diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a9672715..3377440c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -222,7 +222,6 @@ jobs:
     - name: Set up a Redis server
       run: |
         cd tools
-        chmod 777 tls/*
         docker compose up -d --wait || (docker compose logs; exit 1)
 
     - name: Setup Boost
diff --git a/tools/Dockerfile b/tools/Dockerfile
new file mode 100644
index 00000000..2d8f1dbe
--- /dev/null
+++ b/tools/Dockerfile
@@ -0,0 +1,11 @@
+FROM redis:alpine
+
+COPY tls/ /tls/
+
+CMD [ "redis-server", \
+      "--tls-port", "6380", \
+      "--tls-cert-file", "/tls/server.crt", \
+      "--tls-key-file", "/tls/server-key.key", \
+      "--tls-ca-cert-file", "/tls/ca.crt", \
+      "--tls-auth-clients", "no" \
+    ]
diff --git a/tools/docker-compose.yml b/tools/docker-compose.yml
index b42763d3..6457ce01 100644
--- a/tools/docker-compose.yml
+++ b/tools/docker-compose.yml
@@ -1,16 +1,3 @@
 services:
   redis:
-    image: "redis:alpine"
-    command: [
-      "redis-server",
-      "--tls-port", "6380",
-      "--tls-cert-file", "/tls/server.crt",
-      "--tls-key-file", "/tls/server-key.key",
-      "--tls-ca-cert-file", "/tls/ca.crt",
-      "--tls-auth-clients", "no",
-    ]
-    volumes:
-      - ./tls:/tls
-    ports:
-      - 6379:6379
-      - 6380:6380
+    build: .