From 89a7d4d67daa6db94cb023e45cf9b331afb3dc73 Mon Sep 17 00:00:00 2001 From: Maxime Killinger Date: Fri, 28 Aug 2026 23:03:30 +0200 Subject: [PATCH] ci: read WATCHTOWER_TOKEN from vars, not secrets The token is stored as an instance-level Actions Variable (Site Administration > Actions > Variables), not a Secret. secrets.WATCHTOWER_TOKEN always resolved to empty, so the watchtower trigger request carried no Authorization value and was rejected (401 Invalid token attempt). --- .gitea/workflows/docker.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gitea/workflows/docker.yaml b/.gitea/workflows/docker.yaml index 6affa28..6baf460 100644 --- a/.gitea/workflows/docker.yaml +++ b/.gitea/workflows/docker.yaml @@ -30,6 +30,6 @@ jobs: - name: 🔔 Trigger Watchtower if: github.ref == 'refs/heads/main' env: - TOKEN: ${{ secrets.WATCHTOWER_TOKEN }} + TOKEN: ${{ vars.WATCHTOWER_TOKEN }} run: | curl -X POST -H "Authorization: Bearer $TOKEN" http://192.168.1.118:3026/v1/update