Add Hiyv nginx image and release pipeline

README.md

@@ -0,0 +1,44 @@
+# Hiyv nginx
+
+A small, Hiyv-branded nginx base image. The landing page displays the exact
+Git commit used to build the published container.
+
+## Run it
+
+```sh
+docker run --rm -p 8080:80 git.mancheff.com/hiyv-demo/hiyv-nginx:1.0.0
+```
+
+Open <http://localhost:8080>. The health endpoint is available at
+<http://localhost:8080/healthz>.
+
+## Publish a version
+
+Publishing is driven by semantic-version Git tags:
+
+```sh
+git tag v1.0.0
+git push origin main v1.0.0
+```
+
+The Gitea Actions workflow publishes the following tags for `v1.2.3`:
+
+- `1.2.3`
+- `1.2`
+- `1`
+- the full Git commit SHA
+- `latest`
+
+The workflow publishes multi-platform images for `linux/amd64` and
+`linux/arm64` to `git.mancheff.com/hiyv-demo/hiyv-nginx`.
+
+The repository must define two Actions secrets: `REGISTRY_USERNAME` with the
+Gitea username and `REGISTRY_TOKEN` with a personal access token that has
+package write access. Gitea's automatic job token cannot currently publish OCI
+packages.
+
+## Build locally
+
+```sh
+docker build --build-arg COMMIT_ID="$(git rev-parse HEAD)" -t hiyv-nginx:local .
+```