#!/bin/sh
# Toggle HTTP Basic Auth for the whole site from env at container start.
# Runs via nginx:alpine's /docker-entrypoint.d/ hook, before nginx starts.
set -e

if [ -n "$BASIC_AUTH_USER" ] && [ -n "$BASIC_AUTH_PASSWORD" ]; then
  htpasswd -bc /etc/nginx/.htpasswd "$BASIC_AUTH_USER" "$BASIC_AUTH_PASSWORD" >/dev/null 2>&1
  cat > /etc/nginx/auth_enabled.conf <<EOF
auth_basic "photofetch";
auth_basic_user_file /etc/nginx/.htpasswd;
EOF
  echo "[entrypoint] basic auth ENABLED (user: $BASIC_AUTH_USER)"
else
  : > /etc/nginx/auth_enabled.conf
  echo "[entrypoint] basic auth disabled (set BASIC_AUTH_USER + BASIC_AUTH_PASSWORD to enable)"
fi