commit 134db61c1840bd33be6ab2d8a2fe2dd8a2c3948f
Author: casjay <git-admin@casjaysdev.pro>
Date:   Fri Jun 26 14:10:54 2026 -0400

     🦈🏠🐜❗ Initial Commit ❗🐜🦈🏠

diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..71c00b7
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,17 @@
+# Files to ignore
+# Tell docker to ignore .gitkeep
+.gitkeep
+# Tell docker to ignore .gitignore
+.gitignore
+# Tell docker to ignore node_modules/**
+node_modules/**
+# Tell docker to ignore .node_modules/**
+.node_modules/**
+# Tell docker to ignore **/.gitkeep
+**/.gitkeep
+# Tell docker to ignore **/.gitignore
+**/.gitignore
+# Tell docker to ignore **/node_modules/**
+**/node_modules/**
+# Tell docker to ignore **/.node_modules/**
+**/.node_modules/**
diff --git a/.env.scripts b/.env.scripts
new file mode 100644
index 0000000..c404ea2
--- /dev/null
+++ b/.env.scripts
@@ -0,0 +1,80 @@
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+##@Version           :  202606261156-git
+# @@Author           :  CasjaysDev
+# @@Contact          :  CasjaysDev <docker-admin@casjaysdev.pro>
+# @@License          :  WTFPL
+# @@Copyright        :  Copyright 2026 CasjaysDev
+# @@Created          :  Fri Jun 26 11:56:35 AM EDT 2026
+# @@File             :  .env.scripts
+# @@Description      :  Variables for gen-dockerfile and buildx scripts
+# @@Changelog        :  newScript
+# @@TODO             :  Refactor code
+# @@Other            :  N/A
+# @@Resource         :  N/A
+# @@Terminal App     :  yes
+# @@sudo/root        :  yes
+# @@Template         :  templates/dockerfiles/dotenv.template
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# shellcheck disable=SC1001,SC1003,SC2001,SC2003,SC2016,SC2031,SC2090,SC2115,SC2120,SC2155,SC2199,SC2229,SC2317,SC2329
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# entrypoint Settings
+DOCKER_ENTYPOINT_PORTS_WEB="80"
+DOCKER_ENTYPOINT_PORTS_SRV="${DOCKER_ENTYPOINT_PORTS_SRV}"
+DOCKER_ENTYPOINT_HEALTH_APPS="nginx"
+DOCKER_ENTYPOINT_HEALTH_ENDPOINTS="http://localhost/"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Dockerfile info
+ENV_DOCKERFILE="Dockerfile"
+# ENV_REGISTRY_REPO: Registry repository/image name
+ENV_REGISTRY_REPO="super-productivity"
+ENV_USE_TEMPLATE="alpine"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Maintainer info
+ENV_REGISTRY_ORG="casjaysdevdocker"
+ENV_VENDOR="CasjaysDev"
+ENV_AUTHOR="CasjaysDev"
+ENV_MAINTAINER="CasjaysDev <docker-admin@casjaysdev.pro>"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Repository URLs (Full URLs)
+# ENV_GIT_REPO_URL: Complete Git repository URL for source code
+ENV_GIT_REPO_URL="https://github.com/casjaysdevdocker/super-productivity"
+# ENV_REGISTRY_URL: Registry provider base URL (for example https://docker.io)
+ENV_REGISTRY_URL="https://docker.io"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Push Configuration
+# ENV_REGISTRY_PUSH: Complete push destination derived from registry/org/repo
+ENV_REGISTRY_PUSH="casjaysdevdocker/super-productivity"
+# ENV_IMAGE_TAG: Default tag for the image
+ENV_IMAGE_TAG="latest"
+# ENV_ADD_TAGS: Additional tags, comma-separated (USE_DATE = auto date tag)
+ENV_ADD_TAGS=""
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Additional push destinations (if needed)
+ENV_ADD_IMAGE_PUSH=""
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Pull Configuration
+# ENV_PULL_URL: Source image to pull from (base image)
+ENV_PULL_URL="casjaysdev/alpine"
+# ENV_DISTRO_TAG: Tag for the pull source image
+ENV_DISTRO_TAG="${IMAGE_VERSION}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Env
+SERVICE_PORT="80"
+EXPOSE_PORTS="80"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# IF using a lanuage such as go, php, rust, ruby, etc set the version here.
+LANG_VERSION=""
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Versions
+PHP_VERSION="system"
+NODE_VERSION="system"
+NODE_MANAGER="system"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Default directories
+WWW_ROOT_DIR="/usr/local/share/httpd/default"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+ENV_PACKAGES="nginx jq curl"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# ex: ts=2 sw=2 et filetype=sh
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+
diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..0861c5d
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,86 @@
+# Template generated on Sun May 24 11:58:45 AM EDT 2026 from https://github.com/alexkaratarakis/gitattributes"
+# Common settings that generally should always be used with your language specific settings
+# Auto detect text files and perform LF normalization
+*          text=auto
+# The above will handle all files NOT found below
+# Documents
+*.bibtex   text diff=bibtex
+*.doc      diff=astextplain
+*.DOC      diff=astextplain
+*.docx     diff=astextplain
+*.DOCX     diff=astextplain
+*.dot      diff=astextplain
+*.DOT      diff=astextplain
+*.pdf      diff=astextplain
+*.PDF      diff=astextplain
+*.rtf      diff=astextplain
+*.RTF      diff=astextplain
+*.md       text diff=markdown
+*.mdx      text diff=markdown
+*.tex      text diff=tex
+*.adoc     text
+*.textile  text
+*.mustache text
+*.csv      text eol=crlf
+*.tab      text
+*.tsv      text
+*.txt      text
+*.sql      text
+*.epub     diff=astextplain
+# Graphics
+*.png      binary
+*.jpg      binary
+*.jpeg     binary
+*.gif      binary
+*.tif      binary
+*.tiff     binary
+*.ico      binary
+# SVG treated as text by default.
+*.svg      text
+# If you want to treat it as binary,
+# use the following line instead.
+# *.svg    binary
+*.eps      binary
+# Scripts
+*.bash     text eol=lf
+*.fish     text eol=lf
+*.ksh      text eol=lf
+*.sh       text eol=lf
+*.zsh      text eol=lf
+# These are explicitly windows files and should use crlf
+*.bat      text eol=crlf
+*.cmd      text eol=crlf
+*.ps1      text eol=crlf
+# Serialisation
+*.json     text
+*.toml     text
+*.xml      text
+*.yaml     text
+*.yml      text
+# Archives
+*.7z       binary
+*.bz       binary
+*.bz2      binary
+*.bzip2    binary
+*.gz       binary
+*.lz       binary
+*.lzma     binary
+*.rar      binary
+*.tar      binary
+*.taz      binary
+*.tbz      binary
+*.tbz2     binary
+*.tgz      binary
+*.tlz      binary
+*.txz      binary
+*.xz       binary
+*.Z        binary
+*.zip      binary
+*.zst      binary
+# Text files where line endings should be preserved
+*.patch    -text
+# Exclude files from exporting
+.gitattributes export-ignore
+.gitignore     export-ignore
+.gitkeep       export-ignore
+
diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
new file mode 100644
index 0000000..efef31c
--- /dev/null
+++ b/.gitea/workflows/build.yml
@@ -0,0 +1,86 @@
+name: Build and Push
+
+on:
+  push:
+    branches: [main]
+  schedule:
+    - cron: '0 2 1 * *'
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
+
+      - name: Compute build metadata
+        id: meta
+        run: |
+          echo "build_date=$(date -u +%Y%m%d%H%M)" >> "$GITHUB_OUTPUT"
+          echo "tag_yymm=$(date -u +%y%m)" >> "$GITHUB_OUTPUT"
+          echo "git_commit=${GITHUB_SHA::7}" >> "$GITHUB_OUTPUT"
+          echo "registry_host=$(echo '${{ github.server_url }}' | sed 's|https://||')" >> "$GITHUB_OUTPUT"
+
+      # ── Always: login to Gitea (GITEA_TOKEN is auto-provided) ────────────────
+      - name: Login to Gitea registry
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        with:
+          registry: ${{ steps.meta.outputs.registry_host }}
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITEA_TOKEN }}
+
+      # ── Optional: login to external registry when vars.DOCKER_USERNAME is set ──
+      # vars.DOCKER_REGISTRY defaults to docker.io; set it to push elsewhere.
+      # Login uses vars.DOCKER_USERNAME; secrets.DOCKER_PASSWORD is passed only
+      # via with: and never touches a shell.
+      - name: Login to Docker Hub
+        if: vars.DOCKER_USERNAME != ''
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        with:
+          registry: ${{ vars.DOCKER_REGISTRY || 'docker.io' }}
+          username: ${{ vars.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+      # ── Build once, push to all logged-in registries ─────────────────────────
+      # Image namespace uses vars.DOCKER_ORG when set, falls back to vars.DOCKER_USERNAME.
+      # yymm tag pushed first; latest pushed last so registries show :latest as current.
+      - name: Build and push
+        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: |
+            ${{ steps.meta.outputs.registry_host }}/${{ github.repository }}:${{ steps.meta.outputs.tag_yymm }}
+            ${{ vars.DOCKER_USERNAME != '' && format('{0}/{1}/{2}:{3}', vars.DOCKER_REGISTRY || 'docker.io', vars.DOCKER_ORG || vars.DOCKER_USERNAME, github.event.repository.name, steps.meta.outputs.tag_yymm) || '' }}
+            ${{ steps.meta.outputs.registry_host }}/${{ github.repository }}:latest
+            ${{ vars.DOCKER_USERNAME != '' && format('{0}/{1}/{2}:{3}', vars.DOCKER_REGISTRY || 'docker.io', vars.DOCKER_ORG || vars.DOCKER_USERNAME, github.event.repository.name, 'latest') || '' }}
+          build-args: |
+            BUILD_DATE=${{ steps.meta.outputs.build_date }}
+            GIT_COMMIT=${{ steps.meta.outputs.git_commit }}
+            BUILD_VERSION=${{ steps.meta.outputs.tag_yymm }}
+          annotations: |
+            org.opencontainers.image.created=${{ steps.meta.outputs.build_date }}
+            org.opencontainers.image.version=latest
+            org.opencontainers.image.revision=${{ steps.meta.outputs.git_commit }}
+            org.opencontainers.image.title=${{ github.event.repository.name }}
+            org.opencontainers.image.description=Containerized version of ${{ github.event.repository.name }}
+            org.opencontainers.image.vendor=CasjaysDev
+            org.opencontainers.image.authors=CasjaysDev
+            org.opencontainers.image.licenses=WTFPL
+            org.opencontainers.image.url=${{ github.server_url }}/${{ github.repository }}
+            org.opencontainers.image.source=${{ github.server_url }}/${{ github.repository }}
+            org.opencontainers.image.documentation=${{ github.server_url }}/${{ github.repository }}
+            org.opencontainers.image.vcs-type=Git
+            com.github.containers.toolbox=false
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..8d16ea5
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,242 @@
+# gitignore created on 06/26/26 at 11:56
+# Disable reminder in prompt
+ignoredirmessage
+
+# ignore .build_failed files
+**/.build_failed*
+
+# OS generated files
+
+### Linux ###
+# Backup files left by editors
+*~
+
+# Temporary files left when a process holds an open handle to a deleted file
+.fuse_hidden*
+
+# KDE directory preferences
+.directory
+
+# Linux trash folder which might appear on any partition or disk
+.Trash-*
+
+# NFS stale file handles
+.nfs*
+
+### macOS ###
+.DS_Store
+.DS_Store?
+.AppleDouble
+.LSOverride
+
+# Thumbnails
+._*
+
+# Files that might appear in the root of a volume
+.DocumentRevisions-V100
+.fseventsd
+.Spotlight-V100
+.TemporaryItems
+.Trashes
+.VolumeIcon.icns
+.com.apple.timemachine.donotpresent
+
+# Directories potentially created on remote AFP share
+.AppleDB
+.AppleDesktop
+Network Trash Folder
+Temporary Items
+.apdisk
+
+# iCloud generated files
+*.icloud
+
+### Windows ###
+Thumbs.db
+Thumbs.db:encryptable
+ehthumbs.db
+ehthumbs_vista.db
+
+# Crash dump files
+*.stackdump
+
+# Core dumps (Linux/macOS)
+core
+core.*
+vgcore.*
+
+# Folder config file
+[Dd]esktop.ini
+
+# Recycle Bin used on file shares
+$RECYCLE.BIN/
+
+# Windows Installer files
+*.cab
+*.msi
+*.msix
+*.msm
+*.msp
+
+# Windows shortcuts
+*.lnk
+
+### Editors ###
+# Visual Studio Code
+.vscode/
+!.vscode/extensions.json
+
+# JetBrains IDEs (IntelliJ, GoLand, RustRover, PyCharm, etc.)
