chore(build): add docker image build workflow

.gitea/workflows/docker.yml

@@ -0,0 +1,39 @@
+name: docker-release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Set up Go
+        uses: actions/setup-go@v6
+        with:
+          go-version: '1.25.5'
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to Yandex Cloud Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: cr.yandex
+          username: oauth
+          password: ${{ secrets.YANDEX_CLOUD_OAUTH_TOKEN }}
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: ./Dockerfile
+          push: true
+          tags: |
+            cr.yandex/${{ secrets.YANDEX_CLOUD_REGISTRY_ID }}/trackers:${{ github.ref_name }}
+            cr.yandex/${{ secrets.YANDEX_CLOUD_REGISTRY_ID }}/trackers:latest
+          platforms: linux/amd64

.gitea/workflows/release.yml

@@ -17,18 +17,11 @@ jobs:
         with:
           go-version: '1.25.5'
 
-      - name: Install GoReleaser
-        uses: goreleaser/goreleaser-action@v6
-        with:
-          version: latest
-          distribution: goreleaser
-          install-only: true
-
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v6
         with:
-          version: latest
+          version: 'v2.13.2'
           distribution: goreleaser
           args: release --clean
         env:
-          GITEA_TOKEN: ${{ secrets.RELEASE_TOKEN }}
+          GITEA_TOKEN: '${{ secrets.RELEASE_TOKEN }}'

Dockerfile

@@ -0,0 +1,21 @@
+FROM golang:1.25.5-alpine AS build
+
+WORKDIR /src
+
+COPY go.mod .
+COPY go.sum .
+
+RUN go mod download
+
+COPY . .
+
+RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o /out/trackers ./main.go
+
+
+FROM gcr.io/distroless/static:nonroot
+
+COPY --from=build /out/trackers /trackers
+
+USER nonroot:nonroot
+
+ENTRYPOINT ["/trackers"]