#!/bin/sh

{% if consul_vault_agent.vault_address is defined and consul_vault_agent.pki.enabled %}
if [ -f /run/consul/vault_token ]; then
  exec env VAULT_TOKEN=$(vault unwrap -field=token $(jq -r '.token' /run/consul/vault_token)) \
    /usr/local/bin/consul \
      agent \
      -config-dir={{ consul_root_dir }}/etc/ \
      -pid-file /run/consul/consul_agent.pid
else
  echo "Consul service failed due to missing Vault token"
  exit 1
fi
{% else %}
exec /usr/local/bin/consul \
  agent \
  -config-dir={{ consul_root_dir }}/etc/ \
  -pid-file /run/consul/consul_agent.pid
{% endif %}