use newest alpine

.gitea/workflows/container.yaml

@@ -0,0 +1,12 @@
+name: Build Multiarch Container Image
+on: [push]
+jobs:
+  call-reusable-workflow:
+    uses: container/multiarch-build-workflow/.gitea/workflows/build.yaml@main
+    with:
+      repository: ${{ gitea.repository }}
+      ref_name: ${{ gitea.ref_name }}
+      sha: ${{ gitea.sha }}
+      registry_url: ${{ secrets.REGISTRY_URL }}
+      registry_user: ${{ secrets.REGISTRY_USER }}
+      registry_pw: ${{ secrets.REGISTRY_PW }}

.gitlab-ci.yml

@@ -1,18 +0,0 @@
-variables:
-  CONTAINER_NAME: thallian/rspamd
-
-build:
-  stage: build
-  image:
-    name: gcr.io/kaniko-project/executor:debug
-    entrypoint: [""]
-  script:
-    - mkdir -p /kaniko/.docker
-    - echo "{\"auths\":{\"$CI_REGISTRY\":{\"auth\":\"$(printf "%s:%s" "$CI_REGISTRY_USER" "$CI_REGISTRY_PASSWORD" | base64 | tr -d '\n')\"}}}" > /kaniko/.docker/config.json
-    - >-
-      /kaniko/executor
-      --context "$CI_PROJECT_DIR"
-      --dockerfile "$CI_PROJECT_DIR/Dockerfile"
-      --destination "$CONTAINER_NAME:$CI_COMMIT_SHA"
-      --destination "$CONTAINER_NAME:$CI_COMMIT_REF_NAME"
-      --destination "$CONTAINER_NAME:latest"

Containerfile

@@ -1,4 +1,4 @@
-FROM thallian/confd-env:latest
+FROM docker.io/thallian/confd-env:3.19-3.1.6.2
 
 RUN apk --no-cache add \
 	rspamd \

rootfs/etc/rspamd/local.d/dkim_signing.conf

@@ -4,3 +4,4 @@
 
 path = "/var/lib/rspamd/dkim/$domain.$selector.key";
 selector_map = "/etc/rspamd/dkim_selectors.map";
+allow_username_mismatch = true;

rootfs/etc/rspamd/local.d/settings.conf

@@ -0,0 +1,7 @@
+authenticated {
+	priority = high;
+	authenticated = yes;
+	apply {
+		groups_disabled = ["rbl", "spf"];
+	}
+}

rootfs/etc/rspamd/local.d/spf.conf

@@ -0,0 +1 @@
+disable_ipv6 = false;

rootfs/etc/rspamd/local.d/worker-proxy.inc

@@ -0,0 +1 @@
+bind_socket = "0.0.0.0:11332";

rootfs/etc/rspamd/override.d/options.inc

@@ -0,0 +1 @@
+local_addrs = ["127.0.0.1"];