#!/bin/sh
set -e

# Caption Local takes its shared service token from CAPTION_API_KEY only.
if [ -f /run/secrets/stt_api_key ]; then
    export CAPTION_API_KEY="$(cat /run/secrets/stt_api_key)"
fi

# Let the caption.ninja pages on $DOMAIN call this service, plus any extras.
# Its own page on $STT_DOMAIN must be listed too: Traefik rewrites Host to
# localhost, so the app no longer sees that page as same-origin.
origins="https://${DOMAIN},https://${STT_DOMAIN}"
[ -n "$STT_EXTRA_ORIGINS" ] && origins="${origins},${STT_EXTRA_ORIGINS}"
export CAPTION_ALLOWED_ORIGINS="$origins"

# Relay auto-fill: the capture page fetches these from /relay-config (behind the
# service token). "source" shares only the capture room's tokens; "all" also
# shares the editor output tokens, letting service-token holders publish to the
# audience room without review; "off" disables it.
secret() { cat "/run/secrets/$1"; }
case "${RELAY_AUTOFILL:-source}" in
    source|all)
        export RELAY_ADDRESS="wss://${DOMAIN}/relay" RELAY_SITE="https://${DOMAIN}/"
        export RELAY_SOURCE_WRITE="$(secret src_write)" RELAY_SOURCE_READ="$(secret src_read)"
        if [ "$RELAY_AUTOFILL" = "all" ]; then
            export RELAY_OUTPUT_WRITE="$(secret out_write)" RELAY_OUTPUT_READ="$(secret out_read)"
        fi
        ;;
esac

exec python server.py --host 0.0.0.0 "$@"