Initial commit

Signed-off-by: René Jochum <rene@jochum.dev>

Dockerfile

@@ -0,0 +1,36 @@
+FROM reg.jochum.dev/library/debian:bullseye-slim
+
+LABEL maintainer "René Jochum <rene@jochum.dev>"
+
+ENV DEBIAN_FRONTEND noninteractive
+
+# Configure Proxy
+RUN set -ex; \
+    sed -i 's/deb.debian.org/ftp.ch.debian.org/g' /etc/apt/sources.list && \
+    apt-get update --allow-releaseinfo-change && \
+    apt-get install -qy netcat-openbsd && \
+    sed -i 's/ftp.ch.debian.org/deb.debian.org/g' /etc/apt/sources.list || exit 0 && \
+    if [ -z "$APT_CACHER" ]; then APT_CACHER="apt-cacher.apt-cacher.svc.cluster.local"; fi && \
+    if nc -w1 -z $APT_CACHER 3142 1>/dev/null 2>&1; then \
+    echo 'Acquire::HTTP::Proxy "http://'$APT_CACHER':3142";' >> /etc/apt/apt.conf.d/01proxy && \
+    echo 'Acquire::HTTPS::Proxy "false";' >> /etc/apt/apt.conf.d/01proxy; else exit 0; fi
+
+# Install rspamd
+RUN set -ex; \
+    apt-get update --allow-releaseinfo-change && \
+    apt-get install --no-install-recommends -y -o 'DPkg::Options::=--force-confold' -o 'DPkg::Options::=--force-confdef' lsb-release wget ca-certificates gpg && \
+    mkdir -p /etc/apt/keyrings && \
+    wget -O- https://rspamd.com/apt-stable/gpg.key | gpg --dearmor > /etc/apt/keyrings/rspamd.gpg && \
+    echo "deb [arch=amd64 signed-by=/etc/apt/keyrings/rspamd.gpg] http://rspamd.com/apt-stable/ `lsb_release -c -s` main" > /etc/apt/sources.list.d/rspamd.list && \
+    echo "deb-src [arch=amd64 signed-by=/etc/apt/keyrings/rspamd.gpg] http://rspamd.com/apt-stable/ `lsb_release -c -s` main" >> /etc/apt/sources.list.d/rspamd.list && \
+    apt-get update --allow-releaseinfo-change && \
+    apt-get --no-install-recommends -y -o 'DPkg::Options::=--force-confold' -o 'DPkg::Options::=--force-confdef' install rspamd
+
+RUN set -ex; \
+    rm -rf /var/lib/apt/lists/*
+
+# 11332 milter, 11334 web
+EXPOSE 11332/tcp 11334/tcp
+
+USER _rspamd
+CMD ["/usr/bin/rspamd", "-c", "/etc/rspamd/rspamd.conf", "-f"]