+.idea/
+*.iml
+*.iws
+*.ipr
+
+# Vim / Neovim
+*.swp
+*.swo
+.netrwhist
+Session.vim
+.vim/
+
+# Sublime Text
+*.sublime-workspace
+*.sublime-project
+
+# Eclipse / generic Java IDEs
+.project
+.classpath
+.factorypath
+.settings/
+
+### AI tool local configs (personal settings, never commit) ###
+# Claude Code
+.claude/settings.local.json
+.claude/*.lock
+
+# Cursor
+.cursor/
+.cursorignore
+.cursorindexingignore
+
+# GitHub Copilot
+.copilot/
+
+# Codeium
+.codeium/
+
+# Tabnine
+.tabnine/
+
+# Aider
+.aider/
+.aider.conf.yml
+.aider.model.settings.yml
+.aiderignore
+
+# General AI assistant local state
+.ai/
+.ai.local/
+
+### Environment and secrets ###
+# Local env overrides — never commit credentials
+.env
+.env.local
+.env.*.local
+
+# Private keys and certificates
+*.pem
+*.key
+*.p12
+*.pfx
+
+### Build artifacts ###
+build/
+dist/
+out/
+
+# Rust
+target/
+
+# C / C++ / compiled objects
+*.o
+*.a
+*.so
+*.dylib
+*.dll
+*.exe
+
+### Dependency directories ###
+# Node
+node_modules/
+
+# Go (vendored deps are sometimes committed intentionally, so gitignore only the cache)
+# vendor/
+
+# Python
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+.Python
+*.egg-info/
+.eggs/
+.venv/
+venv/
+env/
+
+### Logs ###
+*.log
+logs/
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+### Temporary and cache ###
+tmp/
+.tmp/
+*.tmp
+*.cache
+.cache/
+
+### Test and coverage ###
+coverage/
+.coverage
+*.cover
+*.coverprofile
+htmlcov/
+.nyc_output/
+.pytest_cache/
+.tox/
+
+### Misc — always allow ###
+!*/README*
+!inc/main.bash
+
+### Project-specific patterns ###
+# ignore commit message files
+**/.gitcommit
+
+# ignore backup files
+**/*.bak
+
+# ignore .no_push files
+**/.no_push
+**/.nopush
+
+# ignore .no_git files
+**/.no_git
+
+# ignore .installed marker files
+**/.installed
+
+# ignore work-in-progress rewrite/refactor scripts
+**/*.rewrite.sh
+**/*.refactor.sh
+
+# ignore local override scripts and configs
+**/*.local.sh
+**/*.local.conf
+**/*.local.yaml
+**/*.local.yml
+
diff --git a/AI.md b/AI.md
new file mode 100644
index 0000000..6c1e27b
--- /dev/null
+++ b/AI.md
@@ -0,0 +1,844 @@
+# Docker Container Repository Specification
+
+## Repository Overview
+
+**Repository:** casjaysdevdocker  
+**Maintainer:** CasjaysDev <docker-admin@casjaysdev.pro>  
+**License:** WTFPL / MIT  
+**Purpose:** Collection of containerized applications using standardized Alpine-based templates
+
+---
+
+## Repository Structure
+
+This repository contains multiple Docker container projects organised as subdirectories. Each project follows a consistent structure and naming convention.
+
+### Directory Layout
+
+```
+casjaysdevdocker/
+├── ampache/           # Media streaming server
+├── apprise/           # Notification service
+├── aria2/             # Download manager
+├── bind/              # DNS server
+├── bun/               # JavaScript runtime
+├── caddy/             # Web server
+├── code/              # VS Code server
+├── couchdb/           # NoSQL database
+├── ddns/              # Dynamic DNS client
+├── deno/              # JavaScript runtime
+├── docker/            # Docker-in-Docker
+├── enclosed/          # Encrypted note sharing
+├── forgejo/           # Git forge
+├── gitea/             # Git service
+├── gotify/            # Push notification server
+├── i2pd/              # I2P router
+├── icecast/           # Audio streaming
+├── ifconfig/          # IP info service
+├── jekyll/            # Static site generator
+├── lighttpd/          # Web server
+├── mailman/           # Mailing list manager
+├── mariadb/           # SQL database
+├── mongodb/           # NoSQL database
+├── mpd/               # Music player daemon
+├── mysql/             # SQL database
+├── navidrome/         # Music streaming
+├── neovim/            # Text editor
+├── nextcloud/         # Cloud storage
+├── nginx/             # Web server
+├── nodejs/            # Node.js runtime
+├── ntfy/              # Notification service
+├── ollama/            # LLM runtime
+├── opencloud/         # Cloud platform
+├── opengist/          # Gist clone
+├── pastebin/          # Pastebin service
+├── php/               # PHP runtime
+├── podman/            # Container runtime
+├── postfix/           # Mail server
+├── postgres/          # SQL database
+├── proftpd/           # FTP server
+├── python/            # Python runtime
+├── redis/             # In-memory database
+├── soft-serve/        # Git server
+├── sqlite/            # SQL database
+├── ssl-ca/            # SSL certificate authority
+├── tftpd/             # TFTP server
+├── tor/               # Tor relay
+├── traefik/           # Reverse proxy
+├── transmission/      # BitTorrent client
+├── valkey/            # Redis fork
+├── vim/               # Text editor
+├── webmin/            # Web admin interface
+├── wordpress/         # CMS platform
+├── wttr/              # Weather service
+├── xfce4/             # Desktop environment
+├── ympd/              # MPD web client
+├── youtube-dl/        # Video downloader
+└── tools/             # Shared tools & scripts
+```
+
+---
+
+## Standard Project Structure
+
+Each project directory contains:
+
+```
+project-name/
+├── .dockerignore              # [generated] Docker build exclusions
+├── .env.scripts               # [generated] Environment variables for gen-dockerfile
+├── .git/                      # Git repository
+├── .gitattributes             # [generated] Git attributes
+├── .gitea/workflows/
+│   ├── docker.yaml            # [hand-crafted] Legacy CI workflow — do not overwrite
+│   └── build.yml              # [generated] by gen-dockerfile actions — regenerate freely
+├── .gitignore                 # [generated] Git ignore patterns
+├── Dockerfile                 # [generated] Container build definition
+├── LICENSE.md                 # License information
+├── README.md                  # [generated] Project documentation
+└── rootfs/                    # Container filesystem overlay
+    ├── root/docker/setup/     # [generated] Build-time setup scripts
+    │   ├── 00-init.sh
+    │   ├── 01-system.sh
+    │   ├── 02-packages.sh
+    │   ├── 03-files.sh
+    │   ├── 04-users.sh
+    │   ├── 05-custom.sh
+    │   ├── 06-post.sh
+    │   └── 07-cleanup.sh
+    └── usr/local/
+        ├── bin/
+        │   ├── entrypoint.sh      # [generated] Container entrypoint
+        │   └── pkmgr              # [generated] Package manager wrapper
+        ├── etc/docker/
+        │   ├── functions/
+        │   │   └── entrypoint.sh  # [generated] Entrypoint functions
+        │   └── init.d/            # [hand-crafted] Runtime init scripts (one per service)
+        └── share/template-files/  # [hand-crafted] Config/data templates
+            ├── config/
+            ├── data/
+            └── defaults/
+```
+
+**`[generated]`** — safe to overwrite with `gen-dockerfile --update`; changes will be lost on next regeneration.  
+**`[hand-crafted]`** — must not be overwritten by gen-dockerfile; customised per container.
+
+---
+
+## gen-dockerfile Tool
+
+All containers are built using the **gen-dockerfile** tool. It generates standardised Dockerfiles, `.env.scripts`, workflow YAML, `pkmgr` scripts, and `rootfs/` scaffolding.
+
+### Usage
+
+```bash
+gen-dockerfile [options] [template] [Dockerfile]
+gen-dockerfile --dir ./myapp alpine
+gen-dockerfile --dir ./myapp --nginx --tag 1.25
+gen-dockerfile --dir ./existing-project --update
+gen-dockerfile --dir ./myapp actions
+```
+
+### Templates (positional argument or `--template`)
+
+| Template | Description | Pull source (build stage) |
+|----------|-------------|--------------------------|
+| `alpine` | Alpine Linux (default) | `alpine` (Docker Hub official) |
+| `arch` / `archlinux` | Arch Linux ARM | `menci/archlinuxarm` |
+| `debian` | Debian | `debian` |
+| `ubuntu` | Ubuntu | `ubuntu` |
+| `rhel` / `almalinux` / `rockylinux` / `centos` / `oraclelinux` / `redhat` | AlmaLinux/RHEL family | `almalinux` |
+| `web` | Adds `xorg` + `x11-apps` packages on top of the build stage; scratch final image | `casjaysdev/web` (exists) — override via `ENV_PULL_URL` |
+| `xorg` | Adds `xorg` + `x11-apps` packages on top of the build stage; scratch final image | `casjaysdev/xorg` (**does not exist**) — must set `ENV_PULL_URL` |
+| `scratch` | Scratch final image only (pair with any build template) | N/A |
+
+> **Note:** The pull source is the base image pulled for the **build stage**. All templates produce a `FROM scratch` final stage. For standard distros (`alpine`, `debian`, `ubuntu`, `rhel`, `arch`), the pull source is the official upstream image. For `web` and `xorg`, gen-dockerfile defaults to `casjaysdev/<template>` when no `ENV_PULL_URL` is set — `casjaysdev/web` exists on Docker Hub; `casjaysdev/xorg` does not. Always set `ENV_PULL_URL` in `.env.scripts` for `xorg` projects.
+
+### CLI Flags
+
+| Flag | Description |
+|------|-------------|
+| `--dir <path>` | Working directory (default: `$PWD`) |
+| `--template <name>` | Override template type |
+| `--registry <url>` | Registry provider URL (e.g. `https://docker.io`) |
+| `--org <[git\|reg:]name>` | Override org/namespace — prefix `git:` or `reg:` to scope to one system, bare value sets both |
+| `--user <[git\|reg:]name>` | Alias for `--org` |
+| `--repo <[git\|reg:]name>` | Override repo/image name — same scope prefix rules |
+| `--tag <version>` | Image version tag (default: `latest`) |
+| `--add-tags <tags>` | Comma-separated additional tags (or `USE_DATE` for auto date tag) |
+| `--distro-name <image>` | Base image pull URL (overrides `ENV_PULL_URL`) |
+| `--distro-version <tag>` | Base image tag (overrides `ENV_DISTRO_TAG`) |
+| `--startup` | Generate an init.d service script at `rootfs/usr/local/etc/docker/init.d/<name>` via `gen-script other start-service`; takes the script filename as a positional argument (e.g. `gen-dockerfile --startup 01-myapp.sh`) |
+| `--nogit` | Skip `git init` in the new project dir |
+| `--dockerfile` | Regenerate Dockerfile only — skip other files |
+| `--update` | Re-run gen-dockerfile on an existing project to regenerate files |
+| `--init` | Init mode |
+| `--x11` | Enable X11/xorg support |
+| `--ports <ports>` | Additional EXPOSE ports |
+| `--pkmgr` | Generate `pkmgr` script only and exit |
+| `--apache` | Add Apache2 packages + setup |
+| `--nginx` | Add nginx packages + setup |
+| `--mysql` | Add MariaDB packages + setup (`--mariadb` is handled in the case block but not registered in getopt — use `--mysql`) |
+| `--postgres` | Add PostgreSQL packages + setup |
+| `--php` | Add PHP packages + setup |
+| `--application <name>` | Add a templatemgr application install step |
+| `--alpine` / `--almalinux` / `--archlinux` / `--debian` / `--ubuntu` | Shortcut distro flags |
+| `--force` | Overwrite existing files without prompting |
+| `--silent` | Suppress non-error output |
+| `--debug` | Enable `set -x` tracing |
+| `--no-color` | Disable colour output |
+
+### Special Subcommands
+
+```bash
+gen-dockerfile --dir ./myapp actions
+```
+
+Creates `.gitea/workflows/build.yml` (or `build.$version.yml` for versioned tags) from the existing `Dockerfile`. The canonical reference for the legacy hand-written style is `.gitea/workflows/docker.yaml` in the `casjaysdevdocker/.github` org-level repository (`casjaysdevdocker/.github/example/`); `gen-dockerfile actions` generates the modern `build.yml` — use that for all new containers.
+
+### Template Resolution
+
+Templates are loaded from the first match:
+
+1. `$GEN_DOCKERFILE_CONFIG_DIR/templates/<name>.template` (user override)
+2. `/usr/local/share/CasjaysDev/scripts/templates/dockerfiles/<name>.template` (installed; also `$CASJAYSDEVDIR/templates/dockerfiles/` when running from a dev checkout)
+
+`template_options.source` is sourced after `__set_variables` runs, allowing template-specific variable overrides.
+
+---
+
+## `.env.scripts` File
+
+Generated at project root; sourced by gen-dockerfile and by the CI workflow at build time.
+
+### Current Variable Names
+
+```bash
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+##@Version           :  202601291955-git
+# ...
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+
+# Entrypoint Settings
+DOCKER_ENTYPOINT_PORTS_WEB="${DOCKER_ENTYPOINT_PORTS_WEB}"
+DOCKER_ENTYPOINT_PORTS_SRV="${DOCKER_ENTYPOINT_PORTS_SRV}"
+DOCKER_ENTYPOINT_HEALTH_APPS="$DOCKER_ENTYPOINT_HEALTH_APPS"
+DOCKER_ENTYPOINT_HEALTH_ENDPOINTS="$DOCKER_ENTYPOINT_HEALTH_ENDPOINTS"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Dockerfile info
+ENV_DOCKERFILE="Dockerfile"
+# ENV_REGISTRY_REPO: Registry repository/image name
+ENV_REGISTRY_REPO="myapp"
+ENV_USE_TEMPLATE="alpine"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Maintainer info
+ENV_REGISTRY_ORG="casjaysdevdocker"
+ENV_VENDOR="CasjaysDev"
+ENV_AUTHOR="CasjaysDev"
+ENV_MAINTAINER="CasjaysDev <docker-admin@casjaysdev.pro>"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Repository URLs (Full URLs)
+# ENV_GIT_REPO_URL: Complete Git repository URL for source code
+ENV_GIT_REPO_URL="https://github.com/casjaysdevdocker/myapp"
+# ENV_REGISTRY_URL: Registry provider base URL
+ENV_REGISTRY_URL="https://docker.io"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Push Configuration
+# ENV_REGISTRY_PUSH: Complete push destination (registry/org/repo)
+ENV_REGISTRY_PUSH="casjaysdevdocker/myapp"
+# ENV_IMAGE_TAG: Default tag for the image
+ENV_IMAGE_TAG="latest"
+# ENV_ADD_TAGS: Additional tags, comma-separated (USE_DATE = auto date tag)
+ENV_ADD_TAGS=""
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Additional push destinations (if needed)
+ENV_ADD_IMAGE_PUSH=""
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Pull Configuration
+# ENV_PULL_URL: Source image to pull from (base image)
+ENV_PULL_URL="alpine"
+# ENV_DISTRO_TAG: Tag for the pull source image
+ENV_DISTRO_TAG="${IMAGE_VERSION}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Port exposure
+SERVICE_PORT=""
+EXPOSE_PORTS=""
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Language runtime version (go, php, rust, ruby, etc)
+LANG_VERSION=""
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Runtime versions
+PHP_VERSION="system"
+NODE_VERSION="system"
+NODE_MANAGER="system"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Default directories
+WWW_ROOT_DIR="/usr/local/share/httpd/default"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+ENV_PACKAGES=""
+```
+
+### Variable Reference
+
+| Variable | Purpose |
+|----------|---------|
+| `ENV_REGISTRY_REPO` | Image name in the registry |
+| `ENV_REGISTRY_ORG` | Organisation/namespace in the registry |
+| `ENV_REGISTRY_URL` | Registry base URL (e.g. `https://docker.io`) |
+| `ENV_REGISTRY_PUSH` | Full push path `org/repo` (registry host prepended if not `docker.io`) |
+| `ENV_ADD_IMAGE_PUSH` | Extra push destinations |
+| `ENV_GIT_REPO_URL` | Full Git repository URL |
+| `ENV_USE_TEMPLATE` | Template name to use (alpine, debian, etc.) |
+| `ENV_PULL_URL` | Base image to pull from |
+| `ENV_DISTRO_TAG` | Tag for the base image |
+| `ENV_IMAGE_TAG` | Default image tag (default: `latest`) |
+| `ENV_ADD_TAGS` | Additional comma-separated tags; `USE_DATE` auto-generates a `YYMM` tag |
+| `ENV_PACKAGES` | Space-separated package list to install |
+| `ENV_VENDOR` / `ENV_AUTHOR` / `ENV_MAINTAINER` | Label metadata |
+| `SERVICE_PORT` | Primary exposed port |
+| `EXPOSE_PORTS` | Additional exposed ports |
+| `LANG_VERSION` | Language runtime version (go, php, rust, ruby, etc.) |
+| `PHP_VERSION` / `NODE_VERSION` / `NODE_MANAGER` | Runtime versions |
+| `WWW_ROOT_DIR` | Web root directory (default: `/usr/local/share/httpd/default`) |
+| `DOCKER_ENTYPOINT_PORTS_WEB` | Web ports passed to entrypoint |
+| `DOCKER_ENTYPOINT_PORTS_SRV` | Service ports passed to entrypoint |
+| `DOCKER_ENTYPOINT_HEALTH_APPS` | Apps to health-check |
+| `DOCKER_ENTYPOINT_HEALTH_ENDPOINTS` | Endpoints to health-check |
+
+### Legacy Variable Auto-Migration
+
+`gen-dockerfile --update` (and on every run) calls `__migrate_env_script` which automatically renames old variable names to the current ones. Old names that are no longer used:
+
+| Old Name | Current Name |
+|----------|-------------|
+| `ENV_IMAGE_NAME` | `ENV_REGISTRY_REPO` |
+| `ENV_IMAGE_PUSH` | `ENV_REGISTRY_PUSH` |
+| `ENV_HUB_BASE` | `ENV_REGISTRY_URL` |
+| `ENV_ORG_NAME` | `ENV_REGISTRY_ORG` |
+
+Never use the old names in new `.env.scripts` files.
