#!/bin/sh
set -eu

exec /usr/bin/setpriv \
  --reuid sellable-agent-egress-proxy \
  --regid sellable-agent-egress-proxy \
  --clear-groups \
  --no-new-privs \
  --bounding-set=-all \
  --inh-caps=-all \
  --ambient-caps=-all \
  /usr/bin/env -i \
  PATH=/usr/local/bin:/usr/bin:/bin \
  NODE_ENV=production \
  /usr/bin/node /usr/local/lib/sellable-agent/package/bin/sellable-agent-egress-proxy.mjs