#!/bin/sh
set -eu

echo "== DNS before =="
cat /etc/resolv.conf || true

# Try to set resolv.conf (may be overwritten/blocked by the platform/Docker)
if [ -w /etc/resolv.conf ]; then
  printf "nameserver 1.1.1.1\nnameserver 8.8.8.8\noptions timeout:2 attempts:2\n" > /etc/resolv.conf || true
fi

echo "== DNS after =="
cat /etc/resolv.conf || true

# Quick smoke test (won't fail container start if blocked)
echo "== DNS test =="
getent hosts graph.facebook.com || true

# Drop privileges and run n8n as node
exec su-exec node "$@"