+
+---
+
+## Dockerfile Template Structure
+
+### Build Arguments
+
+Top-of-file ARGs (before any `FROM`):
+
+| Argument | Description | Default |
+|----------|-------------|---------|
+| `IMAGE_NAME` | Container name | (from `ENV_REGISTRY_REPO`) |
+| `PHP_SERVER` | PHP server name | (same as `IMAGE_NAME`) |
+| `BUILD_DATE` | Build timestamp | YYYYMMDDHHMM |
+| `LANGUAGE` | System locale | `en_US.UTF-8` |
+| `TIMEZONE` | System timezone | `America/New_York` |
+| `WWW_ROOT_DIR` | Web root | `/usr/local/share/httpd/default` |
+| `PATH` | System `PATH` | `/usr/local/etc/docker/bin:/usr/local/sbin:...` |
+| `USER` | Build user | `root` |
+| `SHELL_OPTS` | Shell options | `set -e -o pipefail` |
+| `SERVICE_PORT` | Primary service port | (from `.env.scripts`) |
+| `EXPOSE_PORTS` | Additional ports | (from `.env.scripts`) |
+| `PHP_VERSION` | PHP version | `system` |
+| `NODE_VERSION` | Node.js version | `system` |
+| `NODE_MANAGER` | Node manager | `system` |
+| `IMAGE_REPO` | Full push path `org/repo` | (computed) |
+| `IMAGE_VERSION` | Image version | `latest` |
+| `CONTAINER_VERSION` | Additional image tags | (computed) |
+| `PULL_URL` | Base image to pull | `alpine` (official Docker Hub) |
+| `DISTRO_VERSION` | Base image tag | `${IMAGE_VERSION}` |
+| `BUILD_VERSION` | Build version alias | `${BUILD_DATE}` |
+
+Stage 2 (`FROM scratch`) additional ARGs:
+
+| Argument | Description |
+|----------|-------------|
+| `TZ` | Timezone alias |
+| `GIT_COMMIT` | Git SHA at build time (from CI) |
+| `LICENSE` | Image license | default `WTFPL` |
+| `ENV_PORTS` | Alias for `${EXPOSE_PORTS}` |
+
+### Generated Dockerfile Structure
+
+#### Stage 1: Build Stage
+
+```dockerfile
+FROM tianon/gosu:latest AS gosu
+FROM ${PULL_URL}:${DISTRO_VERSION} AS build
+
+# ... ARG declarations ...
+
+ENV ENV=~/.profile
+ENV SHELL="/bin/sh"
+ENV PATH="${PATH}"
+ENV TZ="${TIMEZONE}"
+ENV TIMEZONE="${TZ}"
+ENV LANG="${LANGUAGE}"
+ENV TERM="xterm-256color"
+ENV HOSTNAME="casjaysdevdocker-${IMAGE_NAME}"
+
+COPY ./rootfs/. /
+RUN pkmgr update; pkmgr install bash ca-certificates; update-ca-certificates
+
+ENV SHELL="/bin/bash"
+SHELL ["/bin/bash", "-c"]
+COPY --from=gosu /usr/local/bin/gosu /usr/local/bin/gosu
+
+# Setup scripts run in order:
+# 00-init.sh      - Initialize base system
+# 01-system.sh    - Configure system settings
+# 02-packages.sh  - Install/configure packages (after PACK_LIST install)
+# 03-files.sh     - Copy/modify files
+# 04-users.sh     - Create users/groups
+# 05-custom.sh    - Custom application setup
+# 06-post.sh      - Post-installation tasks
+# 07-cleanup.sh   - Clean up temporary files
+```
+
+#### Stage 2: Final Image
+
+```dockerfile
+FROM scratch
+
+# ... ARG and LABEL declarations ...
+
+ENV ENV=~/.bashrc
+ENV USER="${USER}"
+ENV PATH="${PATH}"
+ENV TZ="${TIMEZONE}"
+ENV SHELL="/bin/bash"
+ENV TIMEZONE="${TZ}"
+ENV LANG="${LANGUAGE}"
+ENV TERM="xterm-256color"
+ENV PORT="${SERVICE_PORT}"
+ENV ENV_PORTS="${ENV_PORTS}"
+ENV CONTAINER_NAME="${IMAGE_NAME}"
+ENV HOSTNAME="casjaysdev-${IMAGE_NAME}"
+ENV PHP_SERVER="${PHP_SERVER}"
+ENV NODE_VERSION="${NODE_VERSION}"
+ENV NODE_MANAGER="${NODE_MANAGER}"
+ENV PHP_VERSION="${PHP_VERSION}"
+ENV DISTRO_VERSION="${IMAGE_VERSION}"
+ENV WWW_ROOT_DIR="${WWW_ROOT_DIR}"
+
+COPY --from=build /. /
+
+VOLUME [ "/config", "/data" ]
+EXPOSE ${SERVICE_PORT} ${ENV_PORTS}
+STOPSIGNAL SIGRTMIN+3
+ENTRYPOINT [ "tini", "-p", "SIGTERM", "--", "/usr/local/bin/entrypoint.sh" ]
+HEALTHCHECK --start-period=10m --interval=5m --timeout=15s \
+  CMD [ "/usr/local/bin/entrypoint.sh", "healthcheck" ]
+```
+
+### Container Labels
+
+All containers include OpenContainers standard labels:
+
+```dockerfile
+LABEL maintainer="CasjaysDev <docker-admin@casjaysdev.pro>"
+LABEL org.opencontainers.image.vendor="CasjaysDev"
+LABEL org.opencontainers.image.authors="CasjaysDev"
+LABEL org.opencontainers.image.description="Containerized version of ${IMAGE_NAME}"
+LABEL org.opencontainers.image.title="${IMAGE_NAME}"
+LABEL org.opencontainers.image.base.name="${IMAGE_NAME}"
+LABEL org.opencontainers.image.authors="${LICENSE}"
+LABEL org.opencontainers.image.created="${BUILD_DATE}"
+LABEL org.opencontainers.image.version="${BUILD_VERSION}"
+LABEL org.opencontainers.image.schema-version="${BUILD_VERSION}"
+LABEL org.opencontainers.image.url="${GEN_DOCKERFILE_HUB_REPO}"
+LABEL org.opencontainers.image.source="${GEN_DOCKERFILE_HUB_REPO}"
+LABEL org.opencontainers.image.vcs-type="Git"
+LABEL org.opencontainers.image.revision="${GIT_COMMIT}"
+LABEL org.opencontainers.image.source="${GEN_DOCKERFILE_GIT_REPO}"
+LABEL org.opencontainers.image.documentation="${GEN_DOCKERFILE_GIT_REPO}"
+LABEL com.github.containers.toolbox="false"
+```
+
+> **Note:** `org.opencontainers.image.source` appears twice intentionally — first set to `GEN_DOCKERFILE_HUB_REPO` (computed from `ENV_REGISTRY_URL`/`ENV_REGISTRY_PUSH`), then overridden to `GEN_DOCKERFILE_GIT_REPO` (the Git remote URL). The second value wins at runtime. Neither URL is hardcoded — they reflect whatever registry and org the project is configured for.
+
+---
+
+## Common Package List
+
+Standard packages included in most containers (Alpine template):
+
+```
+bash-completion git curl wget sudo unzip iproute2 ssmtp openssl jq tzdata
+mailcap ncurses util-linux pciutils usbutils coreutils binutils findutils
+grep rsync zip tini py3-pip procps net-tools sed gawk attr readline lsof
+less shadow ca-certificates
+```
+
+---
+
+## Setup Scripts Convention
+
+Build-time scripts in `rootfs/root/docker/setup/` run inside the Docker build layer.
+
+### 00-init.sh
+- Initialize base directory structure
+- Set up template directories
+- Create initial environment
+
+### 01-system.sh
+- Configure APK/apt/yum repositories
+- Set up system settings
+- Configure locales and timezone
+
+### 02-packages.sh
+- Install application-specific packages
+- Configure package managers (pip, npm, etc.)
+- Set up language runtimes
+
+### 03-files.sh
+- Copy configuration files
+- Set file permissions
+- Create symlinks
+
+### 04-users.sh
+- Create application users
+- Set up user directories
+- Configure user permissions
+
+### 05-custom.sh
+- Application-specific installation
+- Download/compile software
+- Custom configuration
+
+### 06-post.sh
+- Post-installation configuration
+- Initialize databases
+- Generate default configs
+
+### 07-cleanup.sh
+- Remove build dependencies
+- Clean package caches
+- Remove temporary files
+
+---
+
+## Entrypoint System
+
+### Entrypoint Script Flow
+
+```
+/usr/local/bin/entrypoint.sh
+├─ Load functions from /usr/local/etc/docker/functions/entrypoint.sh
+├─ Set up environment variables (sources /root/env.sh, /usr/local/etc/docker/env/*.sh, /config/env/*.sh)
+├─ Create /config and /data volumes
+├─ Run ALL init scripts from /usr/local/etc/docker/init.d/ (sorted order) via __start_init_scripts
+├─ Handle healthcheck command
+└─ Execute main application
+```
+
+### Init.d Scripts — CRITICAL RULES
+
+**Each service in a repo gets its own numbered init.d script. Never merge or remove them.**
+
+- `__start_init_scripts` iterates and sources **every** `*.sh` file in `init.d/` in sort order.
+- Multi-process repos have **one script per service**. Example for a repo running three daemons:
+  ```
+  init.d/01-named.sh     — BIND/named DNS server
+  init.d/02-nginx.sh     — nginx web front-end
+  init.d/03-php-fpm.sh   — PHP-FPM for web UI
+  ```
+- **Migration task = UPDATE each script to the canonical pattern, never delete services.**
+- The canonical pattern is `04-example.sh` in the `casjaysdevdocker/.github` org-level repository, or generate a fresh one with `gen-dockerfile --startup <name>`.
+
+### Required Variables in Every Init.d Script
+
+```bash
+SERVICE_NAME="myapp"           # used for PID files, log dirs, config dirs
+EXEC_CMD_BIN='myapp'          # daemon binary (single-quoted — expanded later)
+EXEC_CMD_ARGS=''               # daemon arguments (single-quoted)
+EXEC_PRE_SCRIPT=''             # pre-start script (single-quoted)
+SERVICE_USES_PID=''            # '' for long-running daemons; 'no' for config-only steps
+IS_WEB_SERVER="no"             # 'yes' sets RESET_ENV and default port 80
+IS_DATABASE_SERVICE="no"
+USES_DATABASE_SERVICE="no"
+DATABASE_SERVICE_TYPE="sqlite" # custom|sqlite|redis|postgres|mariadb|mysql|couchdb|mongodb|supabase
+RUNAS_USER="root"
+```
+
+### Hook Functions in Every Init.d Script
+
+The `start-service` template **generates all eleven hook functions** fully implemented inside each init.d script — they are not stubs the developer writes from scratch. The developer customises behaviour via a matching `*_local()` variant that each outer hook calls automatically if defined.
+
+**Outer hooks** (generated, do not redefine):
+
+```bash
+__run_precopy()              # runs before copying /config to /etc
+__execute_prerun()           # custom prerun — e.g. set up WWW_ROOT_DIR
+__run_pre_execute_checks()   # validation before exec; non-zero exitStatus aborts start
+__update_conf_files()        # runs sed replacements on config files
+__pre_execute()              # final setup before exec
+__post_execute()             # background post-start tasks
+__pre_message()              # message shown before exec
+__update_ssl_conf()          # SSL certificate setup
+__create_service_env()       # generates /config/env/$SERVICE_NAME.sh template
+__run_start_script()         # builds and executes the service start command
+__run_secure_function()      # chmod 600 on credential files
+```
+
+**`*_local()` stubs** (customise these — defined as `{ true; }` by default):
+
+```bash
+__run_precopy_local()
+__execute_prerun_local()
+__run_pre_execute_checks_local()
+__update_conf_files_local()    # ← put sed/config replacements here
+__pre_execute_local()
+__post_execute_local()
+__pre_message_local()
+__update_ssl_conf_local()
+```
+
+Each outer hook checks `builtin type -t __<name>_local | grep -q 'function'` before calling the local variant, so stubs that are never overridden cost nothing.
