Refactor Woodpecker CI pipeline to use buildx plugin correctly

.woodpecker.yml

@@ -3,16 +3,19 @@ when:
   branch: main
 
 steps:
-  - name: build
-    image: woodpeckerci/plugin-docker-buildx
+  - name: build-and-push
+    image: woodpeckerci/plugin-docker-buildx:4.2.0
+    privileged: true
     settings:
-      registry: harbor.scottyah.com
       repo: harbor.scottyah.com/scottyah/blog
-      tags: latest
       dockerfile: Dockerfile
       context: .
       platforms: linux/amd64
-      insecure: true
+      tags:
+        - latest
+        - ${CI_COMMIT_SHA:0:8}
+      logins:
+        - registry: https://harbor.scottyah.com
           username:
             from_secret: harbor_username
           password:
@@ -22,6 +25,7 @@ steps:
     image: bitnami/kubectl:latest
     commands:
       - kubectl apply -f k8s.yaml -n blog
+      - kubectl rollout restart deployment/blog-dep -n blog
       - kubectl rollout status deployment/blog-dep -n blog
     environment:
       KUBECONFIG:

k8s.yaml

@@ -50,7 +50,7 @@ spec:
   tls:
   - hosts:
     - scottyah.com
-    secretName: blog-tls-cert
+    secretName: scottyah-tls
   rules:
   - host: scottyah.com
     http: