From d1aa09ecac468fd9eb7a0725b5484c759e1480cc Mon Sep 17 00:00:00 2001
From: Gregory Lirent <opensource@lirent.ru>
Date: Mon, 22 Jun 2026 19:33:43 +0300
Subject: [PATCH] ci: reach the package registry over https for authenticated
 apt; bump 0.3.3

---
 .gitea/workflows/release.yml | 10 ++++++----
 CMakeLists.txt               |  2 +-
 2 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml
index 9c491a8..da46e02 100644
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -45,7 +45,7 @@ jobs:
       - name: Attach to release
         env:
           GITEA_TOKEN: ${{ secrets.PUBLISH_TOKEN }}
-          SERVER: ${{ github.server_url }}
+          SERVER: https://dev.lirent.ru
           REPO: ${{ github.repository }}
           TAG: ${{ github.ref_name }}
         run: |
@@ -84,7 +84,7 @@ jobs:
 
       - name: Install toolchain + vmie (external dependency)
         env:
-          SERVER: ${{ github.server_url }}
+          SERVER: https://dev.lirent.ru
           OWNER: ${{ github.repository_owner }}
           ACTOR: ${{ github.actor }}
           TOKEN: ${{ secrets.PUBLISH_TOKEN }}
@@ -96,8 +96,10 @@ jobs:
           # The Gitea Debian registry is private: apt needs HTTP Basic Auth. [trusted=yes]
           # only skips GPG verification, NOT authentication — hence the prior 401. The token
           # is written to auth.conf.d (never echoed to the log).
+          # machine MUST carry the scheme (https://) — apt refuses to send credentials over an
+          # unencrypted/unannotated endpoint (the prior 401 over the plain-http internal IP).
           install -d -m 0700 /etc/apt/auth.conf.d
-          printf 'machine %s login %s password %s\n' "${SERVER#*://}" "$ACTOR" "$TOKEN" \
+          printf 'machine %s login %s password %s\n' "$SERVER" "$ACTOR" "$TOKEN" \
             > /etc/apt/auth.conf.d/gitea.conf
           chmod 600 /etc/apt/auth.conf.d/gitea.conf
           echo "deb [trusted=yes] ${SERVER}/api/packages/${OWNER}/debian stable main" \
@@ -113,7 +115,7 @@ jobs:
       - name: Publish to Debian registry
         env:
           TOKEN: ${{ secrets.PUBLISH_TOKEN }}   # requires scope: package:write
-          SERVER: ${{ github.server_url }}
+          SERVER: https://dev.lirent.ru
           OWNER: ${{ github.repository_owner }}
           DISTRIBUTION: stable
           COMPONENT: main
diff --git a/CMakeLists.txt b/CMakeLists.txt
index 0a1e0b9..4bd0661 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -1,5 +1,5 @@
 cmake_minimum_required(VERSION 3.16)
-project(vmsig VERSION 0.3.2 LANGUAGES C)
+project(vmsig VERSION 0.3.3 LANGUAGES C)
 
 set(CMAKE_C_STANDARD 17)
 set(CMAKE_C_STANDARD_REQUIRED ON)