#!/bin/bash

set -e
if [ "$(id -u)" -eq '0' ]
then
   USER_ID=${LOCAL_USER_ID:-9001}

   # A non-numeric id breaks useradd/usermod in confusing ways, and uid 0
   # would sail straight through the privilege drop below (`setpriv
   # --reuid=0` keeps the bot root while looking configured) — refuse both
   # up front.
   case $USER_ID in
      ''|*[!0-9]*)
         echo "docker-entrypoint: LOCAL_USER_ID must be a numeric uid, got '$USER_ID'" >&2
         exit 1
         ;;
   esac
   if [ "$USER_ID" -eq 0 ]
   then
      echo "docker-entrypoint: LOCAL_USER_ID=0 would keep the bot root; refusing" >&2
      exit 1
   fi

   # `docker compose restart` / `docker restart` reuse the same container, so
   # the overlay fs keeps the user created on first boot. A second `useradd`
   # then fails with exit code 9, which would trip `set -e` and kill the
   # container on every restart. Create only if missing; align the UID
   # otherwise so LOCAL_USER_ID changes still apply.
   if ! id user > /dev/null 2>&1
   then
      useradd --shell /bin/bash -u "${USER_ID}" -o -c "" -m user > /dev/null 2>&1 || true
   else
      usermod -u "${USER_ID}" -o user > /dev/null 2>&1 || true
   fi
   # Bind-mounted volumes may not support chown; a failure here must not kill
   # the container either.
   chown -R "$(id -u user):$(id -g user)" /app > /dev/null 2>&1 || true

   export HOME=/home/user
   # setpriv (util-linux, present in bookworm-slim) replaces gosu: drop to the
   # target user and exec, keeping the process as PID 1.
   exec setpriv --reuid="$(id -u user)" --regid="$(id -g user)" --init-groups "$@"
fi

exec "$@"