Build from mirrored nginx base image

.gitea/workflows/publish.yml

@@ -45,9 +45,6 @@ jobs:
           username: ${{ secrets.REGISTRY_USERNAME }}
           password: ${{ secrets.REGISTRY_TOKEN }}
 
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
-
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
@@ -63,4 +60,4 @@ jobs:
             org.opencontainers.image.version=${{ steps.tags.outputs.version }}
             org.opencontainers.image.revision=${{ github.sha }}
             org.opencontainers.image.source=${{ github.server_url }}/${{ github.repository }}
-          platforms: linux/amd64,linux/arm64
+          platforms: linux/amd64

Dockerfile

@@ -1,4 +1,4 @@
-FROM nginx:1.28-alpine
+FROM git.mancheff.com/hiyv-demo/nginx-base:1.28-alpine-amd64
 
 ARG COMMIT_ID=unknown
 

README.md

@@ -6,7 +6,7 @@ Git commit used to build the published container.
 ## Run it
 
 ```sh
-docker run --rm -p 8080:80 git.mancheff.com/hiyv-demo/hiyv-nginx:1.0.0
+docker run --rm -p 8080:80 git.mancheff.com/hiyv-demo/hiyv-nginx:1.0.2
 ```
 
 Open <http://localhost:8080>. The health endpoint is available at
@@ -29,8 +29,12 @@ The Gitea Actions workflow publishes the following tags for `v1.2.3`:
 - the full Git commit SHA
 - `latest`
 
-The workflow publishes multi-platform images for `linux/amd64` and
-`linux/arm64` to `git.mancheff.com/hiyv-demo/hiyv-nginx`.
+The workflow publishes `linux/amd64` images to
+`git.mancheff.com/hiyv-demo/hiyv-nginx`.
+
+The pinned upstream nginx base is mirrored at
+`git.mancheff.com/hiyv-demo/nginx-base:1.28-alpine-amd64` so the self-hosted
+runner does not depend on Docker Hub connectivity during releases.
 
 The repository must define two Actions secrets: `REGISTRY_USERNAME` with the
 Gitea username and `REGISTRY_TOKEN` with a personal access token that has