Dockerfile

FROM alpine:3.15

RUN apk add --no-cache \
    nftables \
    ip6tables \
    wireguard-tools

RUN rm /sbin/iptables /sbin/ip6tables
RUN ln -s /sbin/ip6tables-nft /sbin/ip6tables
RUN ln -s /sbin/iptables-nft /sbin/iptables

COPY entrypoint.sh /entrypoint.sh
VOLUME ["/wireguard.conf"]
CMD ["/entrypoint.sh"]