From 329fd61275999ad856fff688c3fc03a77aafb51d Mon Sep 17 00:00:00 2001
From: bast <bast@bast.li>
Date: Sat, 31 Oct 2026 16:51:21 +0000
Subject: [PATCH] .github/workflows/deploy.yml aktualisiert

---
 .github/workflows/deploy.yml | 9 ++-------
 1 file changed, 2 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index bc2332a..e2d8ba9 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -9,12 +9,6 @@ jobs:
   test-and-deploy:
     runs-on: ubuntu-latest
     container: catthehacker/ubuntu:act-latest
-    
-    # --- DIESER BLOCK SCHALTET DIE SCHREIBRECHTE FREI ---
-    permissions:
-      contents: read
-      packages: write  # Erlaubt den Push in die Container-Registry!
-
     steps:
       - name: Checkout Code
         uses: actions/checkout@v4
@@ -31,8 +25,9 @@ jobs:
           cp nginx_ssl/nginx.crt /usr/local/share/ca-certificates/nginx-sandbox.crt 2>/dev/null || echo "Nutze Workspace-Zertifikat"
           update-ca-certificates
 
+      # KORRIGIERT: Nutzt das dedizierte PAT mit echten Schreibrechten für Packages
       - name: Log in to Local Registry
-        run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login localhost:3005 -u ${{ github.actor }} --password-stdin
+        run: echo "${{ secrets.REGISTRY_TOKEN }}" | docker login localhost:3005 -u ${{ github.actor }} --password-stdin
 
       - name: Inject Version into Dockerfile
         run: sed -i "s/{{APP_VERSION}}/${{ github.sha }}/g" Dockerfile