Bind staging Docker to 18088 so portproxy can own 8088.

.gitea/workflows/registry-build-deploy.yml

@@ -9,7 +9,8 @@
 #   DEPLOY_SECRETS_DIR   absolute path on runner, e.g. C:/dyolink/secrets
 #
 # Optional:
-#   STAGING_HTTP_PORT    host port for nginx (default 8088)
+#   STAGING_HTTP_PORT    public port (default 8088) — Windows portproxy listens here
+#   STAGING_LOCAL_PORT   Docker bind on 127.0.0.1 (default 18088) — must not equal 8088 if portproxy owns 8088
 #   CLONE_HOST           git clone host when runner = Gitea host → 127.0.0.1:3000
 #
 # Same Windows PC runs Gitea + runner + deploy:
@@ -162,11 +163,14 @@ jobs:
           }
           $stagingPort = '${{ vars.STAGING_HTTP_PORT }}'.Trim()
           if ([string]::IsNullOrWhiteSpace($stagingPort)) { $stagingPort = '8088' }
+          $localPort = '${{ vars.STAGING_LOCAL_PORT }}'.Trim()
+          if ([string]::IsNullOrWhiteSpace($localPort)) { $localPort = '18088' }
           $imageTag = "${{ needs.build-and-push.outputs.image_tag }}"
           $lines = @(
             "REGISTRY_PREFIX=${{ vars.REGISTRY_HOST }}/${{ vars.REGISTRY_OWNER }}",
             "IMAGE_TAG=$imageTag",
             "STAGING_HTTP_PORT=$stagingPort",
+            "STAGING_LOCAL_PORT=$localPort",
             "DEPLOY_SECRETS_DIR=$SD"
           )
           Set-Location infrastructure