From 09d7cbfbf364234ff049280cab168af52dfaf2be Mon Sep 17 00:00:00 2001
From: limitcool <initcoool@gmail.com>
Date: Wed, 1 Apr 2026 13:24:26 +0800
Subject: [PATCH] ci: allow optional Docker Hub login for buildx pulls

---
 .gitea/workflows/backend-docker.yml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/.gitea/workflows/backend-docker.yml b/.gitea/workflows/backend-docker.yml
index 26cc541..2d215cf 100644
--- a/.gitea/workflows/backend-docker.yml
+++ b/.gitea/workflows/backend-docker.yml
@@ -176,6 +176,20 @@ jobs:
 
           docker buildx inspect --bootstrap
 
+      - name: Login Docker Hub (optional)
+        shell: bash
+        env:
+          DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
+          DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
+        run: |
+          set -euo pipefail
+
+          if [ -n "${DOCKERHUB_USERNAME:-}" ] && [ -n "${DOCKERHUB_TOKEN:-}" ]; then
+            echo "${DOCKERHUB_TOKEN}" | docker login docker.io --username "${DOCKERHUB_USERNAME}" --password-stdin
+          else
+            echo "Docker Hub credentials not configured, continuing with anonymous pulls."
+          fi
+
       - name: Build and push image
         shell: bash
         env: