From d4f3c42b50b0a38c53164fe77f801911aec4ee8b Mon Sep 17 00:00:00 2001
From: bast <bast@bast.li>
Date: Sat, 31 Oct 2026 16:45:21 +0000
Subject: [PATCH] .github/workflows/deploy.yml aktualisiert

---
 .github/workflows/deploy.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index fd6de72..bc2332a 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -9,6 +9,12 @@ jobs:
   test-and-deploy:
     runs-on: ubuntu-latest
     container: catthehacker/ubuntu:act-latest
+    
+    # --- DIESER BLOCK SCHALTET DIE SCHREIBRECHTE FREI ---
+    permissions:
+      contents: read
+      packages: write  # Erlaubt den Push in die Container-Registry!
+
     steps:
       - name: Checkout Code
         uses: actions/checkout@v4
@@ -19,6 +25,12 @@ jobs:
           chmod +x /usr/local/bin/terraform
           terraform --version
 
+      - name: Trust Local Nginx Certificate Inside Container
+        run: |
+          mkdir -p /usr/local/share/ca-certificates/
+          cp nginx_ssl/nginx.crt /usr/local/share/ca-certificates/nginx-sandbox.crt 2>/dev/null || echo "Nutze Workspace-Zertifikat"
+          update-ca-certificates
+
       - name: Log in to Local Registry
         run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login localhost:3005 -u ${{ github.actor }} --password-stdin