+
+### PID Sentinel Check (CRITICAL)
+
+Every init.d script **must** guard on the correct sentinel file:
+
+```bash
+# Correct — dot prefix, no double underscore
+if [ ! -f "/run/.start_init_scripts.pid" ]; then
+  echo "__start_init_scripts function hasn't been Initialized" >&2
+  SERVICE_IS_RUNNING="no"
+  __script_exit 1
+fi
+```
+
+The file is `/run/.start_init_scripts.pid` — a leading dot, no underscores in the filename portion. Any other form silently skips the guard.
+
+### Directory Variables
+
+```bash
+DATA_DIR="/data/$SERVICE_NAME"         # persistent data
+CONF_DIR="/config/$SERVICE_NAME"       # persistent config
+ETC_DIR="/etc/$SERVICE_NAME"           # runtime etc (synced from CONF_DIR)
+LOG_DIR="/data/logs/$SERVICE_NAME"     # logs
+TMP_DIR="/tmp/$SERVICE_NAME"
+RUN_DIR="/run/$SERVICE_NAME"
+ROOT_FILE_PREFIX="/config/secure/auth/root"
+USER_FILE_PREFIX="/config/secure/auth/user"
+```
+
+### Volume Mounts
+
+- `/config` — Persistent configuration files
+- `/data` — Persistent application data
+
+---
+
+## CI/CD Integration
+
+### Two Workflow Files — Hand-Crafted vs Generated
+
+| File | Origin | Never overwrite? |
+|------|--------|-----------------|
+| `.gitea/workflows/docker.yaml` | Hand-crafted legacy file; reference copy in `casjaysdevdocker/.github/example/` | Yes — do not overwrite |
+| `.gitea/workflows/build.yml` | Generated by `gen-dockerfile actions` | No — regenerate freely |
+
+### Generated Workflow (`gen-dockerfile actions`)
+
+`gen-dockerfile actions` writes `.gitea/workflows/build.yml` (or `build.<version>.yml` for versioned tags) from the current `Dockerfile`. All actions are SHA-pinned.
+
+**Triggers:** `push` to `main`, monthly schedule (`cron: '0 2 1 * *'`), `workflow_dispatch`.
+
+**Registry strategy:**
+- Always logs in to the Gitea registry using the auto-provided `GITEA_TOKEN`.
+- Conditionally logs in to Docker Hub (or another registry) when `vars.DOCKER_USERNAME` is set; credentials via `vars.DOCKER_USERNAME` + `secrets.DOCKER_PASSWORD`.
+- `vars.DOCKER_REGISTRY` overrides the registry URL (default: `docker.io`).
+- `vars.DOCKER_ORG` overrides the namespace (fallback: `vars.DOCKER_USERNAME`).
+
+**`build-args` passed:** only `BUILD_DATE`, `GIT_COMMIT`, `BUILD_VERSION` — not `TIMEZONE`, `LANGUAGE`, `LICENSE`, or `TZ`.
+
+**Tags pushed:** `<yymm>` and `latest` to both Gitea and (if configured) Docker Hub.
+
+```yaml
+name: Build and Push
+
+on:
+  push:
+    branches: [main]
+  schedule:
+    - cron: '0 2 1 * *'
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
+
+      - name: Compute build metadata
+        id: meta
+        run: |
+          echo "build_date=$(date -u +%Y%m%d%H%M)" >> "$GITHUB_OUTPUT"
+          echo "tag_yymm=$(date -u +%y%m)" >> "$GITHUB_OUTPUT"
+          echo "git_commit=${GITHUB_SHA::7}" >> "$GITHUB_OUTPUT"
+          echo "registry_host=$(echo '${{ github.server_url }}' | sed 's|https://||')" >> "$GITHUB_OUTPUT"
+
+      - name: Login to Gitea registry
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        with:
+          registry: ${{ steps.meta.outputs.registry_host }}
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITEA_TOKEN }}
+
+      - name: Login to Docker Hub
+        if: vars.DOCKER_USERNAME != ''
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        with:
+          registry: ${{ vars.DOCKER_REGISTRY || 'docker.io' }}
+          username: ${{ vars.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+      - name: Build and push
+        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: |
+            ${{ steps.meta.outputs.registry_host }}/${{ github.repository }}:${{ steps.meta.outputs.tag_yymm }}
+            ${{ vars.DOCKER_USERNAME != '' && format('{0}/{1}/{2}:{3}', vars.DOCKER_REGISTRY || 'docker.io', vars.DOCKER_ORG || vars.DOCKER_USERNAME, github.event.repository.name, steps.meta.outputs.tag_yymm) || '' }}
+            ${{ steps.meta.outputs.registry_host }}/${{ github.repository }}:latest
+            ${{ vars.DOCKER_USERNAME != '' && format('{0}/{1}/{2}:{3}', vars.DOCKER_REGISTRY || 'docker.io', vars.DOCKER_ORG || vars.DOCKER_USERNAME, github.event.repository.name, 'latest') || '' }}
+          build-args: |
+            BUILD_DATE=${{ steps.meta.outputs.build_date }}
+            GIT_COMMIT=${{ steps.meta.outputs.git_commit }}
+            BUILD_VERSION=${{ steps.meta.outputs.tag_yymm }}
+          annotations: |
+            org.opencontainers.image.created=${{ steps.meta.outputs.build_date }}
+            org.opencontainers.image.version=latest
+            org.opencontainers.image.revision=${{ steps.meta.outputs.git_commit }}
+            org.opencontainers.image.title=${{ github.event.repository.name }}
+            org.opencontainers.image.description=Containerized version of ${{ github.event.repository.name }}
+            org.opencontainers.image.vendor=CasjaysDev
+            org.opencontainers.image.authors=CasjaysDev
+            org.opencontainers.image.licenses=WTFPL
+            org.opencontainers.image.url=${{ github.server_url }}/${{ github.repository }}
+            org.opencontainers.image.source=${{ github.server_url }}/${{ github.repository }}
+            org.opencontainers.image.documentation=${{ github.server_url }}/${{ github.repository }}
+            org.opencontainers.image.vcs-type=Git
+            com.github.containers.toolbox=false
+```
+
+For versioned builds (`gen-dockerfile actions` on a tagged version), the workflow is named `Build and Push <version>`, omits the schedule trigger, and pushes only that fixed version tag.
+
+### Hand-Crafted Workflow (`.gitea/workflows/docker.yaml`)
+
+The legacy `docker.yaml` is hand-crafted; the reference copy lives in `casjaysdevdocker/.github/example/` (the org-level repository). It differs from the generated workflow: uses `catthehacker/ubuntu:act-latest` container, tag-pinned actions (`@v2`/`@v3`/`@v4`), `secrets.DOCKER_USERNAME` + `secrets.DOCKER_TOKEN`, and the old `steps.meta.outputs.*` pattern. Do not use this as a template for new containers — use `gen-dockerfile actions` instead.
+
+---
+
+## Package Manager Wrapper (pkmgr)
+
+The `pkmgr` script in `rootfs/usr/local/bin/pkmgr` provides a unified interface:
+
+```bash
+pkmgr update          # Update package lists
+pkmgr install <pkg>   # Install packages
+pkmgr remove <pkg>    # Remove packages
+pkmgr clean           # Clean package cache
+```
+
+Automatically detects and uses the appropriate package manager (apk, apt-get, dnf, pacman).
+
+---
+
+## Development Workflow
+
+### Creating a New Container
+
+```bash
+# 1. Generate scaffolding
+gen-dockerfile --dir ./myapp alpine
+
+# 2. Customise .env.scripts (set ENV_REGISTRY_REPO, ENV_REGISTRY_ORG, ports, etc.)
+
+# 3. Customise setup scripts in rootfs/root/docker/setup/
+
+# 4. Generate an init.d runtime script
+gen-dockerfile --startup 01-myapp.sh
+
+# 5. Build and test
+docker build -t myapp .
+docker run -it myapp
+
+# 6. Commit and push to trigger CI/CD
+```
+
+### Updating an Existing Container
+
+```bash
+# Regenerate Dockerfile and related files from current .env.scripts
+gen-dockerfile --dir ./myapp --update
+
+# Regenerate workflow file only
+gen-dockerfile --dir ./myapp actions
+```
+
+### Adding a New Container from Scratch
+
+1. `gen-dockerfile --dir /path/to/new-container --nogit alpine`
+2. Edit `.env.scripts` — set `ENV_REGISTRY_REPO`, `ENV_REGISTRY_PUSH`, `ENV_GIT_REPO_URL`
+3. Generate the init.d service script: `gen-dockerfile --startup 01-myapp.sh`
+4. Add application-specific setup in `rootfs/root/docker/setup/05-custom.sh`
+
+---
+
+## Project Categories
+
+### Web Servers
+- nginx, lighttpd, caddy
+
+### Databases
+- mysql, mariadb, postgres, mongodb, couchdb, redis, valkey, sqlite
+
+### Development Tools
+- code, neovim, vim, nodejs, python, php, deno, bun
+
+### Container Tools
+- docker, podman
+
+### Git Services
+- gitea, forgejo, soft-serve, opengist
+
+### Media Services
+- ampache, navidrome, mpd, ympd, icecast, youtube-dl
+
+### Networking
+- bind, traefik, tor, i2pd, ddns, ifconfig
+
+### Communication
+- mailman, postfix, gotify, ntfy, apprise
+
+### Cloud Services
+- nextcloud, wordpress
+
+### Utilities
+- tools, transmission, aria2, tftpd, ssl-ca, wttr, xfce4, webmin
+
+---
+
+## Resources
+
+- **Docker Hub:** <https://hub.docker.com/u/casjaysdevdocker>
+- **Git Repository:** <https://github.com/casjaysdevdocker>
+- **gen-dockerfile Tool:** `/usr/local/bin/gen-dockerfile`
+- **Template Source:** `/usr/local/share/CasjaysDev/scripts/templates/dockerfiles/` (installed) or `$CASJAYSDEVDIR/templates/dockerfiles/` (dev override)
+- **Example Project:** `casjaysdevdocker/.github/example/` (org-level repository — not present in individual container repos)
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..e6a4e18
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,135 @@
+# syntax=docker/dockerfile:1
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Super-Productivity Docker Image
+# https://github.com/casjaysdevdocker/super-productivity
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+
+ARG PULL_URL="casjaysdev/alpine"
+ARG DISTRO_VERSION="latest"
+
+# ── Stage 0: pre-built super-productivity web assets ──
+FROM johannesjo/super-productivity:latest AS sp-app
+
+# ── Stage 1: gosu binary ──────────────────────────────
+FROM tianon/gosu:latest AS gosu
+
+# ── Stage 2: Build stage ──────────────────────────────
+FROM ${PULL_URL}:${DISTRO_VERSION} AS build
+
+ARG IMAGE_NAME="super-productivity"
+ARG PHP_SERVER="super-productivity"
+ARG BUILD_DATE="202501010000"
+ARG LANGUAGE="en_US.UTF-8"
+ARG TIMEZONE="America/New_York"
+ARG WWW_ROOT_DIR="/usr/local/share/httpd/default"
+ARG PATH="/usr/local/etc/docker/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
+ARG USER="root"
+ARG SHELL_OPTS="set -e -o pipefail"
+ARG SERVICE_PORT="80"
+ARG EXPOSE_PORTS="80"
+ARG PHP_VERSION="system"
+ARG NODE_VERSION="system"
+ARG NODE_MANAGER="system"
+ARG IMAGE_REPO="casjaysdevdocker/super-productivity"
+ARG IMAGE_VERSION="latest"
+ARG CONTAINER_VERSION="${IMAGE_VERSION}"
+ARG BUILD_VERSION="${BUILD_DATE}"
+
+ENV ENV="~/.profile" \
+    SHELL="/bin/sh" \
+    PATH="${PATH}" \
+    TZ="${TIMEZONE}" \
+    TIMEZONE="${TIMEZONE}" \
+    LANG="${LANGUAGE}" \
+    TERM="xterm-256color" \
+    HOSTNAME="casjaysdevdocker-${IMAGE_NAME}"
+
+COPY ./rootfs/. /
+
+RUN pkmgr update && pkmgr install bash ca-certificates nginx jq curl && update-ca-certificates
+
+ENV SHELL="/bin/bash"
+SHELL ["/bin/bash", "-c"]
+
+COPY --from=gosu  /usr/local/bin/gosu              /usr/local/bin/gosu
+COPY --from=sp-app /usr/share/nginx/html/           /usr/local/share/httpd/default/
+
+RUN chmod -Rf 755 /root/docker/setup && \
+    /root/docker/setup/00-init.sh && \
+    /root/docker/setup/01-system.sh && \
+    /root/docker/setup/02-packages.sh && \
+    /root/docker/setup/03-files.sh && \
+    /root/docker/setup/04-users.sh && \
+    /root/docker/setup/05-custom.sh && \
+    /root/docker/setup/06-post.sh && \
+    /root/docker/setup/07-cleanup.sh && \
+    chmod -Rf 755 /usr/local/etc/docker/init.d && \
+    chmod +x /usr/local/bin/entrypoint.sh \
+             /usr/local/bin/pkmgr
+
+# ── Stage 3: Final minimal image ─────────────────────
+FROM scratch
+
+ARG BUILD_DATE="202501010000"
+ARG GIT_COMMIT=""
+ARG IMAGE_NAME="super-productivity"
+ARG IMAGE_VERSION="latest"
+ARG BUILD_VERSION="${BUILD_DATE}"
+ARG LANGUAGE="en_US.UTF-8"
+ARG TIMEZONE="America/New_York"
+ARG WWW_ROOT_DIR="/usr/local/share/httpd/default"
+ARG PATH="/usr/local/etc/docker/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
+ARG USER="root"
+ARG SERVICE_PORT="80"
+ARG LICENSE="WTFPL"
+ARG ENV_PORTS="80"
+ARG TZ="America/New_York"
+
+LABEL maintainer="CasjaysDev <docker-admin@casjaysdev.pro>" \
+      org.opencontainers.image.vendor="CasjaysDev" \
+      org.opencontainers.image.authors="CasjaysDev" \
+      org.opencontainers.image.description="Containerized version of super-productivity" \
+      org.opencontainers.image.title="${IMAGE_NAME}" \
+      org.opencontainers.image.base.name="${IMAGE_NAME}" \
+      org.opencontainers.image.licenses="${LICENSE}" \
+      org.opencontainers.image.created="${BUILD_DATE}" \
+      org.opencontainers.image.version="${BUILD_VERSION}" \
+      org.opencontainers.image.schema-version="${BUILD_VERSION}" \
+      org.opencontainers.image.url="https://hub.docker.com/r/casjaysdevdocker/super-productivity" \
+      org.opencontainers.image.source="https://github.com/casjaysdevdocker/super-productivity" \
+      org.opencontainers.image.vcs-type="Git" \
+      org.opencontainers.image.revision="${GIT_COMMIT}" \
+      org.opencontainers.image.documentation="https://github.com/casjaysdevdocker/super-productivity" \
+      com.github.containers.toolbox="false"
+
+ENV ENV="~/.bashrc" \
+    USER="${USER}" \
+    PATH="${PATH}" \
+    TZ="${TZ}" \
+    SHELL="/bin/bash" \
+    TIMEZONE="${TIMEZONE}" \
+    LANG="${LANGUAGE}" \
+    TERM="xterm-256color" \
+    PORT="${SERVICE_PORT}" \
+    ENV_PORTS="${ENV_PORTS}" \
+    CONTAINER_NAME="${IMAGE_NAME}" \
+    HOSTNAME="casjaysdev-${IMAGE_NAME}" \
+    WWW_ROOT_DIR="${WWW_ROOT_DIR}" \
+    APP_PORT="80" \
+    WEBDAV_BACKEND="" \
+    WEBDAV_BASE_URL="" \
+    WEBDAV_USERNAME="" \
+    WEBDAV_SYNC_FOLDER_PATH="" \
+    SYNC_INTERVAL="" \
+    IS_COMPRESSION_ENABLED="" \
+    IS_ENCRYPTION_ENABLED="" \
+    SUPERSYNC_BASE_URL=""
+
+COPY --from=build /. /
+
+VOLUME ["/config", "/data"]
+EXPOSE ${SERVICE_PORT} ${ENV_PORTS}
+STOPSIGNAL SIGRTMIN+3
+ENTRYPOINT ["tini", "-p", "SIGTERM", "--", "/usr/local/bin/entrypoint.sh"]
+HEALTHCHECK --start-period=10m --interval=5m --timeout=15s \
+  CMD ["/usr/local/bin/entrypoint.sh", "healthcheck"]
diff --git a/LICENSE.md b/LICENSE.md
new file mode 100644
index 0000000..27b62a2
--- /dev/null
+++ b/LICENSE.md
@@ -0,0 +1,13 @@
+            DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE  
+                    Version 2, December 2004  
+
+ Copyright (C) 2026 casjay <git-admin@casjaysdev.pro>  
+  
+ Everyone is permitted to copy and distribute verbatim or modified  
+ copies of this license document, and changing it is allowed as long  
+ as the name is changed.  
