From d10955367220cb703349ce12109cfc62a7aae66c Mon Sep 17 00:00:00 2001
From: Platon47 <64787001+Platon47@users.noreply.github.com>
Date: Sun, 15 Mar 2026 07:51:41 +0300
Subject: [PATCH] fix: update Dockerfile.dev - pin corepack, add nftables,
 remove DEBUG env

Updated Node.js base image and pinned corepack version for reproducibility. Removed redundant iptables legacy setup commands.
---
 Dockerfile.dev | 21 ++++++++++++---------
 1 file changed, 12 insertions(+), 9 deletions(-)

diff --git a/Dockerfile.dev b/Dockerfile.dev
index 5d3fab12..857114b6 100644
--- a/Dockerfile.dev
+++ b/Dockerfile.dev
@@ -1,8 +1,8 @@
-FROM docker.io/library/node:krypton-alpine
+FROM docker.io/library/node:jod-alpine
 WORKDIR /app
 
-# update corepack
-RUN npm install --global corepack@latest
+# update corepack (pinned version for reproducible builds)
+RUN npm install --global corepack@0.34.4
 # Install pnpm
 RUN corepack enable pnpm
 
@@ -14,17 +14,20 @@ RUN apk add --no-cache \
     dumb-init \
     iptables \
     ip6tables \
+    nftables \
     kmod \
     iptables-legacy \
     wireguard-go \
-    wireguard-tools
-
-# Use iptables-legacy
-RUN update-alternatives --install /usr/sbin/iptables iptables /usr/sbin/iptables-legacy 10 --slave /usr/sbin/iptables-restore iptables-restore /usr/sbin/iptables-legacy-restore --slave /usr/sbin/iptables-save iptables-save /usr/sbin/iptables-legacy-save
-RUN update-alternatives --install /usr/sbin/ip6tables ip6tables /usr/sbin/ip6tables-legacy 10 --slave /usr/sbin/ip6tables-restore ip6tables-restore /usr/sbin/ip6tables-legacy-restore --slave /usr/sbin/ip6tables-save ip6tables-save /usr/sbin/ip6tables-legacy-save
+    wireguard-tools && \
+    update-alternatives --install /usr/sbin/iptables iptables /usr/sbin/iptables-legacy 10 \
+    --slave /usr/sbin/iptables-restore iptables-restore /usr/sbin/iptables-legacy-restore \
+    --slave /usr/sbin/iptables-save iptables-save /usr/sbin/iptables-legacy-save && \
+    update-alternatives --install /usr/sbin/ip6tables ip6tables /usr/sbin/ip6tables-legacy 10 \
+    --slave /usr/sbin/ip6tables-restore ip6tables-restore /usr/sbin/ip6tables-legacy-restore \
+    --slave /usr/sbin/ip6tables-save ip6tables-save /usr/sbin/ip6tables-legacy-save
 
 # Set Environment
-ENV DEBUG=Server,WireGuard,Database,CMD
+# NOTE: DEBUG is intentionally not set here; pass via -e DEBUG=... at runtime if needed
 ENV PORT=51821
 ENV HOST=0.0.0.0
 ENV INSECURE=true