chore(build): improve build

- union workflows
- take go version from go.mod

.gitea/workflows/release.yml

@@ -6,6 +6,7 @@ on:
       - 'v*'
 
 jobs:
+
   goreleaser:
     runs-on: ubuntu-latest
     steps:
@@ -15,20 +16,40 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v6
         with:
-          go-version: '1.25.5'
-
-      - name: Install GoReleaser
-        uses: goreleaser/goreleaser-action@v6
-        with:
-          version: latest
-          distribution: goreleaser
-          install-only: true
+          go-version: 'go.mod'
 
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v6
         with:
-          version: latest
+          version: 'v2.13.2'
           distribution: goreleaser
           args: release --clean
         env:
-          GITEA_TOKEN: ${{ secrets.RELEASE_TOKEN }}
+          GITEA_TOKEN: '${{ secrets.RELEASE_TOKEN }}'
+
+  docker-image:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to Yandex Cloud Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: cr.yandex
+          username: oauth
+          password: ${{ secrets.YANDEX_CLOUD_OAUTH_TOKEN }}
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          file: ./Dockerfile
+          context: .
+          push: true
+          tags: |
+            cr.yandex/${{ secrets.YANDEX_CLOUD_REGISTRY_ID }}/trackers:${{ github.ref_name }}
+            cr.yandex/${{ secrets.YANDEX_CLOUD_REGISTRY_ID }}/trackers:latest
+          platforms: linux/amd64

Dockerfile

@@ -0,0 +1,21 @@
+FROM golang:1.25.5-alpine AS build
+
+WORKDIR /src
+
+COPY go.mod .
+COPY go.sum .
+
+RUN go mod download
+
+COPY . .
+
+RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o /out/trackers ./main.go
+
+
+FROM gcr.io/distroless/static:nonroot
+
+COPY --from=build /out/trackers /trackers
+
+USER nonroot:nonroot
+
+ENTRYPOINT ["/trackers"]