The udp service was not passing the same arguments as the tcp one, this fixes
the missing --syslog flag

iproute2 needs to be explicitly installed, the iptables alternative needs to
iptables-legacy.

We need 2.5 for block-ipv6

use the stretch image, at least until #2 is fixed.

We add the http module so we can get prometheus metrics as well.

We aren't currently running a udp server

We can add type: forking to chaperone, but then we have to deal with pid files etc.

/bin/sh exec