# Dummy "app" container for the PoC. Not a real application - proves that
# both the shared DB_PASSWORD and its own APP_PASSWORD secret reach it
# correctly, by logging (masked) evidence on startup, then staying up.
FROM alpine:3.20

CMD ["sh", "-c", "for v in DB_PASSWORD APP_PASSWORD; do val=$(eval echo \\$$v); if [ -n \"$val\" ]; then echo \"$v: received (redacted)\"; else echo \"$v: MISSING\"; fi; done; sleep infinity"]