| set -eu | |
| umask 077 | |
| # Hugging Face Spaces: /data 是 Persistent Storage 挂载点（未启用时是普通目录） | |
| # 容器以 root 启动，这里确保应用用户 grok2api 对 /data 有写权限 | |
| mkdir -p /data | |
| chown -R grok2api:grok2api /data | |
| if [ ! -f "${GROK2API_CONFIG_SOURCE}" ]; then | |
| echo "missing config: ${GROK2API_CONFIG_SOURCE}" >&2 | |
| echo "mount config.yaml to /run/grok2api/config.yaml" >&2 | |
| exit 1 | |
| fi | |
| cp "${GROK2API_CONFIG_SOURCE}" /app/config.yaml | |
| chown grok2api:grok2api /app/config.yaml | |
| chmod 0600 /app/config.yaml | |
| exec su-exec grok2api:grok2api "$@" | |