FROM almalinux:9

RUN useradd -m -s /bin/false vmail

RUN dnf install -y epel-release dnf-plugins-core \
  && dnf update -y \
  && dnf config-manager --enable crb \
  && dnf clean all \
  && rm -rf /var/cache/yum

RUN dnf install -y postfix-3.5.9 postfix-ldap-3.5.9 postfix-mysql-3.5.9 postfix-pgsql-3.5.9 \
  dovecot-2.3.16 dovecot-pigeonhole-2.3.16 opendkim-2.11.0 opendmarc-1.4.2 \
  cyrus-sasl cyrus-sasl-plain cyrus-sasl-md5 pypolicyd-spf \
  && dnf clean all \
  && rm -rf /var/cache/yum

RUN update-crypto-policies --set DEFAULT:SHA1 \
  && curl https://rspamd.com/rpm-stable/centos-9/rspamd.repo > /etc/yum.repos.d/rspamd.repo \
  && rpm --import https://rspamd.com/rpm/gpg.key \
  && dnf install -y rspamd-3.7.5 \
  && dnf clean all \
  && rm -rf /var/cache/yum \
  && update-crypto-policies --set DEFAULT

EXPOSE 11332

CMD ["/usr/bin/rspamd", "-f", "--insecure"]