FROM debian:bookworm-slim

ENV DEBIAN_FRONTEND=noninteractive \
    TZ=UTC

RUN apt-get update \
 && apt-get install -y --no-install-recommends ca-certificates tor obfs4proxy netcat-openbsd \
 && rm -rf /var/lib/apt/lists/*

RUN mkdir -p /etc/tor

COPY torrc /etc/tor/torrc

RUN mkdir -p /var/lib/tor /var/log/tor \
 && chown -R debian-tor:debian-tor /var/lib/tor /var/log/tor /etc/tor

EXPOSE 9050 9051

HEALTHCHECK --interval=30s --timeout=5s --retries=3 CMD nc -z 127.0.0.1 9050 || exit 1

USER debian-tor

CMD ["tor", "-f", "/etc/tor/torrc"]