#!/bin/sh
set -o errexit
if [ "$1" = "/usr/bin/ss-server" ]; then
if [ -f "$PASSWORD_FILE" ]; then
PASSWORD="$(cat "$PASSWORD_FILE")"
fi
if [ -f "/var/run/secrets/$PASSWORD_SECRET" ]; then
PASSWORD=$(cat "/var/run/secrets/$PASSWORD_SECRET")
ARGS="-s $SERVER_HOST -p $SERVER_PORT -k $PASSWORD \
-m $METHOD -t $TIMEOUT -u $DNS --fast-open --reuse-port \
--plugin $PLUGIN --plugin-opts $PLUGIN_OPTS $ARGS"
conn_uri="$(printf 'ss://%s@%s:%s?plugin=%s#%s' \
"$(printf '%s:%s' "$METHOD" "$PASSWORD" | base64 -w 0 | tr -d =)" \
"$SERVER_IP" "$SERVER_PORT" "${PLUGIN##*/}" "$(hostname -f)")"
printf '\nCONNECTION URI:\n\n%s\n\n' "$conn_uri"
echo "$conn_uri" | qrencode -t ANSIUTF8
printf '\n\n'
# shellcheck disable=SC2086
exec "$@" $ARGS