FROM docker.io/library/debian:bullseye

ARG DEBIAN_FRONTEND=noninteractive
ENV WIREGUARD_INTERFACE=wg0

RUN apt-get update && \
    apt-get install --no-install-recommends -y wireguard-tools nftables procps iproute2 inetutils-ping inetutils-traceroute curl && \
    rm -rf /var/lib/apt/lists /var/cache/apt/archives

# patch wireguard script for running in docker
RUN mv /usr/bin/wg-quick /usr/bin/wg-quick.org && \
    egrep -v 'sysctl -q net.ipv4.conf.all.src_valid_mark=1' /usr/bin/wg-quick.org >/usr/bin/wg-quick && \
    chmod +x /usr/bin/wg-quick
COPY entry-point.sh /entry-point.sh

ENTRYPOINT ["/bin/sh", "/entry-point.sh"]