+  
+            DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE  
+   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION  
+  
+  1. You just DO WHAT THE FUCK YOU WANT TO.  
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..c70a65f
--- /dev/null
+++ b/README.md
@@ -0,0 +1,79 @@
+## 👋 Welcome to super-productivity 🚀  
+
+super-productivity README  
+  
+  
+## Install my system scripts  
+
+```shell
+ sudo bash -c "$(curl -q -LSsf "https://github.com/systemmgr/installer/raw/main/install.sh")"
+ sudo systemmgr --config && sudo systemmgr install scripts  
+```
+  
+## Automatic install/update  
+  
+```shell
+dockermgr update super-productivity
+```
+  
+## Install and run container
+  
+```shell
+dockerHome="/var/lib/srv/$USER/docker/casjaysdevdocker/super-productivity/latest/volumes"
+mkdir -p "$dockerHome"
+git clone "https://github.com/dockermgr/super-productivity" "$HOME/.local/share/CasjaysDev/dockermgr/super-productivity"
+cp -Rfva "$HOME/.local/share/CasjaysDev/dockermgr/super-productivity/volumes/." "$dockerHome/"
+docker run -d \
+--restart always \
+--privileged \
+--name casjaysdevdocker-super-productivity-latest \
+--hostname super-productivity \
+-e TZ=${TIMEZONE:-America/New_York} \
+-v "$dockerHome/data:/data:z" \
+-v "$dockerHome/config:/config:z" \
+-p 80:80 \
+casjaysdevdocker/super-productivity:latest
+```
+  
+## via docker-compose  
+  
+```yaml
+services:
+  ProjectName:
+    image: casjaysdevdocker/super-productivity
+    container_name: casjaysdevdocker-super-productivity
+    environment:
+      - TZ=America/New_York
+      - HOSTNAME=super-productivity
+    volumes:
+      - "/var/lib/srv/$USER/docker/casjaysdevdocker/super-productivity/latest/volumes/data:/data:z"
+      - "/var/lib/srv/$USER/docker/casjaysdevdocker/super-productivity/latest/volumes/config:/config:z"
+    ports:
+      - 80:80
+    restart: always
+```
+  
+## Get source files  
+  
+```shell
+dockermgr download src casjaysdevdocker/super-productivity
+```
+  
+OR
+  
+```shell
+git clone "https://github.com/casjaysdevdocker/super-productivity" "$HOME/Projects/github/casjaysdevdocker/super-productivity"
+```
+  
+## Build container  
+  
+```shell
+cd "$HOME/Projects/github/casjaysdevdocker/super-productivity"
+buildx 
+```
+  
+## Authors  
+  
+🤖 casjay: [Github](https://github.com/casjay) 🤖  
+⛵ casjaysdevdocker: [Github](https://github.com/casjaysdevdocker) [Docker](https://hub.docker.com/u/casjaysdevdocker) ⛵  
+
diff --git a/rootfs/root/docker/setup/00-init.sh b/rootfs/root/docker/setup/00-init.sh
new file mode 100755
index 0000000..8192065
--- /dev/null
+++ b/rootfs/root/docker/setup/00-init.sh
@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+# shellcheck shell=bash
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+##@Version           :  202606261156-git
+# @@Author           :  CasjaysDev
+# @@Contact          :  CasjaysDev <docker-admin@casjaysdev.pro>
+# @@License          :  WTFPL
+# @@Copyright        :  Copyright 2026 CasjaysDev
+# @@Created          :  Fri Jun 26 11:56:35 AM EDT 2026
+# @@File             :  00-init.sh
+# @@Description      :  script to run init
+# @@Changelog        :  newScript
+# @@TODO             :  Refactor code
+# @@Other            :  N/A
+# @@Resource         :  N/A
+# @@Terminal App     :  yes
+# @@sudo/root        :  yes
+# @@Template         :  templates/dockerfiles/init_scripts/00-init.sh
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# shellcheck disable=SC1001,SC1003,SC2001,SC2003,SC2016,SC2031,SC2090,SC2115,SC2120,SC2155,SC2199,SC2229,SC2317,SC2329
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set bash options
+set -eo pipefail
+[ "$DEBUGGER" = "on" ] && echo "Enabling debugging" && set -x$DEBUGGER_OPTIONS
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set env variables
+exitCode=0
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Predefined actions
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Main script
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set the exit code
+exitCode=$?
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+exit $exitCode
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# ex: ts=2 sw=2 et filetype=sh
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+
diff --git a/rootfs/root/docker/setup/01-system.sh b/rootfs/root/docker/setup/01-system.sh
new file mode 100755
index 0000000..5e6d72f
--- /dev/null
+++ b/rootfs/root/docker/setup/01-system.sh
@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+# shellcheck shell=bash
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+##@Version           :  202606261156-git
+# @@Author           :  CasjaysDev
+# @@Contact          :  CasjaysDev <docker-admin@casjaysdev.pro>
+# @@License          :  WTFPL
+# @@Copyright        :  Copyright 2026 CasjaysDev
+# @@Created          :  Fri Jun 26 11:56:35 AM EDT 2026
+# @@File             :  01-system.sh
+# @@Description      :  script to run system
+# @@Changelog        :  newScript
+# @@TODO             :  Refactor code
+# @@Other            :  N/A
+# @@Resource         :  N/A
+# @@Terminal App     :  yes
+# @@sudo/root        :  yes
+# @@Template         :  templates/dockerfiles/init_scripts/01-system.sh
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# shellcheck disable=SC1001,SC1003,SC2001,SC2003,SC2016,SC2031,SC2090,SC2115,SC2120,SC2155,SC2199,SC2229,SC2317,SC2329
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set bash options
+set -eo pipefail
+[ "$DEBUGGER" = "on" ] && echo "Enabling debugging" && set -x$DEBUGGER_OPTIONS
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set env variables
+exitCode=0
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Predefined actions
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Main script
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set the exit code
+exitCode=$?
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+exit $exitCode
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# ex: ts=2 sw=2 et filetype=sh
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+
diff --git a/rootfs/root/docker/setup/02-packages.sh b/rootfs/root/docker/setup/02-packages.sh
new file mode 100755
index 0000000..13c36a0
--- /dev/null
+++ b/rootfs/root/docker/setup/02-packages.sh
@@ -0,0 +1,50 @@
+#!/usr/bin/env bash
+# shellcheck shell=bash
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+##@Version           :  202606261156-git
+# @@Author           :  CasjaysDev
+# @@Contact          :  CasjaysDev <docker-admin@casjaysdev.pro>
+# @@License          :  WTFPL
+# @@Copyright        :  Copyright 2026 CasjaysDev
+# @@Created          :  Fri Jun 26 11:56:35 AM EDT 2026
+# @@File             :  02-packages.sh
+# @@Description      :  script to run packages
+# @@Changelog        :  newScript
+# @@TODO             :  Refactor code
+# @@Other            :  N/A
+# @@Resource         :  N/A
+# @@Terminal App     :  yes
+# @@sudo/root        :  yes
+# @@Template         :  templates/dockerfiles/init_scripts/02-packages.sh
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# shellcheck disable=SC1001,SC1003,SC2001,SC2003,SC2016,SC2031,SC2090,SC2115,SC2120,SC2155,SC2199,SC2229,SC2317,SC2329
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set bash options
+set -eo pipefail
+[ "$DEBUGGER" = "on" ] && echo "Enabling debugging" && set -x$DEBUGGER_OPTIONS
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set env variables
+exitCode=0
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Predefined actions
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Main script
+if command -v update-ca-certificates >/dev/null 2>&1; then
+  update-ca-certificates
+elif command -v update-ca-trust >/dev/null 2>&1; then
+  update-ca-trust extract
+elif command -v trust >/dev/null 2>&1; then
+  trust extract-compat
+fi
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set the exit code
+exitCode=$?
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+exit $exitCode
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# ex: ts=2 sw=2 et filetype=sh
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+
diff --git a/rootfs/root/docker/setup/03-files.sh b/rootfs/root/docker/setup/03-files.sh
new file mode 100755
index 0000000..b520c3d
--- /dev/null
+++ b/rootfs/root/docker/setup/03-files.sh
@@ -0,0 +1,93 @@
+#!/usr/bin/env bash
+# shellcheck shell=bash
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+##@Version           :  202606261156-git
+# @@Author           :  CasjaysDev
+# @@Contact          :  CasjaysDev <docker-admin@casjaysdev.pro>
+# @@License          :  WTFPL
+# @@Copyright        :  Copyright 2026 CasjaysDev
+# @@Created          :  Fri Jun 26 11:56:35 AM EDT 2026
+# @@File             :  03-files.sh
+# @@Description      :  script to run files
+# @@Changelog        :  newScript
+# @@TODO             :  Refactor code
+# @@Other            :  N/A
+# @@Resource         :  N/A
+# @@Terminal App     :  yes
+# @@sudo/root        :  yes
+# @@Template         :  templates/dockerfiles/init_scripts/03-files.sh
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# shellcheck disable=SC1001,SC1003,SC2001,SC2003,SC2016,SC2031,SC2090,SC2115,SC2120,SC2155,SC2199,SC2229,SC2317,SC2329
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set bash options
+set -eo pipefail
+[ "$DEBUGGER" = "on" ] && echo "Enabling debugging" && set -x$DEBUGGER_OPTIONS
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set env variables
+exitCode=0
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Predefined actions
+if [ -d "/etc/nginx" ]; then rm -Rf "/etc/nginx"; fi
+if [ -d "/tmp/bin" ]; then
+  mkdir -p "/usr/local/bin"
+  for bin in "/tmp/bin"/*; do
+    [ -e "$bin" ] || continue
+    name="${bin##*/}"
+    echo "Installing $name to /usr/local/bin/$name"
+    cp -Rf "$bin" "/usr/local/bin/$name"
+    chmod -f +x "/usr/local/bin/$name"
+  done
+fi
+unset bin
+if [ -d "/tmp/var" ]; then
+  for var in "/tmp/var"/*; do
+    [ -e "$var" ] || continue
+    name="${var##*/}"
+    echo "Installing $var to /var/$name"
+    if [ -d "$var" ]; then
+      mkdir -p "/var/$name"
+      cp -Rf "$var/." "/var/$name/"
+    else
+      cp -Rf "$var" "/var/$name"
+    fi
+  done
+fi
+unset var
+if [ -d "/tmp/etc" ]; then
+  for config in "/tmp/etc"/*; do
+    [ -e "$config" ] || continue
+    name="${config##*/}"
+    echo "Installing $config to /etc/$name"
+    if [ -d "$config" ]; then
+      mkdir -p "/etc/$name"
+      cp -Rf "$config/." "/etc/$name/"
+    else
+      cp -Rf "$config" "/etc/$name"
+    fi
+  done
+fi
+unset config
+if [ -d "/tmp/usr" ]; then
+  for share in "/tmp/usr"/*; do
+    [ -e "$share" ] || continue
+    name="${share##*/}"
+    dest="/usr/$name"
+    echo "Installing $share to $dest"
+    mkdir -p "$dest"
+    cp -Rf "$share/." "$dest/"
+  done
+fi
+unset share
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Main script
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set the exit code
+exitCode=$?
