diff --git a/core/rspamd/Dockerfile b/core/rspamd/Dockerfile
index 33174c1a..6ec211c4 100644
--- a/core/rspamd/Dockerfile
+++ b/core/rspamd/Dockerfile
@@ -1,4 +1,4 @@
-ARG DISTRO=alpine:3.14.2
+ARG DISTRO=alpine:3.15
 FROM $DISTRO
 
 ENV TZ Etc/UTC
diff --git a/core/rspamd/conf/headers_group.conf b/core/rspamd/conf/headers_group.conf
new file mode 100644
index 00000000..bae6f02b
--- /dev/null
+++ b/core/rspamd/conf/headers_group.conf
@@ -0,0 +1,7 @@
+symbols = {
+    "RCVD_NO_TLS_LAST" {
+	# see https://github.com/Mailu/Mailu/issues/1705
+        weight = 0.0;
+        description = "Last hop did not use encrypted transports";
+    }
+}
diff --git a/core/rspamd/conf/settings.conf b/core/rspamd/conf/settings.conf
deleted file mode 100644
index 01e9780f..00000000
--- a/core/rspamd/conf/settings.conf
+++ /dev/null
@@ -1,4 +0,0 @@
-apply {
-	# see https://github.com/Mailu/Mailu/issues/1705
-	RCVD_NO_TLS_LAST = 0;
-}