when:
  - event: push
    branch: master
  - event: [tag, manual]

steps:
  - name: build-and-push
    # Pinned: WOODPECKER_PLUGINS_PRIVILEGED on the server must allow this exact
    # image:tag, so a floating tag here would silently break the build.
    image: woodpeckerci/plugin-docker-buildx:6.1.1
    privileged: true
    settings:
      registry: registry.apps.millslan.net
      repo: registry.apps.millslan.net/starship/coreid
      tags: latest
      platforms: linux/amd64
      dockerfile: Dockerfile
      username:
        from_secret: registry_username
      password:
        from_secret: registry_password