FROM docker.io/debian:bookworm-slim@sha256:f80c45482c8d147da87613cb6878a7238b8642bcc24fc11bad78c7bec726f340
ARG VERSION=3.7.5 # renovate: datasource=github-releases depName=rspamd/rspamd

RUN apt-get update -y && apt-get install -y --no-install-recommends ca-certificates
ADD --chown=_apt https://rspamd.com/apt-stable/gpg.key /etc/apt/trusted.gpg.d/rspamd.asc

RUN echo "deb https://rspamd.com/apt-stable/ bookworm main" > /etc/apt/sources.list.d/rspamd.list && \
    apt-get update && apt-get install -y --no-install-recommends rspamd="${VERSION}*"

RUN addgroup --system --gid 11332 rspamd
RUN adduser --system --uid 11332 --ingroup rspamd --home /var/lib/rspamd rspamd

COPY --chown=rspamd:rspamd container/config /etc/rspamd
COPY container/run-rspamd /run-rspamd

EXPOSE 11332 11333 11334
ENTRYPOINT ["/run-rspamd"]