diff --git a/.github/workflows/publish-tag.yaml b/.github/workflows/publish-tag.yaml
index 3e33a2d..5ceafaa 100644
--- a/.github/workflows/publish-tag.yaml
+++ b/.github/workflows/publish-tag.yaml
@@ -11,12 +11,12 @@ on:
 
 env:
   WERF_STAGED_DOCKERFILE_VERSION: v2
-  # WERF_BUILDAH_MODE: auto
+  WERF_BUILDAH_MODE: auto
 
 jobs:
   build:
     name: build images for tag
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
 
     steps:
       - name: Checkout code
@@ -24,7 +24,13 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: werf/actions/install@v1.2
+      - name: Install werf
+        uses: werf/actions/install@v2
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+        with:
+          platforms: linux/amd64, linux/arm64
 
       - name: Login into ghcr.io
         shell: bash
diff --git a/Dockerfile.openvpn b/Dockerfile.openvpn
index 7b69f1e..e4a86cb 100644
--- a/Dockerfile.openvpn
+++ b/Dockerfile.openvpn
@@ -6,4 +6,4 @@ RUN apk add --update bash openvpn easy-rsa iptables  && \
     rm -rf /tmp/* /var/tmp/* /var/cache/apk/* /var/cache/distfiles/*
 RUN if [ -f "/usr/local/bin/openvpn-user-${TARGETARCH}" ]; then ln -s /usr/local/bin/openvpn-user-${TARGETARCH} /usr/local/bin/openvpn-user; fi
 COPY setup/ /etc/openvpn/setup
-RUN chmod +x /etc/openvpn/setup/configure.sh
\ No newline at end of file
+RUN chmod +x /etc/openvpn/setup/configure.sh
diff --git a/werf.yaml b/werf.yaml
index 1a051b6..387be5f 100644
--- a/werf.yaml
+++ b/werf.yaml
@@ -1,5 +1,11 @@
 project: ovpn-admin
 configVersion: 1
+build:
+  platform:
+  - linux/amd64
+  # TODO(nabokihms): build multiplatform images only for the master branch
+  # - linux/arm64
+  staged: true
 ---
 image: ovpn-admin
 dockerfile: Dockerfile.ovpn-admin