ci: align workflows with mydl pattern — test gates, tag-only push, cron rebuilds $TAG-latest

.gitea/workflows/cron.yaml

@@ -40,7 +40,7 @@ jobs:
           images: jcabillot/rssbridge
           tags: |
             type=raw,value=${{ steps.get-latest-tag.outputs.tag }}-latest,enable=${{ steps.get-latest-tag.outputs.tag != '' }}
-      - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+      - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
         with:
           context: .
           push: true

.gitea/workflows/tag.yaml

@@ -35,7 +35,7 @@ jobs:
           tags: |
             type=ref,event=tag
             type=ref,event=tag,suffix=-latest
-      - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+      - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
         with:
           context: .
           push: true

Dockerfile

@@ -16,7 +16,8 @@ RUN curl -s -L "https://github.com/RSS-Bridge/rss-bridge/tarball/master/" -o /tm
 # Configure RSS-Bridge
 RUN echo "*" > "/app/public/whitelist.txt" && \
     mkdir -p /app/public/cache && \
-    chown -R www-data:www-data /app/public && \
-    chmod -R 775 /app/public/cache
+    chown -R www-data:www-data /app/public
+
+RUN chown www-data:www-data /data/caddy && chmod 2770 /data/caddy
 
 USER www-data

renovate.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "customManagers": [
+    {
+      "customType": "regex",
+      "description": "Detect ARG VERSION pin for jcabillot/phpapache base image",
+      "managerFilePatterns": [
+        "/^Dockerfile$/"
+      ],
+      "matchStrings": [
+        "ARG\\s+VERSION=\"(?<currentValue>[^\"]+)\""
+      ],
+      "depNameTemplate": "jcabillot/phpapache",
+      "datasourceTemplate": "docker"
+    }
+  ]
+}