feat: migrate to self-hosted server with Google OAuth

.github/workflows/ci.yml

@@ -13,7 +13,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Install dependencies
-        run: pip3 install --break-system-packages ruff pytest
+        run: pip3 install --break-system-packages ruff pytest -r server/requirements.txt
 
       - name: Lint with ruff
         run: python3 -m ruff check image_upload_transit.py

.github/workflows/release.yml

@@ -71,8 +71,7 @@ jobs:
 
             def caveats
               <<~EOS
-                Requires 1Password CLI (installed via 1Password app or `brew install --cask 1password-cli`)
-                and access to the Transit 1Password Shared vault.
+                Run `image-upload-transit --login` to authenticate with your Transit Google account.
               EOS
             end
 

.github/workflows/server-image.yml

@@ -0,0 +1,40 @@
+name: Server Image
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - "server/**"
+  pull_request:
+    branches: [main]
+    paths:
+      - "server/**"
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: transitapp/image-upload-server
+
+jobs:
+  build:
+    runs-on: [self-hosted, linux, ci-transitapp]
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          context: server
+          push: ${{ github.ref == 'refs/heads/main' }}
+          tags: |
+            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }}
+            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest

Formula/image-upload-transit.rb

@@ -11,8 +11,7 @@ def install
 
   def caveats
     <<~EOS
-      Requires 1Password CLI (installed via 1Password app or `brew install --cask 1password-cli`)
-      and access to the Transit 1Password Shared vault.
+      Run `image-upload-transit --login` to authenticate with your Transit Google account.
     EOS
   end