Lets see what deepseek does

.gitea/workflows/build-docker-image.yml

@@ -1,4 +1,3 @@
-# .github/workflows/build-server.yml
 name: Build and Push Server Docker Image
 
 on:
@@ -9,12 +8,19 @@ on:
 jobs:
   build-server:
     runs-on: ubuntu-24.04
-
+    services:
+      docker:
+        image: docker:dind
+        options: --privileged --security-opt seccomp=unconfined
     steps:
       # 1. Check out the repo
       - uses: actions/checkout@v4
 
-      # 2. Log in to your container registry
+      # 2. Set up Docker Buildx (recommended for advanced caching)
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      # 3. Log in to your container registry
       - name: Log in to registry
         uses: docker/login-action@v2
         with:
@@ -22,11 +28,11 @@ jobs:
           username: ${{ secrets.REGISTRY_USERNAME }}
           password: ${{ secrets.REGISTRY_PASSWORD }}
 
-      # 2.5 Lowercase the repository name
+      # 4. Lowercase the repository name
       - name: Set lowercase repo name
         run: echo "REPO_NAME_LOWER=$(echo '${{ github.event.repository.name }}' | tr '[:upper:]' '[:lower:]')" >> $GITHUB_ENV
 
-      # 3. Build & push the server image, using remote cache
+      # 5. Build & push the server image, using remote cache
       - name: Build and push server image
         uses: docker/build-push-action@v4
         with:
@@ -36,4 +42,3 @@ jobs:
           tags:       ${{ secrets.REGISTRY_URL }}/${{ github.repository_owner }}/${{ env.REPO_NAME_LOWER }}:latest-server
           cache-from: type=registry,ref=${{ secrets.REGISTRY_URL }}/${{ github.repository_owner }}/${{ env.REPO_NAME_LOWER }}:buildcache
           cache-to:   type=registry,ref=${{ secrets.REGISTRY_URL }}/${{ github.repository_owner }}/${{ env.REPO_NAME_LOWER }}:buildcache,mode=max
-