fix: use dind service for forgejo builds

.forgejo/workflows/build.yaml

@@ -10,7 +10,14 @@ jobs:
   build:
     runs-on: ubuntu-latest
     env:
-      DOCKER_HOST: unix:///var/run/docker.sock
+      DOCKER_HOST: tcp://docker:2375
+      DOCKER_TLS_CERTDIR: ""
+    services:
+      docker:
+        image: docker:27-dind
+        env:
+          DOCKER_TLS_CERTDIR: ""
+        options: --privileged
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -22,7 +29,7 @@ jobs:
 
       - name: Set up Docker Buildx
         run: |
-          export DOCKER_HOST=unix:///var/run/docker.sock
+          export DOCKER_HOST=tcp://docker:2375
           docker version
           docker buildx create --use || true
           docker buildx inspect --bootstrap
@@ -34,7 +41,7 @@ jobs:
           REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
         run: |
           set -euo pipefail
-          export DOCKER_HOST=unix:///var/run/docker.sock
+          export DOCKER_HOST=tcp://docker:2375
           SHA="$(git rev-parse HEAD)"
           test -n "$REGISTRY_HOSTPORT"
           echo "$REGISTRY_PASSWORD" | docker login "$REGISTRY_HOSTPORT" -u "$REGISTRY_USERNAME" --password-stdin
@@ -44,7 +51,7 @@ jobs:
           REGISTRY_HOSTPORT: ${{ secrets.REGISTRY_HOSTPORT }}
         run: |
           set -euo pipefail
-          export DOCKER_HOST=unix:///var/run/docker.sock
+          export DOCKER_HOST=tcp://docker:2375
           SHA="$(git rev-parse HEAD)"
 
           build_and_push() {