docker image status restarting(1)

in the log:

2024-11-26T09:39:57.415Z Server Listening on http://0.0.0.0:51821
2024-11-26T09:39:57.419Z WireGuard Loading configuration...
2024-11-26T09:39:57.423Z WireGuard Configuration loaded.
2024-11-26T09:39:57.423Z WireGuard Config saving...
2024-11-26T09:39:57.425Z WireGuard Config saved.
$ wg-quick down wg0
$ wg-quick up wg0
node:internal/errors:857
const err = new Error(message);
^

Error: Command failed: wg-quick up wg0
[#] wireguard-go wg0
┌──────────────────────────────────────────────────────┐
│ │
│ Running wireguard-go is not required because this │
│ kernel has first class support for WireGuard. For │
│ information on installing the kernel module, │
│ please visit: │
│ https://www.wireguard.com/install/ │
│ │
└──────────────────────────────────────────────────────┘
[#]
[#] wg setconf wg0 /dev/fd/63
[#] ip -4 address add 10.8.0.1/24 dev wg0
[#] ip link set mtu 1420 up dev wg0
[#] iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE; iptables -A INPUT -p udp -m udp --dport 51820 -j ACCEPT; iptables -A FORWARD -i wg0 -j ACCEPT; iptables -A FORWARD -o wg0 -j ACCEPT;
iptables v1.8.7 (legacy): can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
[#] ip link delete dev wg0

at ChildProcess.exithandler (node:child_process:402:12)
at ChildProcess.emit (node:events:513:28)
at maybeClose (node:internal/child_process:1100:16)
at Process.ChildProcess._handle.onexit (node:internal/child_process:304:5) {

code: 3,
killed: false,
signal: null,
cmd: 'wg-quick up wg0'
}