#!/bin/sh
set -eu

required_vars="OPNSENSE_HOST OPNSENSE_API_KEY OPNSENSE_API_SECRET"
secure_key_path="/tmp/opnsense_ssh_key"

for name in $required_vars; do
  eval "value=\${$name:-}"
  if [ -z "$value" ]; then
    echo "Missing required environment variable: $name" >&2
    exit 1
  fi
done

if [ -z "${OPNSENSE_VERIFY_SSL:-}" ]; then
  export OPNSENSE_VERIFY_SSL=false
fi

if [ -n "${OPNSENSE_SSH_KEY_PATH:-}" ] && [ -f "${OPNSENSE_SSH_KEY_PATH}" ]; then
  cp "${OPNSENSE_SSH_KEY_PATH}" "$secure_key_path"
  chmod 600 "$secure_key_path"
  export OPNSENSE_SSH_KEY_PATH="$secure_key_path"
fi

exec "$@"