From b1b29603622451f677f61be9300987ee3e79a2ff Mon Sep 17 00:00:00 2001
From: mo khan <mo@mokhan.ca>
Date: Sun, 11 May 2025 20:39:23 -0600
Subject: chore: export OAUTH_CLIENT_SECRET as HMAC_SESSION_SECRET because I
 cannot change secrets in vault

---
 start.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/start.sh b/start.sh
index 49f3985..f0d0a0d 100644
--- a/start.sh
+++ b/start.sh
@@ -17,5 +17,9 @@ if [ "$oidc_scheme" = "http" ]; then
   yaml=$(echo "$yaml" | sed -e "s/port_value: 443/port_value: $oidc_port/")
 fi
 
+if [ -z "$HMAC_SESSION_SECRET" ]; then
+  export HMAC_SESSION_SECRET="$OAUTH_CLIENT_SECRET"
+fi
+
 echo "[$(date "+%H:%M:%S")] ==> Starting…"
 /usr/local/bin/sparkled & /usr/local/bin/envoy --config-yaml "$yaml" --log-level warn --component-log-level oauth2:trace
-- 
cgit v1.2.3