diff --git a/docker/realtime.Dockerfile b/docker/realtime.Dockerfile
index d5ebaffec5..01994521e0 100644
--- a/docker/realtime.Dockerfile
+++ b/docker/realtime.Dockerfile
@@ -18,9 +18,10 @@ COPY packages/testing/package.json ./packages/testing/package.json
 COPY packages/logger/package.json ./packages/logger/package.json
 COPY packages/tsconfig/package.json ./packages/tsconfig/package.json
 
-# Install dependencies with cache mount for faster builds
+# Install dependencies with hoisted layout for Docker compatibility
+# Using --linker=hoisted to avoid .bun directory symlinks that don't copy between stages
 RUN --mount=type=cache,id=bun-cache,target=/root/.bun/install/cache \
-    bun install --omit=dev --ignore-scripts
+    bun install --omit=dev --ignore-scripts --linker=hoisted
 
 # ========================================
 # Builder Stage: Prepare source code
diff --git a/helm/sim/templates/networkpolicy.yaml b/helm/sim/templates/networkpolicy.yaml
index deac5a5dba..7ef8697417 100644
--- a/helm/sim/templates/networkpolicy.yaml
+++ b/helm/sim/templates/networkpolicy.yaml
@@ -141,6 +141,10 @@ spec:
     ports:
     - protocol: TCP
       port: 443
+  # Allow custom egress rules
+  {{- with .Values.networkPolicy.egress }}
+  {{- toYaml . | nindent 2 }}
+  {{- end }}
 {{- end }}
 
 {{- if .Values.postgresql.enabled }}