository/docker-group/node:20-slim
+          NODE_IMAGE: mirror.soroushasadi.com/repository/docker-group/node:20-slim
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: |
           docker build \

.gitea/workflows/deploy.yml

@@ -41,7 +41,7 @@ jobs:
 
       - name: Build Container
         env:
-          NODE_IMAGE: mirror.soroushasad.com/repository/docker-group/node:20-slim
+          NODE_IMAGE: mirror.soroushasadi.com/repository/docker-group/node:20-slim
         run: |
           docker compose build
 

.npmrc

@@ -2,7 +2,7 @@
 # the registry.npmjs.org hosts found in package-lock.json to this mirror at
 # install time (default replace-registry-host=npmjs), so the committed lockfile
 # is reused as-is — no regeneration needed.
-registry=http://mirror.soroushasad.com/repository/npm-group/
+registry=http://mirror.soroushasadi.com/repository/npm-group/
 
 # Auth is never committed. CI and the Docker build append an `_authToken` line
 # from the NPM_TOKEN secret at install time; for local installs put the token in

Dockerfile

@@ -1,10 +1,10 @@
 # All base images flow through the Nexus docker-group proxy, which aggregates
 # Docker Hub, Microsoft Container Registry (mcr.microsoft.com) and GitHub
 # Container Registry (ghcr.io) behind one path — any upstream image is reachable
-# as mirror.soroushasad.com/repository/docker-group/<image>.
+# as mirror.soroushasadi.com/repository/docker-group/<image>.
 # Build directly against Docker Hub instead with:
 #   --build-arg NODE_IMAGE=node:20-slim
-ARG NODE_IMAGE=node:20-slim
+ARG NODE_IMAGE=mirror.soroushasadi.com/repository/docker-group/node:20-slim
 # ---------------------------------------------------------------------------
 # 1. Dependencies — installs node_modules and compiles the better-sqlite3
 #    native addon (needs python3 + a C++ toolchain).
@@ -15,11 +15,11 @@ RUN apt-get update \
   && apt-get install -y --no-install-recommends python3 make g++ ca-certificates \
   && rm -rf /var/lib/apt/lists/*
 # .npmrc points npm at the Nexus npm-group; NPM_TOKEN (optional) authenticates.
-# The token is written only into this build stage and never reaches the runner
-# image, which copies node_modules — not .npmrc.
-COPY package.json package-lock.json ./
+# The token is appended at build time only — never reaches the runner image.
+ARG NPM_TOKEN=""
+COPY package.json package-lock.json .npmrc ./
 RUN if [ -n "$NPM_TOKEN" ]; then \
-      echo "//mirror.soroushasad.com/repository/npm-group/:_authToken=${NPM_TOKEN}" >> .npmrc ; \
+      echo "//mirror.soroushasadi.com/repository/npm-group/:_authToken=${NPM_TOKEN}" >> .npmrc ; \
     fi \
   && npm ci
 

docker-compose.yml

@@ -6,7 +6,7 @@ services:
       context: .
       dockerfile: Dockerfile
       args:
-        NODE_IMAGE: ${NODE_IMAGE:-mirror.soroushasad.com/repository/docker-group/node:20-slim}
+        NODE_IMAGE: ${NODE_IMAGE:-mirror.soroushasadi.com/repository/docker-group/node:20-slim}
         NPM_TOKEN: ${NPM_TOKEN:-}
     image: soroushasadi-site:latest
     container_name: soroushasadi-site