#!/bin/sh
set -eu

environment="${WP_ENVIRONMENT_TYPE:-local}"
case "$environment" in
    local | development | staging) ;;
    production)
        if [ "$MARIADB_USER" = "root" ]; then
            echo "MARIADB_USER must not be root in production." >&2
            exit 1
        fi
        case "$MARIADB_PASSWORD:$MARIADB_ROOT_PASSWORD" in
            *replace-with*)
                echo "MariaDB placeholder passwords are forbidden in production." >&2
                exit 1
                ;;
        esac
        if [ "${#MARIADB_PASSWORD}" -lt 16 ] || [ "${#MARIADB_ROOT_PASSWORD}" -lt 16 ]; then
            echo "MariaDB passwords must contain at least 16 characters in production." >&2
            exit 1
        fi
        ;;
    *)
        echo "WP_ENVIRONMENT_TYPE must be local, development, staging, or production." >&2
        exit 1
        ;;
esac

exec docker-entrypoint.sh "$@"