#!/usr/bin/env bash
set -euo pipefail
[[ $EUID -eq 0 ]] || { echo 'Use sudo townctl ...' >&2; exit 1; }
set -a
source /etc/secret-town/town.env
set +a
cd /opt/secret-town
case "${1:-}" in
  sync|watch) exec .venv/bin/python -m secret_town.cli "$@" ;;
  *) exec runuser -u secret-town --preserve-environment -- .venv/bin/python -m secret_town.cli "$@" ;;
esac
