diff --git a/Dockerfile b/Dockerfile
index 2140df9..a3d1843 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,16 +1,26 @@
-FROM debian:13@sha256:0d01188e8dd0ac63bf155900fad49279131a876a1ea7fac917c62e87ccb2732d
+FROM debian:13@sha256:0d01188e8dd0ac63bf155900fad49279131a876a1ea7fac917c62e87ccb2732d AS builder
 
-RUN apt-get update
-RUN apt-get install -y supervisor iproute2 iptables gettext-base
+ARG DEBIAN_FRONTEND=noninteractive
 
-RUN apt-get install -y build-essential git
-RUN git clone https://github.com/Raraph84/dhclient-orange-patched /tmp/dhclient-orange-patched
-RUN cd /tmp/dhclient-orange-patched && ./configure && make && make install
-RUN cp /tmp/dhclient-orange-patched/client/scripts/linux /sbin/dhclient-script && chmod +x /sbin/dhclient-script
-RUN mkdir -p /var/lib/dhcp /etc/dhclient-enter-hooks.d /etc/dhclient-exit-hooks.d
-RUN rm -rf /tmp/dhclient-orange-patched
-RUN apt-get remove -y build-essential git && apt-get autoremove -y && apt-get clean
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends build-essential git ca-certificates && \
+    update-ca-certificates && \
+    git clone --depth 1 https://github.com/Raraph84/dhclient-orange-patched /tmp/dhclient-orange-patched && \
+    cd /tmp/dhclient-orange-patched && \
+    ./configure && make -j$(( $(nproc) + 1 )) && make install
 
+FROM debian:13-slim@sha256:e711a7b30ec1261130d0a121050b4ed81d7fb28aeabcf4ea0c7876d4e9f5aca2
+
+ARG DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update && \
+    apt-get install --no-install-recommends -y supervisor iproute2 iptables gettext-base && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/* && \
+    mkdir -p /var/lib/dhcp /etc/dhclient-enter-hooks.d /etc/dhclient-exit-hooks.d
+
+COPY --from=builder /tmp/dhclient-orange-patched/client/scripts/linux /sbin/dhclient-script
+COPY --from=builder /usr/local/sbin/dhclient /usr/local/sbin/dhclient
 COPY supervisord.conf /etc/supervisor/conf.d/supervisord.conf
 COPY init.sh /usr/local/bin/init.sh
 COPY up-fiber.sh /usr/local/bin/up-fiber.sh
@@ -20,11 +30,13 @@ COPY dhclient-orange-v6.conf.template /etc/dhcp/dhclient-orange-v6.conf.template
 COPY no-dns-dhcp-enter-hook.sh /etc/dhclient-enter-hooks.d/no-dns
 COPY ipv6-dhcp-exit-hook.sh /etc/dhclient-exit-hooks.d/setup-ipv6
 
-RUN chmod +x /usr/local/bin/init.sh
-RUN chmod +x /etc/dhcp/dhclient-orange-generator.sh
-RUN chmod +x /usr/local/bin/up-fiber.sh
-RUN chmod +x /etc/dhclient-enter-hooks.d/no-dns
-RUN chmod +x /etc/dhclient-exit-hooks.d/setup-ipv6
+RUN chmod +x /usr/local/bin/init.sh \
+    /etc/dhcp/dhclient-orange-generator.sh \
+    /usr/local/bin/up-fiber.sh \
+    /etc/dhclient-enter-hooks.d/no-dns \
+    /etc/dhclient-exit-hooks.d/setup-ipv6 \
+    /sbin/dhclient-script \
+    /usr/local/sbin/dhclient
 
 ENV LAN_INTERFACE=eth0
 ENV WAN_INTERFACE=eth1