FROM debian:bookworm-slim

RUN apt-get update \
    && apt-get install -y --no-install-recommends ca-certificates curl gnupg iproute2 iptables \
    && mkdir -p /usr/share/keyrings \
    && curl -fsSL https://deb.session.foundation/pub.gpg -o /usr/share/keyrings/session-foundation.gpg \
    && printf 'Types: deb\nURIs: https://deb.session.foundation\nSuites: bookworm\nComponents: main\nSigned-By: /usr/share/keyrings/session-foundation.gpg\n' > /etc/apt/sources.list.d/session.sources \
    && apt-get update \
    && apt-get install -y --no-install-recommends lokinet-bin \
    && mkdir -p /etc/lokinet /var/lib/lokinet \
    && rm -rf /var/lib/apt/lists/*

COPY lokinet.ini /etc/lokinet/lokinet.ini

CMD ["/usr/bin/lokinet", "--config", "/etc/lokinet/lokinet.ini"]