From baff0240167380ff0427916740d1e3a90f6bac2c Mon Sep 17 00:00:00 2001
From: Breadway <plasticbread849@gmail.com>
Date: Sat, 13 Jun 2026 11:42:00 +0800
Subject: [PATCH] Add Forgejo Actions workflows and fix [breadway] repo URL
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- .forgejo/workflows/mirror.yml: mirrors every push/tag to GitHub
- .forgejo/workflows/package.yml: builds PKGBUILD on tag and publishes
  bos-settings to the Forgejo Arch package registry (distrib=breadway)
- iso/pacman.conf: replace placeholder repo.breadway.dev with the actual
  Forgejo package registry URL

Requires two Forgejo secrets:
  GITHUB_MIRROR_TOKEN — GitHub PAT with repo push scope
  FORGEJO_TOKEN       — Forgejo token with package:write scope
---
 .forgejo/workflows/mirror.yml  | 20 +++++++++++++++
 .forgejo/workflows/package.yml | 46 ++++++++++++++++++++++++++++++++++
 iso/pacman.conf                |  7 +++---
 3 files changed, 70 insertions(+), 3 deletions(-)
 create mode 100644 .forgejo/workflows/mirror.yml
 create mode 100644 .forgejo/workflows/package.yml

diff --git a/.forgejo/workflows/mirror.yml b/.forgejo/workflows/mirror.yml
new file mode 100644
index 0000000..9e7f427
--- /dev/null
+++ b/.forgejo/workflows/mirror.yml
@@ -0,0 +1,20 @@
+name: Mirror to GitHub
+
+on:
+  push:
+    branches: ['**']
+    tags: ['**']
+
+jobs:
+  mirror:
+    runs-on: [self-hosted, hestia]
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Push to GitHub
+        run: |
+          git remote add github \
+            "https://x-access-token:${{ secrets.GITHUB_MIRROR_TOKEN }}@github.com/Breadway/bos.git"
+          git push github --mirror
diff --git a/.forgejo/workflows/package.yml b/.forgejo/workflows/package.yml
new file mode 100644
index 0000000..2a339b4
--- /dev/null
+++ b/.forgejo/workflows/package.yml
@@ -0,0 +1,46 @@
+name: Build and publish package
+
+on:
+  push:
+    tags: ['v*']
+
+jobs:
+  package:
+    runs-on: [self-hosted, hestia]
+    container:
+      image: archlinux:latest
+      options: --privileged
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set version
+        run: echo "VERSION=${GITHUB_REF_NAME#v}" >> $GITHUB_ENV
+
+      - name: Install build dependencies
+        run: pacman -Syu --noconfirm base-devel git rust cargo gtk4 glib2
+
+      - name: Create builder user
+        run: useradd -m builder
+
+      - name: Prepare source
+        run: |
+          git archive --format=tar.gz \
+            --prefix=bos-settings-${VERSION}/ \
+            HEAD > packaging/arch/bos-settings-${VERSION}.tar.gz
+          SHA=$(sha256sum packaging/arch/bos-settings-${VERSION}.tar.gz | awk '{print $1}')
+          sed -i "s/^pkgver=.*/pkgver=${VERSION}/" packaging/arch/PKGBUILD
+          sed -i "s/^sha256sums=.*/sha256sums=('${SHA}')/" packaging/arch/PKGBUILD
+          cp -r . /home/builder/src
+          chown -R builder:builder /home/builder/src
+
+      - name: Build package
+        run: su builder -c "cd /home/builder/src/packaging/arch && makepkg -sf --noconfirm"
+
+      - name: Publish to Forgejo registry
+        run: |
+          PKG=$(find /home/builder/src/packaging/arch -name '*.pkg.tar.zst' | head -1)
+          curl -fsS -X PUT \
+            -H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
+            --upload-file "${PKG}" \
+            "https://git.breadway.dev/api/packages/breadway/arch/push?distrib=breadway"
diff --git a/iso/pacman.conf b/iso/pacman.conf
index c071a87..701e900 100644
--- a/iso/pacman.conf
+++ b/iso/pacman.conf
@@ -30,9 +30,10 @@ Include = /etc/pacman.d/mirrorlist
 # bread ecosystem packages (bread, breadbar, breadbox, breadcrumbs, breadpad,
 # bos-settings).
 #
-# TODO: Replace this URL with the actual hosted repo before building.
-# See: https://github.com/Breadway/repo for setup instructions.
+# Packages are published here by the Forgejo Actions package.yml workflow
+# in each repo. See git.breadway.dev/api/packages/breadway/arch for the
+# package registry.
 # -----------------------------------------------------------------------
 [breadway]
 SigLevel = Optional TrustAll
-Server = https://repo.breadway.dev/$arch
+Server = https://git.breadway.dev/api/packages/breadway/arch/breadway/$arch