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+exit $exitCode
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# ex: ts=2 sw=2 et filetype=sh
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+
diff --git a/rootfs/root/docker/setup/04-users.sh b/rootfs/root/docker/setup/04-users.sh
new file mode 100755
index 0000000..feafedf
--- /dev/null
+++ b/rootfs/root/docker/setup/04-users.sh
@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+# shellcheck shell=bash
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+##@Version           :  202606261156-git
+# @@Author           :  CasjaysDev
+# @@Contact          :  CasjaysDev <docker-admin@casjaysdev.pro>
+# @@License          :  WTFPL
+# @@Copyright        :  Copyright 2026 CasjaysDev
+# @@Created          :  Fri Jun 26 11:56:35 AM EDT 2026
+# @@File             :  04-users.sh
+# @@Description      :  script to run users
+# @@Changelog        :  newScript
+# @@TODO             :  Refactor code
+# @@Other            :  N/A
+# @@Resource         :  N/A
+# @@Terminal App     :  yes
+# @@sudo/root        :  yes
+# @@Template         :  templates/dockerfiles/init_scripts/04-users.sh
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# shellcheck disable=SC1001,SC1003,SC2001,SC2003,SC2016,SC2031,SC2090,SC2115,SC2120,SC2155,SC2199,SC2229,SC2317,SC2329
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set bash options
+set -eo pipefail
+[ "$DEBUGGER" = "on" ] && echo "Enabling debugging" && set -x$DEBUGGER_OPTIONS
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set env variables
+exitCode=0
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Predefined actions
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Main script
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set the exit code
+exitCode=$?
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+exit $exitCode
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# ex: ts=2 sw=2 et filetype=sh
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+
diff --git a/rootfs/root/docker/setup/05-custom.sh b/rootfs/root/docker/setup/05-custom.sh
new file mode 100755
index 0000000..de24cef
--- /dev/null
+++ b/rootfs/root/docker/setup/05-custom.sh
@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+# shellcheck shell=bash
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+##@Version           :  202606261156-git
+# @@Author           :  CasjaysDev
+# @@Contact          :  CasjaysDev <docker-admin@casjaysdev.pro>
+# @@License          :  WTFPL
+# @@Copyright        :  Copyright 2026 CasjaysDev
+# @@Created          :  Fri Jun 26 11:56:35 AM EDT 2026
+# @@File             :  05-custom.sh
+# @@Description      :  script to run custom
+# @@Changelog        :  newScript
+# @@TODO             :  Refactor code
+# @@Other            :  N/A
+# @@Resource         :  N/A
+# @@Terminal App     :  yes
+# @@sudo/root        :  yes
+# @@Template         :  templates/dockerfiles/init_scripts/05-custom.sh
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# shellcheck disable=SC1001,SC1003,SC2001,SC2003,SC2016,SC2031,SC2090,SC2115,SC2120,SC2155,SC2199,SC2229,SC2317,SC2329
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set bash options
+set -eo pipefail
+[ "$DEBUGGER" = "on" ] && echo "Enabling debugging" && set -x$DEBUGGER_OPTIONS
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set env variables
+exitCode=0
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Predefined actions
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Main script
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set the exit code
+exitCode=$?
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+exit $exitCode
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# ex: ts=2 sw=2 et filetype=sh
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+
diff --git a/rootfs/root/docker/setup/06-post.sh b/rootfs/root/docker/setup/06-post.sh
new file mode 100755
index 0000000..61dc04a
--- /dev/null
+++ b/rootfs/root/docker/setup/06-post.sh
@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+# shellcheck shell=bash
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+##@Version           :  202606261156-git
+# @@Author           :  CasjaysDev
+# @@Contact          :  CasjaysDev <docker-admin@casjaysdev.pro>
+# @@License          :  WTFPL
+# @@Copyright        :  Copyright 2026 CasjaysDev
+# @@Created          :  Fri Jun 26 11:56:35 AM EDT 2026
+# @@File             :  06-post.sh
+# @@Description      :  script to run post
+# @@Changelog        :  newScript
+# @@TODO             :  Refactor code
+# @@Other            :  N/A
+# @@Resource         :  N/A
+# @@Terminal App     :  yes
+# @@sudo/root        :  yes
+# @@Template         :  templates/dockerfiles/init_scripts/06-post.sh
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# shellcheck disable=SC1001,SC1003,SC2001,SC2003,SC2016,SC2031,SC2090,SC2115,SC2120,SC2155,SC2199,SC2229,SC2317,SC2329
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set bash options
+set -eo pipefail
+[ "$DEBUGGER" = "on" ] && echo "Enabling debugging" && set -x$DEBUGGER_OPTIONS
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set env variables
+exitCode=0
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Predefined actions
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Main script
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set the exit code
+exitCode=$?
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+exit $exitCode
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# ex: ts=2 sw=2 et filetype=sh
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+
diff --git a/rootfs/root/docker/setup/07-cleanup.sh b/rootfs/root/docker/setup/07-cleanup.sh
new file mode 100755
index 0000000..a06c56b
--- /dev/null
+++ b/rootfs/root/docker/setup/07-cleanup.sh
@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+# shellcheck shell=bash
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+##@Version           :  202606261156-git
+# @@Author           :  CasjaysDev
+# @@Contact          :  CasjaysDev <docker-admin@casjaysdev.pro>
+# @@License          :  WTFPL
+# @@Copyright        :  Copyright 2026 CasjaysDev
+# @@Created          :  Fri Jun 26 11:56:35 AM EDT 2026
+# @@File             :  07-cleanup.sh
+# @@Description      :  script to run cleanup
+# @@Changelog        :  newScript
+# @@TODO             :  Refactor code
+# @@Other            :  N/A
+# @@Resource         :  N/A
+# @@Terminal App     :  yes
+# @@sudo/root        :  yes
+# @@Template         :  templates/dockerfiles/init_scripts/07-cleanup.sh
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# shellcheck disable=SC1001,SC1003,SC2001,SC2003,SC2016,SC2031,SC2090,SC2115,SC2120,SC2155,SC2199,SC2229,SC2317,SC2329
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set bash options
+set -eo pipefail
+[ "$DEBUGGER" = "on" ] && echo "Enabling debugging" && set -x$DEBUGGER_OPTIONS
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Load functions
+__find_and_remove() { [ -z "$1" ] || find "${2:-/etc}" -iname "$1" -exec rm -Rf {} + 2>/dev/null; }
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set env variables
+exitCode=0
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Predefined actions
+if [ -d "/tmp" ]; then rm -Rf "/tmp"/*; fi
+if [ -d "$HOME/.cache" ]; then rm -Rf "$HOME/.cache"; fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Main script
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set the exit code
+exitCode=$?
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+exit $exitCode
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# ex: ts=2 sw=2 et filetype=sh
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+
diff --git a/rootfs/usr/local/bin/entrypoint.sh b/rootfs/usr/local/bin/entrypoint.sh
new file mode 100755
index 0000000..60159f7
--- /dev/null
+++ b/rootfs/usr/local/bin/entrypoint.sh
@@ -0,0 +1,674 @@
+#!/usr/bin/env bash
+# shellcheck shell=bash
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+##@Version           :  202606041210-git
+# @@Author           :  Jason Hempstead
+# @@Contact          :  jason@casjaysdev.pro
+# @@License          :  WTFPL
+# @@ReadME           :  entrypoint.sh --help
+# @@Copyright        :  Copyright: (c) 2026 Jason Hempstead, Casjays Developments
+# @@Created          :  Friday, Jun 26, 2026 11:56 EDT
+# @@File             :  entrypoint.sh
+# @@Description      :  Entrypoint file for super-productivity
+# @@Changelog        :  New script
+# @@TODO             :  Better documentation
+# @@Other            :  
+# @@Resource         :  
+# @@Terminal App     :  no
+# @@sudo/root        :  no
+# @@Template         :  other/docker-entrypoint
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# shellcheck disable=SC1001,SC1003,SC2001,SC2003,SC2016,SC2031,SC2090,SC2115,SC2120,SC2155,SC2199,SC2229,SC2317,SC2329
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# run trap command on exit
+trap 'retVal=$?;[ "$SERVICE_IS_RUNNING" != "yes" ] && [ -f "$SERVICE_PID_FILE" ] && rm -Rf "$SERVICE_PID_FILE";exit $retVal' INT TERM
+trap 'retVal=$?;[ "$SERVICE_IS_RUNNING" != "yes" ] && [ -f "$SERVICE_PID_FILE" ] && rm -Rf "$SERVICE_PID_FILE";exit $retVal' SIGPWR 2>/dev/null || true
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# setup debugging - https://www.gnu.org/software/bash/manual/html_node/The-Set-Builtin.html
+[ -f "/config/.debug" ] && [ -z "$DEBUGGER_OPTIONS" ] && export DEBUGGER_OPTIONS="$(<"/config/.debug")" || DEBUGGER_OPTIONS="${DEBUGGER_OPTIONS:-}"
+if [ "$DEBUGGER" = "on" ] || [ -f "/config/.debug" ]; then
+  echo "Enabling debugging"
+  set -eo pipefail
+  [ -n "$DEBUGGER_OPTIONS" ] && set -"$DEBUGGER_OPTIONS"
+  export DEBUGGER="on"
+else
+  set -eo pipefail
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+PATH="/usr/local/etc/docker/bin:/usr/local/bin:/usr/bin:/usr/sbin:/bin:/sbin"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set bash options
+SCRIPT_FILE="$0"
+CONTAINER_NAME="super-productivity"
+SCRIPT_NAME="${SCRIPT_FILE##*/}"
+CONTAINER_NAME="${ENV_CONTAINER_NAME:-$CONTAINER_NAME}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# remove whitespaces from beginning argument
+while :; do [ "$1" = " " ] && shift 1 || break; done
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+[ "$1" = "$SCRIPT_FILE" ] && shift 1
+[ "$1" = "$SCRIPT_NAME" ] && shift 1
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# import the functions file
+if [ -f "/usr/local/etc/docker/functions/entrypoint.sh" ]; then
+  . "/usr/local/etc/docker/functions/entrypoint.sh"
+else
+  echo "Can not load functions from /usr/local/etc/docker/functions/entrypoint.sh"
+  exit 1
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+case "$1" in
+# Help message
+-h | --help)
+  shift 1
+  echo "Docker container for $CONTAINER_NAME"
+  echo "Usage: $CONTAINER_NAME [help tail cron exec start init shell procs ports healthcheck backup command]"
+  echo ""
+  exit 0
+  ;;
+-*)
+  shift
+  ;;
+esac
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Create the default env files
+__create_env_file "/config/env/default.sh" "/root/env.sh" &>/dev/null
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# import variables from files
+for set_env in "/root/env.sh" "/usr/local/etc/docker/env"/*.sh "/config/env"/*.sh; do
+  [ -f "$set_env" ] && . "$set_env"
+done
+unset set_env
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# User to use to launch service - IE: postgres
+# normally root
+RUNAS_USER="root"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set user and group from env
+SERVICE_USER="${PUID:-$SERVICE_USER}"
+SERVICE_GROUP="${PGID:-$SERVICE_GROUP}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set user and group ID
+# set the user id
+SERVICE_UID="${SERVICE_UID:-0}"
+# set the group id
+SERVICE_GID="${SERVICE_GID:-0}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# User and group in which the service switches to - IE: nginx,apache,mysql,postgres
+#SERVICE_USER="${SERVICE_USER:-super-productivity}"   # execute command as another user
+#SERVICE_GROUP="${SERVICE_GROUP:-super-productivity}" # Set the service group
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Secondary ports
+# specifiy other ports
+SERVER_PORTS=""
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Primary server port- will be added to server ports
+# port : 80,443
+WEB_SERVER_PORT=""
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Healthcheck variables
+# enable healthcheck [yes/no]
+HEALTH_ENABLED="yes"
+# comma separated list of processes for the healthcheck
+SERVICES_LIST="tini"
+# url endpoints: [http://localhost/health,http://localhost/test]
+HEALTH_ENDPOINTS=""
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Update path var
+export PATH RUNAS_USER SERVICE_USER SERVICE_GROUP SERVICE_UID SERVICE_GID WWW_ROOT_DIR DATABASE_DIR
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Custom variables
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# show message
+__run_message() {
+
+  return
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+################## END OF CONFIGURATION #####################
+# Lets get containers ip address
+IP4_ADDRESS="$(__get_ip4)"
+IP6_ADDRESS="$(__get_ip6)"
+CONTAINER_IP4_ADDRESS="${CONTAINER_IP4_ADDRESS:-$IP4_ADDRESS}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Startup variables
+export INIT_DATE="${INIT_DATE:-$(date)}"
+export CONTAINER_INIT="${CONTAINER_INIT:-no}"
+export START_SERVICES="${START_SERVICES:-no}"
+export ENTRYPOINT_MESSAGE="${ENTRYPOINT_MESSAGE:-yes}"
+export ENTRYPOINT_FIRST_RUN="${ENTRYPOINT_FIRST_RUN:-yes}"
+export DATA_DIR_INITIALIZED="${DATA_DIR_INITIALIZED:-no}"
+export CONFIG_DIR_INITIALIZED="${CONFIG_DIR_INITIALIZED:-no}"
+export CONTAINER_NAME="${ENV_CONTAINER_NAME:-$CONTAINER_NAME}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# System
+export LANG="${LANG:-C.UTF-8}"
+export LC_ALL="${LANG:-C.UTF-8}"
+export TZ="${TZ:-${TIMEZONE:-America/New_York}}"
+export HOSTNAME="$(hostname -s)"
+export DOMAINNAME="$(hostname -d)"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Default directories
+export SSL_DIR="${SSL_DIR:-/config/ssl}"
+export SSL_CA="${SSL_CA:-/config/ssl/ca.crt}"
+export SSL_KEY="${SSL_KEY:-/config/ssl/localhost.pem}"
+export SSL_CERT="${SSL_CERT:-/config/ssl/localhost.crt}"
+export LOCAL_BIN_DIR="${LOCAL_BIN_DIR:-/usr/local/bin}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Backup settings
+export BACKUP_MAX_DAYS="${BACKUP_MAX_DAYS:-}"
+export BACKUP_RUN_CRON="${BACKUP_RUN_CRON:-}"
+export BACKUP_DIR="${BACKUP_DIR:-/data/backups}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Additional
