FROM debian:trixie-slim

RUN apt-get update && \
    apt-get install -y --no-install-recommends \
        conntrack iproute2 iptables procps tcpdump netcat-openbsd && \
    rm -rf /var/lib/apt/lists/*

COPY entrypoint.sh /usr/local/bin/entrypoint.sh
RUN chmod +x /usr/local/bin/entrypoint.sh

ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]