From 8d663f239286c9fbbb4db9ec73ef1ad498469631 Mon Sep 17 00:00:00 2001
From: Claude Code <claude@daddelolymp.de>
Date: Thu, 5 Mar 2026 17:07:33 +0100
Subject: [PATCH] perf: route registry traffic through LAN instead of internet

Use internal registry at 10.10.10.10:5050 instead of git.daddelolymp.de
which routes through Pangolin proxy over internet (40Mbit bottleneck).
All layer cache pulls/pushes and image pushes now stay on LAN.
---
 .gitlab-ci.yml | 124 +++++++++++++++++++++++++------------------------
 1 file changed, 63 insertions(+), 61 deletions(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 6e0b0f9..d7d50ec 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1,61 +1,63 @@
-stages:
-  - build
-
-variables:
-  IMAGE_NAME: "$CI_REGISTRY/$CI_PROJECT_PATH"
-  CI_SERVER_URL: "http://10.10.10.10:9080"
-  GITLAB_FEATURES: ""
-
-docker-build:
-  stage: build
-  image:
-    name: gcr.io/kaniko-project/executor:v1.23.2-debug
-    entrypoint: [""]
-  rules:
-    - if: $CI_PIPELINE_SOURCE == "push" && $CI_COMMIT_BRANCH
-  before_script:
-    - mkdir -p /kaniko/.docker
-    - |
-      cat > /kaniko/.docker/config.json <<EOF
-      {
-        "auths": {
-          "$CI_REGISTRY": {
-            "username": "$CI_REGISTRY_USER",
-            "password": "$CI_REGISTRY_PASSWORD"
-          }
-        }
-      }
-      EOF
-  script:
-    - |
-      if [ "$CI_COMMIT_REF_NAME" = "main" ]; then
-        TAG="main"
-        VERSION="2.0.0"
-        CHANNEL="stable"
-      elif [ "$CI_COMMIT_REF_NAME" = "feature/nightly" ] || [ "$CI_COMMIT_REF_NAME" = "nightly" ]; then
-        TAG="nightly"
-        VERSION="2.0.0-nightly"
-        CHANNEL="nightly"
-      else
-        CLEAN_TAG=$(echo "$CI_COMMIT_REF_NAME" | sed 's/\//-/g')
-        TAG="$CLEAN_TAG"
-        VERSION="2.0.0-dev"
-        CHANNEL="dev"
-      fi
-
-      DESTINATIONS="--destination=$IMAGE_NAME:$CI_COMMIT_SHA --destination=$IMAGE_NAME:$TAG"
-      if [ "$CI_COMMIT_REF_NAME" = "main" ]; then
-        DESTINATIONS="$DESTINATIONS --destination=$IMAGE_NAME:latest"
-      fi
-
-      echo "Building for channel $CHANNEL with version $VERSION and tag $TAG"
-      echo "Using registry image: $IMAGE_NAME"
-
-      /kaniko/executor \
-        --context "$CI_PROJECT_DIR" \
-        --dockerfile "$CI_PROJECT_DIR/Dockerfile" \
-        --build-arg "VITE_BUILD_CHANNEL=$CHANNEL" \
-        --build-arg "VITE_APP_VERSION=$VERSION" \
-        --cache=true \
-        --cache-repo="$IMAGE_NAME/cache" \
-        $DESTINATIONS
+stages:
+  - build
+
+variables:
+  INTERNAL_REGISTRY: "10.10.10.10:5050"
+  IMAGE_NAME: "$INTERNAL_REGISTRY/$CI_PROJECT_PATH"
+  CI_SERVER_URL: "http://10.10.10.10:9080"
+  GITLAB_FEATURES: ""
+
+docker-build:
+  stage: build
+  image:
+    name: gcr.io/kaniko-project/executor:v1.23.2-debug
+    entrypoint: [""]
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "push" && $CI_COMMIT_BRANCH
+  before_script:
+    - mkdir -p /kaniko/.docker
+    - |
+      cat > /kaniko/.docker/config.json <<EOF
+      {
+        "auths": {
+          "$INTERNAL_REGISTRY": {
+            "username": "$CI_REGISTRY_USER",
+            "password": "$CI_REGISTRY_PASSWORD"
+          }
+        }
+      }
+      EOF
+  script:
+    - |
+      if [ "$CI_COMMIT_REF_NAME" = "main" ]; then
+        TAG="main"
+        VERSION="2.0.0"
+        CHANNEL="stable"
+      elif [ "$CI_COMMIT_REF_NAME" = "feature/nightly" ] || [ "$CI_COMMIT_REF_NAME" = "nightly" ]; then
+        TAG="nightly"
+        VERSION="2.0.0-nightly"
+        CHANNEL="nightly"
+      else
+        CLEAN_TAG=$(echo "$CI_COMMIT_REF_NAME" | sed 's/\//-/g')
+        TAG="$CLEAN_TAG"
+        VERSION="2.0.0-dev"
+        CHANNEL="dev"
+      fi
+
+      DESTINATIONS="--destination=$IMAGE_NAME:$CI_COMMIT_SHA --destination=$IMAGE_NAME:$TAG"
+      if [ "$CI_COMMIT_REF_NAME" = "main" ]; then
+        DESTINATIONS="$DESTINATIONS --destination=$IMAGE_NAME:latest"
+      fi
+
+      echo "Building for channel $CHANNEL with version $VERSION and tag $TAG"
+      echo "Using registry image: $IMAGE_NAME"
+
+      /kaniko/executor \
+        --context "$CI_PROJECT_DIR" \
+        --dockerfile "$CI_PROJECT_DIR/Dockerfile" \
+        --build-arg "VITE_BUILD_CHANNEL=$CHANNEL" \
+        --build-arg "VITE_APP_VERSION=$VERSION" \
+        --cache=true \
+        --cache-repo="$IMAGE_NAME/cache" \
+        --insecure-registry=$INTERNAL_REGISTRY \
+        $DESTINATIONS