#!/bin/sh
# cert-sync container start (SPEC §10.5.1): one sync at start, then the daily schedule. A failed first sync keeps
# the container running (the healthcheck reports whether a certificate exists).
/usr/local/bin/sync.sh || true
exec supercronic -quiet /etc/kvitt-cert-sync.crontab