#!/bin/bash
set -euo pipefail

config_dir=/etc/wireshield
key_file="$config_dir/api.env"

install -d -m 700 "$config_dir"
if [[ ! -s "$key_file" ]]; then
    umask 077
    printf 'HNE_API_KEY=%s\n' "$(openssl rand -hex 32)" > "$key_file"
fi
chmod 600 "$key_file"
