diff --git a/.gitea/workflows/dev.yaml b/.gitea/workflows/dev.yaml
new file mode 100644
index 0000000..ffa7e09
--- /dev/null
+++ b/.gitea/workflows/dev.yaml
@@ -0,0 +1,30 @@
+name: docker-build mr
+
+on:
+  push:
+    branches-ignore:
+      - main
+
+jobs:
+  dockerfile_lint:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+      - uses: hadolint/hadolint-action@v3.1.0
+        with:
+          dockerfile: Dockerfile
+
+  build:
+    # needs: dockerfile_lint
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+      - name: Kaniko build
+        uses: aevea/action-kaniko@master
+        with:
+          image: rogersik/ubuntu-xrdp
+          registry: gitea.sikorski.cloud
+          tag: "latest-dev"
+          cache: true
+          username: rogersik
+          password: ${{ secrets.REGISTRY_PASSWORD }}
diff --git a/.gitea/workflows/main.yaml b/.gitea/workflows/main.yaml
new file mode 100644
index 0000000..dd46f20
--- /dev/null
+++ b/.gitea/workflows/main.yaml
@@ -0,0 +1,32 @@
+---
+name: docker-build main
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  dockerfile_lint:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+      - uses: hadolint/hadolint-action@v3.1.0
+        with:
+          dockerfile: Dockerfile
+
+  build:
+    # needs: dockerfile_lint
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+      - name: Kaniko build
+        # https://github.com/aevea/action-kaniko/releases
+        uses: aevea/action-kaniko@v0.12.0
+        with:
+          image: rogersik/ubuntu-xrdp
+          registry: gitea.sikorski.cloud
+          tag: 'latest'
+          # tag_with_latest: true # https://github.com/aevea/action-kaniko/issues/66
+          cache: true
+          username: rogersik
+          password: ${{ secrets.REGISTRY_PASSWORD }}
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..ccebc6e
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,6 @@
+# k8s
+secret.yml
+secret.yaml
+
+# dev
+.local
diff --git a/.hadolint.yaml b/.hadolint.yaml
new file mode 100644
index 0000000..81540f9
--- /dev/null
+++ b/.hadolint.yaml
@@ -0,0 +1,2 @@
+ignored:
+  - DL3008 # no need to pin versions
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..1751094
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,4 @@
+FROM ubuntu:latest
+
+# https://github.com/hadolint/hadolint/wiki/DL4006
+SHELL ["/bin/bash", "-o", "pipefail", "-c"]