FROM debian:trixie-slim

RUN apt-get update && \
    apt-get install -y --no-install-recommends tor && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*

# Single-step config with foreground mode pre-configured
RUN cat <<EOF > /etc/tor/torrc
SocksPort 0.0.0.0:9050
ControlPort 0
ORPort 0
DirPort 0
TransPort 0
DNSPort 9053
AutomapHostsOnResolve 1
ExitPolicy reject *:*

AvoidDiskWrites 1
MaxCircuitDirtiness 600
NewCircuitPeriod 1800
DisableDebuggerAttachment 1
ReducedConnectionPadding 0
CircuitPadding 1
ReducedCircuitPadding 0
HardwareAccel 0

Log notice stdout
RunAsDaemon 0
EOF

USER debian-tor
CMD ["tor", "-f", "/etc/tor/torrc"]