FROM almalinux:9

ARG DOVECOT_VERSION
ARG POSTFIX_VERSION
ARG RSPAMD_VERSION

RUN useradd -m -s /bin/false vmail

RUN dnf install -y epel-release dnf-plugins-core \
  && dnf update -y \
  && dnf config-manager --enable crb \
  && dnf clean all \
  && rm -rf /var/cache/yum

RUN dnf install -y postfix-${POSTFIX_VERSION} postfix-ldap-${POSTFIX_VERSION} \
  postfix-mysql-${POSTFIX_VERSION} postfix-pgsql-${POSTFIX_VERSION} \
  dovecot-${DOVECOT_VERSION} dovecot-pigeonhole-${DOVECOT_VERSION} \
  cyrus-sasl cyrus-sasl-plain cyrus-sasl-md5 pypolicyd-spf \
  && dnf clean all \
  && rm -rf /var/cache/yum

RUN update-crypto-policies --set DEFAULT:SHA1 \
  && curl https://rspamd.com/rpm-stable/centos-9/rspamd.repo > /etc/yum.repos.d/rspamd.repo \
  && rpm --import https://rspamd.com/rpm/gpg.key \
  && dnf install -y rspamd-${RSPAMD_VERSION} \
  && dnf clean all \
  && rm -rf /var/cache/yum \
  && update-crypto-policies --set DEFAULT

EXPOSE 11332

CMD ["/usr/bin/rspamd", "-f", "--insecure"]