Tor relay (not an exit node) configured to use ports 6000 and 6001.

Can be executed e.g. like this:

docker run --name tor -p 6000-6001:6000-6001 -d ivantichy/tor

Socks port: 6001 Data (transfer) port: 6000

You should limit access to port 6001 just for your machines using iptables.