diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml
new file mode 100644
index 0000000..ccfd4f2
--- /dev/null
+++ b/.gitea/workflows/ci.yaml
@@ -0,0 +1,24 @@
+name: Build container
+on:
+  push:
+
+jobs:
+  build:
+    runs-on: container-builder
+    steps:
+      - uses: actions/checkout@v4
+      - name: Build
+        uses: redhat-actions/buildah-build@v2
+        with:
+          image: ${{ github.repository_owner }}/${{ github.event.repository.name }}
+          tags: latest
+          containerfiles: |
+            ./Containerfile
+      - name: Push
+        uses: redhat-actions/push-to-registry@v2
+        with:
+          image: ${{ github.repository_owner }}/${{ github.event.repository.name }}
+          tags: latest
+          registry: git.plabble.org
+          username: ${{ secrets.REGISTRY_USERNAME }}
+          password: ${{ secrets.REGISTRY_TOKEN }}
diff --git a/Containerfile b/Containerfile
index 81fe34c..7047b30 100644
--- a/Containerfile
+++ b/Containerfile
@@ -1,11 +1,11 @@
-FROM node:21-alpine3.19 AS frontend-builder
+FROM node:22-alpine3.20 AS frontend-builder
 WORKDIR /build
 
 RUN corepack enable
 COPY pastabble-frontend/ .
 RUN pnpm i && pnpm build
 
-FROM rust:alpine3.19 AS builder
+FROM rust:alpine3.20 AS builder
 WORKDIR /build
 
 RUN apk add --no-cache musl-dev
@@ -18,7 +18,7 @@ RUN case "$(apk --print-arch)" in \
 	       mv ./target/aarch64-unknown-linux-musl /release ;; \
 	esac
 
-FROM alpine:3.19
+FROM alpine:3.20
 WORKDIR /app
 
 RUN mkdir wwwroot data && \