#!/bin/bash
# rebreak-backend Staging — startet Nitro mit Infisical-Secrets.
# Pattern analog trucko-backend/start-prod.sh, aber env=staging.
source /etc/environment

if [[ -z "$INFISICAL_CLIENT_ID" || -z "$INFISICAL_CLIENT_SECRET" ]]; then
  echo "❌ INFISICAL_CLIENT_ID / INFISICAL_CLIENT_SECRET nicht gesetzt in /etc/environment" >&2
  exit 1
fi

INFISICAL_TOKEN=$(infisical login \
  --method=universal-auth \
  --client-id="${INFISICAL_CLIENT_ID}" \
  --client-secret="${INFISICAL_CLIENT_SECRET}" \
  --silent --plain 2>/dev/null)

if [[ -z "$INFISICAL_TOKEN" ]]; then
  echo "❌ Infisical login fehlgeschlagen" >&2
  exit 1
fi

export NODE_ENV=production
export NITRO_PORT=3016
export NITRO_HOST=127.0.0.1
export PORT=3016

exec infisical run \
  --projectId="${INFISICAL_PROJECT_ID}" \
  --env=staging \
  --token="$INFISICAL_TOKEN" \
  -- /root/.nvm/versions/node/v24.11.1/bin/node /srv/rebreak-monorepo/backend/.output/server/index.mjs