+export PHP_INI_DIR="${PHP_INI_DIR:-$(__find_php_ini)}"
+export PHP_BIN_DIR="${PHP_BIN_DIR:-$(__find_php_bin)}"
+export HTTPD_CONFIG_FILE="${HTTPD_CONFIG_FILE:-$(__find_httpd_conf)}"
+export NGINX_CONFIG_FILE="${NGINX_CONFIG_FILE:-$(__find_nginx_conf)}"
+export MYSQL_CONFIG_FILE="${MYSQL_CONFIG_FILE:-$(__find_mysql_conf)}"
+export PGSQL_CONFIG_FILE="${PGSQL_CONFIG_FILE:-$(__find_pgsql_conf)}"
+export MONGODB_CONFIG_FILE="${MONGODB_CONFIG_FILE:-$(__find_mongodb_conf)}"
+export ENTRYPOINT_PID_FILE="${ENTRYPOINT_PID_FILE:-/run/.entrypoint.pid}"
+export ENTRYPOINT_INIT_FILE="${ENTRYPOINT_INIT_FILE:-/config/.entrypoint.done}"
+export ENTRYPOINT_DATA_INIT_FILE="${ENTRYPOINT_DATA_INIT_FILE:-/data/.docker_has_run}"
+export ENTRYPOINT_CONFIG_INIT_FILE="${ENTRYPOINT_CONFIG_INIT_FILE:-/config/.docker_has_run}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+if [ -n "$CONTAINER_WEB_SERVER_WWW_REPO" ]; then
+  www_temp_dir="/tmp/git/${CONTAINER_WEB_SERVER_WWW_REPO##*/}"
+  rm -Rf "${WWW_ROOT_DIR:?}"/* "${www_temp_dir:?}"/* 2>/dev/null || true
+  mkdir -p "$WWW_ROOT_DIR" "$www_temp_dir" 2>/dev/null || true
+  git clone -q "$CONTAINER_WEB_SERVER_WWW_REPO" "$www_temp_dir" 2>/dev/null || true
+  rm -Rf "$www_temp_dir/.git" "$www_temp_dir"/.git* 2>/dev/null || true
+  rsync -ra "$www_temp_dir/" "$WWW_ROOT_DIR" --delete 2>/dev/null || true
+  rm -Rf "$www_temp_dir" 2>/dev/null || true
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# variables based on env/files
+if [ -f "/config/enable/ssl" ]; then SSL_ENABLED="yes"; fi
+if [ -f "/config/enable/ssh" ]; then SSH_ENABLED="yes"; fi
+if [ "$WEB_SERVER_PORT" = "443" ]; then SSL_ENABLED="yes"; fi
+if [ "$CONTAINER_WEB_SERVER_PROTOCOL" = "https" ]; then SSL_ENABLED="yes"; fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# export variables
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# is already Initialized
+if [ -f "$ENTRYPOINT_DATA_INIT_FILE" ]; then
+  DATA_DIR_INITIALIZED="yes"
+else
+  DATA_DIR_INITIALIZED="no"
+fi
+if [ -f "$ENTRYPOINT_CONFIG_INIT_FILE" ]; then
+  CONFIG_DIR_INITIALIZED="yes"
+else
+  CONFIG_DIR_INITIALIZED="no"
+fi
+if [ -f "$ENTRYPOINT_PID_FILE" ] || [ -f "$ENTRYPOINT_INIT_FILE" ]; then
+  ENTRYPOINT_FIRST_RUN="no"
+else
+  ENTRYPOINT_FIRST_RUN="yes"
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# clean ENV_PORTS variables
+ENV_PORTS="${ENV_PORTS//,/ }"
+ENV_PORTS="${ENV_PORTS//\/*/}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# clean SERVER_PORTS variables
+SERVER_PORTS="${SERVER_PORTS//,/ }"
+SERVER_PORTS="${SERVER_PORTS//\/*/}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# clean WEB_SERVER_PORTS variables
+WEB_SERVER_PORTS="${WEB_SERVER_PORT//,/ } ${ENV_WEB_SERVER_PORTS//,/ }"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# rewrite and merge variables
+ENV_PORTS="$(__format_variables "$ENV_PORTS" || false)"
+WEB_SERVER_PORTS="$(__format_variables "$WEB_SERVER_PORTS" || false)"
+ENV_PORTS="$(__format_variables "$SERVER_PORTS" "$WEB_SERVER_PORTS" "$ENV_PORTS" "$SERVER_PORTS" || false)"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Remove the commas from env
+HEALTH_ENDPOINTS="${HEALTH_ENDPOINTS//,/ }"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# create required directories
+mkdir -p "/run" 2>/dev/null || true
+mkdir -p "/tmp" 2>/dev/null || true
+mkdir -p "/root" 2>/dev/null || true
+mkdir -p "/var/run" 2>/dev/null || true
+mkdir -p "/var/tmp" 2>/dev/null || true
+mkdir -p "/run/cron" 2>/dev/null || true
+mkdir -p "/data/logs" 2>/dev/null || true
+mkdir -p "/run/init.d" 2>/dev/null || true
+mkdir -p "/config/enable" 2>/dev/null || true
+mkdir -p "/config/secure" 2>/dev/null || true
+mkdir -p "/usr/local/etc/docker/exec" 2>/dev/null || true
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# create required files
+touch "/data/logs/start.log" 2>/dev/null || true
+touch "/data/logs/entrypoint.log" 2>/dev/null || true
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# fix permissions
+chmod -f 777 "/run" 2>/dev/null || true
+chmod -f 777 "/tmp" 2>/dev/null || true
+chmod -f 700 "/root" 2>/dev/null || true
+chmod -f 777 "/var/run" 2>/dev/null || true
+chmod -f 777 "/var/tmp" 2>/dev/null || true
+chmod -f 777 "/run/cron" 2>/dev/null || true
+chmod -f 777 "/data/logs" 2>/dev/null || true
+chmod -f 777 "/run/init.d" 2>/dev/null || true
+chmod -f 777 "/config/enable" 2>/dev/null || true
+chmod -f 777 "/config/secure" 2>/dev/null || true
+chmod -f 777 "/data/logs/entrypoint.log" 2>/dev/null || true
+chmod -f 777 "/usr/local/etc/docker/exec" 2>/dev/null || true
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# lets ensure everyone can write to std*
+if [ -f "/dev/stdin" ]; then
+  chmod -f 777 "/dev/stdin" 2>/dev/null || true
+fi
+if [ -f "/dev/stderr" ]; then
+  chmod -f 777 "/dev/stderr" 2>/dev/null || true
+fi
+if [ -f "/dev/stdout" ]; then
+  chmod -f 777 "/dev/stdout" 2>/dev/null || true
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+cat <<EOF 2>/dev/null | tee /etc/profile.d/locales.shadow /etc/profile.d/locales.sh >/dev/null 2>&1 || true
+export LANG="\${LANG:-C.UTF-8}"
+export LC_ALL="\${LANG:-C.UTF-8}"
+export TZ="\${TZ:-\${TIMEZONE:-America/New_York}}"
+EOF
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Create the backup dir
+if [ -n "$BACKUP_DIR" ]; then
+  if [ ! -d "$BACKUP_DIR" ]; then
+    mkdir -p "$BACKUP_DIR" 2>/dev/null || true
+  fi
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+if [ -f "$ENTRYPOINT_INIT_FILE" ]; then
+  ENTRYPOINT_MESSAGE="no" ENTRYPOINT_FIRST_RUN="no"
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+if [ "$ENTRYPOINT_FIRST_RUN" != "no" ]; then
+  if [ "$CONFIG_DIR_INITIALIZED" = "no" ] || [ "$DATA_DIR_INITIALIZED" = "no" ]; then
+    if [ "$ENTRYPOINT_MESSAGE" = "yes" ]; then
+      echo "Executing entrypoint script for super-productivity"
+    fi
+  fi
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  # Set reusable variables
+  if [ -w "/etc" ] && [ ! -f "/etc/hosts" ]; then
+    UPDATE_FILE_HOSTS="yes"
+    touch "/etc/hosts"
+  elif [ -w "/etc/hosts" ]; then
+    UPDATE_FILE_HOSTS="yes"
+    touch "/etc/hosts"
+  fi
+  if [ -w "/etc" ] && [ ! -f "/etc/timezone" ]; then
+    UPDATE_FILE_TZ="yes"
+    touch "/etc/timezone"
+  elif [ -w "/etc/timezone" ]; then
+    UPDATE_FILE_TZ="yes"
+    touch "/etc/timezone"
+  fi
+  if [ -w "/etc" ] && [ ! -f "/etc/resolv.conf" ]; then
+    UPDATE_FILE_RESOLV="yes"
+    touch "/etc/resolv.conf"
+  elif [ -w "/etc/resolv.conf" ]; then
+    UPDATE_FILE_RESOLV="yes"
+    touch "/etc/resolv.conf"
+  fi
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  # Set timezone
+  if [ -n "$TZ" ] && [ "$UPDATE_FILE_TZ" = "yes" ]; then
+    echo "$TZ" >"/etc/timezone" 2>/dev/null || true
+  fi
+  if [ -f "/usr/share/zoneinfo/$TZ" ] && [ "$UPDATE_FILE_TZ" = "yes" ]; then
+    ln -sf "/usr/share/zoneinfo/$TZ" "/etc/localtime" 2>/dev/null || true
+  fi
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  # if ipv6 add it to /etc/hosts
+  if [ "$UPDATE_FILE_HOSTS" = "yes" ]; then
+    echo "# known hostname mappings" >"/etc/hosts" 2>/dev/null || true
+    if [ -n "$(ip a 2>/dev/null | grep 'inet6.*::' || ifconfig 2>/dev/null | grep 'inet6.*::')" ]; then
+      __printf_space "40" "::1" "localhost" >>"/etc/hosts" 2>/dev/null || true
+      __printf_space "40" "127.0.0.1" "localhost" >>"/etc/hosts" 2>/dev/null || true
+    else
+      __printf_space "40" "127.0.0.1" "localhost" >>"/etc/hosts" 2>/dev/null || true
+    fi
+  fi
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  # add .internal domain
+  if [ "$UPDATE_FILE_HOSTS" = "yes" ] && [ -n "$HOSTNAME" ]; then
+    if ! __grep_test " $HOSTNAME" "/etc/hosts"; then
+      __printf_space "40" "${CONTAINER_IP4_ADDRESS:-127.0.0.1}" "$HOSTNAME" >>"/etc/hosts" 2>/dev/null || true
+    fi
+    if ! __grep_test " ${HOSTNAME%%.*}.internal" "/etc/hosts"; then
+      __printf_space "40" "${CONTAINER_IP4_ADDRESS:-127.0.0.1}" "${HOSTNAME%%.*}.internal" >>"/etc/hosts" 2>/dev/null || true
+    fi
+  fi
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  # add domainname
+  if [ "$UPDATE_FILE_HOSTS" = "yes" ] && [ "$DOMAINNAME" != "internal" ] && [ -n "$DOMAINNAME" ] && [ "$HOSTNAME.$DOMAINNAME" != "$DOMAINNAME" ]; then
+    if ! __grep_test " ${HOSTNAME%%.*}.$DOMAINNAME" "/etc/hosts"; then
+      __printf_space "40" "${CONTAINER_IP4_ADDRESS:-127.0.0.1}" "${HOSTNAME%%.*}.$DOMAINNAME" >>"/etc/hosts" 2>/dev/null || true
+    fi
+  fi
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  # Set containers hostname
+  if [ -n "$HOSTNAME" ] && [ "$UPDATE_FILE_HOSTS" = "yes" ]; then
+    echo "$HOSTNAME" >"/etc/hostname" 2>/dev/null || true
+  fi
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  if [ -f "/etc/hostname" ]; then
+    if command -v hostname &>/dev/null; then
+      hostname -F "/etc/hostname" 2>/dev/null || true
+    else
+      HOSTNAME="$(<"/etc/hostname")" 2>/dev/null || true
+    fi
+    export HOSTNAME
+  fi
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  # import hosts file into container
+  if [ -f "/usr/local/etc/hosts" ] && [ "$UPDATE_FILE_HOSTS" = "yes" ]; then
+    grep -vF "$HOSTNAME" "/usr/local/etc/hosts" 2>/dev/null >>"/etc/hosts" || true
+  fi
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  # import resolv.conf file into container
+  if [ "$CUSTOM_DNS" != "yes" ] && [ -f "/usr/local/etc/resolv.conf" ] && [ "$UPDATE_FILE_RESOLV" = "yes" ]; then
+    cp -f "/usr/local/etc/resolv.conf" "/etc/resolv.conf" 2>/dev/null || true
+  fi
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  if [ -n "$HOME" ] && [ -d "/usr/local/etc/skel" ]; then
+    if [ -d "$HOME" ]; then
+      cp -Rf "/usr/local/etc/skel/." "$HOME/" 2>/dev/null || true
+    fi
+  fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Delete any .gitkeep files (bash * does not match dotfiles by default,
+# so the explicit /.gitkeep path is required at each depth)
+if [ -d "/data" ]; then
+  rm -Rf "/data/.gitkeep" "/data"/*/.gitkeep 2>/dev/null || true
+fi
+if [ -d "/config" ]; then
+  rm -Rf "/config/.gitkeep" "/config"/*/.gitkeep 2>/dev/null || true
+fi
+if [ -f "/usr/local/bin/.gitkeep" ]; then
+  rm -Rf "/usr/local/bin/.gitkeep" 2>/dev/null || true
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Only run initialization on first run or when directories are not initialized
+if [ "$ENTRYPOINT_FIRST_RUN" != "no" ] || [ "$CONFIG_DIR_INITIALIZED" = "no" ] || [ "$DATA_DIR_INITIALIZED" = "no" ]; then
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  # Setup bin directory - /config/bin > /usr/local/bin
+  __initialize_custom_bin_dir
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  # Initialize SSL certificates
+  __initialize_ssl_certs
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  # Mark directories as initialized (only write if not already initialized)
+  if [ -d "/config" ] && [ "$CONFIG_DIR_INITIALIZED" = "no" ]; then
+    echo "Initialized on: $INIT_DATE" >"$ENTRYPOINT_CONFIG_INIT_FILE" 2>/dev/null || true
+    CONFIG_DIR_INITIALIZED="yes"
+  fi
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  if [ -d "/data" ] && [ "$DATA_DIR_INITIALIZED" = "no" ]; then
+    echo "Initialized on: $INIT_DATE" >"$ENTRYPOINT_DATA_INIT_FILE" 2>/dev/null || true
+    DATA_DIR_INITIALIZED="yes"
+  fi
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  if [ -d "/config" ] && [ ! -f "$ENTRYPOINT_INIT_FILE" ]; then
+    echo "Initialized on: $INIT_DATE" >"$ENTRYPOINT_INIT_FILE" 2>/dev/null || true
+  fi
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  # setup the smtp server
+  __setup_mta
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  ENTRYPOINT_FIRST_RUN="no"
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# if no pid assume container restart - clean stale files on restart
+if [ -f "$ENTRYPOINT_PID_FILE" ]; then
+  # Check if the PID in the file is still running
+  entrypoint_pid=$(<"$ENTRYPOINT_PID_FILE") 2>/dev/null
+  if [ -n "$entrypoint_pid" ] && kill -0 "$entrypoint_pid" 2>/dev/null; then
+    # Process is still running, don't restart services
+    START_SERVICES="no"
+    touch "$ENTRYPOINT_PID_FILE"
+  else
+    # PID file exists but process is dead - this is a restart
+    START_SERVICES="yes"
+    # Clean any stale PID files on restart
+    rm -f /run/.start_init_scripts.pid /run/init.d/*.pid /run/*.pid 2>/dev/null || true
+  fi
+else
+  START_SERVICES=yes
+  # Clean any stale PID files on first run
+  rm -f /run/.start_init_scripts.pid /run/init.d/*.pid /run/*.pid 2>/dev/null || true
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+[ "$ENTRYPOINT_MESSAGE" = "yes" ] && __printf_space "40" "The containers ip address is:" "$CONTAINER_IP4_ADDRESS"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Show configured listing processes
+if [ "$ENTRYPOINT_MESSAGE" = "yes" ] && [ -n "$ENV_PORTS" ]; then
+  show_port=""
+  for port in $ENV_PORTS; do [ -n "$port" ] && show_port+="$(printf '%s ' "${port// /}") "; done
+  __printf_space "40" "The following ports are open:" "$show_port"
+  unset port show_port
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# execute init script
+if [ -f "/tmp/init" ]; then sh "/tmp/init"; fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# create user if needed
+__create_service_user "$SERVICE_USER" "$SERVICE_GROUP" "${WORK_DIR:-/home/$SERVICE_USER}" "${SERVICE_UID:-}" "${SERVICE_GID:-}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Modify user if needed
+__set_user_group_id $SERVICE_USER ${SERVICE_UID:-} ${SERVICE_GID:-}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Show message
+__run_message
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Just start services
+START_SERVICES="${START_SERVICES:-yes}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Determine if we should start services based on command
+# Only skip service start for the 'init' command
+SKIP_SERVICE_START="no"
+[ "$1" = "init" ] && SKIP_SERVICE_START="yes" && CONTAINER_INIT="yes"
+[ "$2" = "init" ] && SKIP_SERVICE_START="yes" && CONTAINER_INIT="yes"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Start all services if no pidfile and not skipping
+if [ "$START_SERVICES" = "yes" ] || [ -z "$1" ]; then
+  if [ "$SKIP_SERVICE_START" = "no" ]; then
+    [ "$1" = "start" ] && shift 1
+    [ "$1" = "all" ] && shift 1
+    rm -Rf "/run"/*/*pid 2>/dev/null || true
+    echo "$$" >"$ENTRYPOINT_PID_FILE"
+    __start_init_scripts "/usr/local/etc/docker/init.d"
+    CONTAINER_INIT="${CONTAINER_INIT:-no}"
+    # Services started successfully - enter monitoring mode
+    __no_exit
+    exit $?
