Build local product stack with Vault-managed secrets (#42)

dev/start-service.sh

@@ -0,0 +1,14 @@
+#!/bin/sh
+set -eu
+umask 077
+printf '%s\n' "$TLS_CA" > /run/sxchnge/ca.pem
+unset TLS_CA
+if [ "$SXCHNGE_SERVICE" = notifications ]; then
+    printf '%s\n' "$TLS_CERT" > /run/sxchnge/server.crt
+    printf '%s\n' "$TLS_KEY" > /run/sxchnge/server.key
+    printf '%s\n' "$EMAIL_CONFIG" > /run/sxchnge/email.yml
+    unset TLS_CERT TLS_KEY EMAIL_CONFIG
+    cat /etc/sxchnge/notifications.yml /run/sxchnge/email.yml > /run/sxchnge/config.yml
+    exec service -config.file=/run/sxchnge/config.yml
+fi
+exec service -config.file=/etc/sxchnge/bff.yml