#!/bin/sh
set -eu
# Keep the existing coordinator's secrets/config in the host-owned env file;
# Docker never needs to read or copy it. The process runs as the same numeric
# service user and can therefore read the bind-mounted file.
if [ -r /etc/orchestra/orchestra.env ]; then
  set -a
  . /etc/orchestra/orchestra.env
  set +a
fi
export ORCHESTRA_DATA=/data
export ORCHESTRA_PORT=9145
exec /app/orchestra