+  fi
+  START_SERVICES="no"
+fi
+export START_SERVICES CONTAINER_INIT ENTRYPOINT_PID_FILE
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Begin options
+case "$1" in
+init)
+  shift 1
+  __log_info "Container has been initialized"
+  exit 0
+  ;;
+tail)
+  shift 1
+  case "$1" in
+  null)
+    shift $#
+    tail -F "/dev/null"
+    ;;
+  app)
+    shift $#
+    tail -F /data/logs/*/*.log
+    ;;
+  -*)
+    tail "$@"
+    ;;
+  *)
+    tail -F "${@:-/dev/null}"
+    ;;
+  esac
+  ;;
+logs)
+  shift 1
+  case "$1" in
+  follow)
+    tail -Fq /data/logs/*/*
+    ;;
+  clean)
+    mapfile -t log_files < <(find "/data/logs" -type f 2>/dev/null)
+    for log in "${log_files[@]}"; do
+      __log_info "Clearing log file: $log"
+      printf '' >"$log"
+    done
+    ;;
+  *)
+    echo "Usage: logs [follow,clean]"
+    exit 0
+    ;;
+  esac
+  ;;
+cron)
+  shift 1
+  __cron "$@" &
+  __log_info "Cron script is running with PID: $!"
+  exit
+  ;;
+# backup data and config dirs
+backup)
+  shift 1
+  __backup $BACKUP_MAX_DAYS $1
+  exit $?
+  ;;
+# Docker healthcheck
+healthcheck)
+  shift 1
+  case "$1" in
+  init | test)
+    exit 0
+    ;;
+  *)
+    arguments="$*"
+    healthStatus=0
+    healthEnabled="${HEALTH_ENABLED:-}"
+    healthPorts="${WEB_SERVER_PORTS:-}"
+    healthEndPoints="${HEALTH_ENDPOINTS:-}"
+    SERVICES_LIST="${arguments:-$SERVICES_LIST}"
+    services="${SERVICES_LIST//,/ }"
+    healthMessage="Everything seems to be running"
+    [ "$healthEnabled" = "yes" ] || exit 0
+    if [ -d "/run/healthcheck" ] && ! __is_dir_empty "/run/healthcheck"; then
+      for service in /run/healthcheck/*; do
+        name="${service##*/}"
+        services+="$name "
+      done
+    fi
+    services="$(printf '%s\n' $services | sort -u | grep -v '^$')"
+    for proc in $services; do
+      if [ -n "$proc" ]; then
+        if ! __pgrep "$proc"; then
+          echo "$proc is not running" >&2
+          healthStatus=$((healthStatus + 1))
+        fi
+      fi
+    done
+    for port in $healthPorts; do
+      if command -v netstat &>/dev/null && [ -n "$port" ]; then
+        if ! netstat -taupln | grep -q ":$port "; then
+          echo "$port isn't open" >&2
+          healthStatus=$((healthStatus + 1))
+        fi
+      fi
+    done
+    for endpoint in $healthEndPoints; do
+      if [ -n "$endpoint" ]; then
+        if ! __curl "$endpoint"; then
+          echo "Can not connect to $endpoint" >&2
+          healthStatus=$((healthStatus + 1))
+        fi
+      fi
+    done
+    [ "$healthStatus" -eq 0 ] || healthMessage="Errors reported see: docker logs --follow $CONTAINER_NAME"
+    [ -n "$healthMessage" ] && echo "$healthMessage"
+    exit $healthStatus
+    ;;
+  esac
+  ;;
+  # show open ports
+ports)
+  shift 1
+  ports="$(__netstat -taupln 2>/dev/null | awk '{ split($4, a, ":"); if (a[2] != "") print a[2] }' | sort -uV)"
+  [ -n "$ports" ] && printf '%s\n%s\n' "The following are servers:" "$ports" | tr '\n' ' '
+  exit $?
+  ;;
+  # show running processes
+procs)
+  shift 1
+  ps="$(__ps axco command 2>/dev/null | grep -vE '^(COMMAND|grep|ps)$' | sort -u)"
+  [ -n "$ps" ] && printf '%s\n%s\n' "Found the following processes" "$ps" | tr '\n' ' '
+  exit $?
+  ;;
+# Launch shell
+*/bin/sh | */bin/bash | bash | sh | shell)
+  shift 1
+  __exec_command "${@:-/bin/bash -l}"
+  exit $?
+  ;;
+# execute commands
+exec)
+  shift 1
+  __exec_command "${@:-echo "No commands given"}"
+  exit $?
+  ;;
+# show/start init scripts
+start)
+  shift 1
+  export PATH="/usr/local/etc/docker/init.d:$PATH"
+  if [ $# -eq 0 ]; then
+    scripts="$(ls -A "/usr/local/etc/docker/init.d")"
+    [ -n "$scripts" ] && echo "$scripts" || echo "No scripts found in: /usr/local/etc/docker/init.d"
+    exit
+  elif [ "$1" = "all" ]; then
+    shift $#
+    if [ "$START_SERVICES" = "yes" ]; then
+      echo "$$" >"$ENTRYPOINT_PID_FILE"
+      __start_init_scripts "/usr/local/etc/docker/init.d"
+      __no_exit
+    elif [ -f "/usr/local/etc/docker/init.d/$1" ]; then
+      eval "/usr/local/etc/docker/init.d/$1" &
+      __no_exit
+    fi
+  fi
+  ;;
+# Execute primary command
+*)
+  if [ $# -eq 0 ]; then
+    if [ ! -f "$ENTRYPOINT_PID_FILE" ]; then
+      echo "$$" >"$ENTRYPOINT_PID_FILE"
+      [ "$START_SERVICES" = "no" ] && [ "$CONTAINER_INIT" = "yes" ] || __start_init_scripts "/usr/local/etc/docker/init.d"
+    fi
+    __no_exit
+  else
+    __exec_command "$@"
+  fi
+  exit $?
+  ;;
+esac
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# end of entrypoint
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+
+# ex: ts=2 sw=2 et filetype=sh
diff --git a/rootfs/usr/local/bin/pkmgr b/rootfs/usr/local/bin/pkmgr
new file mode 100755
index 0000000..bebefdb
--- /dev/null
+++ b/rootfs/usr/local/bin/pkmgr
@@ -0,0 +1,143 @@
+#!/usr/bin/env sh
+# shellcheck shell=sh
+# shellcheck disable=SC2016
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+USER_UID="$(id -u)"
+USER_GID="$(id -g)"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+if [ -x "$(command -v apt 2>/dev/null)" ]; then
+  export DEBIAN_FRONTEND=noninteractive
+  pkmgr_cmd="apt"
+  pkmgr_clean_cmd="$pkmgr_cmd clean"
+  pkmgr_mkcache_cmd="$pkmgr_cmd update"
+  pkmgr_update_cmd="$pkmgr_cmd upgrade -yy"
+  pkmgr_install_cmd="$pkmgr_cmd install -yy $PKMGR_OPTS"
+  pkmgr_install_post="$pkmgr_cmd --fix-broken install"
+elif [ -x "$(command -v apt-get 2>/dev/null)" ]; then
+  export DEBIAN_FRONTEND=noninteractive
+  pkmgr_cmd="apt-get"
+  pkmgr_clean_cmd="$pkmgr_cmd clean"
+  pkmgr_mkcache_cmd="$pkmgr_cmd update"
+  pkmgr_update_cmd="$pkmgr_cmd upgrade -yy"
+  pkmgr_install_cmd="$pkmgr_cmd install -yy $PKMGR_OPTS"
+  pkmgr_install_post="$pkmgr_cmd --fix-broken install"
+elif [ -x "$(command -v dnf 2>/dev/null)" ]; then
+  pkmgr_cmd="dnf"
+  pkmgr_clean_cmd="$pkmgr_cmd clean all"
+  pkmgr_mkcache_cmd="$pkmgr_cmd makecache"
+  pkmgr_update_cmd="$pkmgr_cmd update -y --skip-broken $PKMGR_OPTS"
+  pkmgr_install_cmd="$pkmgr_cmd install -y --skip-broken $PKMGR_OPTS"
+elif [ -x "$(command -v yum 2>/dev/null)" ]; then
+  pkmgr_cmd="yum"
+  pkmgr_clean_cmd="$pkmgr_cmd clean all"
+  pkmgr_mkcache_cmd="$pkmgr_cmd makecache"
+  pkmgr_update_cmd="$pkmgr_cmd update -y --skip-broken $PKMGR_OPTS"
+  pkmgr_install_cmd="$pkmgr_cmd install -y --skip-broken $PKMGR_OPTS"
+elif [ -n "$(command -v pacman 2>/dev/null)" ]; then
+  pkmgr_cmd="pacman"
+  pkmgr_mkcache_cmd="true"
+  pkmgr_clean_cmd="$pkmgr_cmd -Scc --noconfirm"
+  pkmgr_update_cmd="$pkmgr_cmd -Syyu --noconfirm $PKMGR_OPTS"
+  pkmgr_install_cmd="$pkmgr_cmd -Syy --noconfirm $PKMGR_OPTS"
+elif [ -x "$(command -v apk 2>/dev/null)" ]; then
+  pkmgr_cmd="apk"
+  pkmgr_mkcache_cmd="true"
+  pkmgr_clean_cmd="$pkmgr_cmd cache clean"
+  pkmgr_update_cmd="$pkmgr_cmd -U upgrade --no-cache $PKMGR_OPTS"
+  pkmgr_install_cmd="$pkmgr_cmd add --no-cache $PKMGR_OPTS"
+elif [ -x "$(command -v zypper 2>/dev/null)" ]; then
+  pkmgr_cmd="zypper"
+  pkmgr_mkcache_cmd="true"
+  pkmgr_clean_cmd="$pkmgr_cmd clean --all"
+  pkmgr_update_cmd="$pkmgr_cmd update -y $PKMGR_OPTS"
+  pkmgr_install_cmd="$pkmgr_cmd install -y $PKMGR_OPTS"
+else
+  pkmgr_cmd="true"
+  pkmgr_mkcache_cmd="$pkmgr_cmd"
+  pkmgr_clean_cmd="$pkmgr_cmd"
+  pkmgr_update_cmd="$pkmgr_cmd"
+  pkmgr_install_cmd="$pkmgr_cmd"
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+if [ -f "/config/pkmgr/settings.conf" ]; then
+  . "/config/pkmgr/settings.conf"
+elif [ -f "/etc/pkmgr/settings.conf" ]; then
+  . "/etc/pkmgr/settings.conf"
+else
+  mkdir -p "/config/pkmgr"
+  cat <<EEOF >"/config/pkmgr/settings.conf"
+pkmgr_cmd="$pkmgr_cmd"
+pkmgr_clean_cmd="$pkmgr_clean_cmd"
+pkmgr_update_cmd="$pkmgr_update_cmd"
+pkmgr_install_cmd="$pkmgr_install_cmd"
+pkmgr_mkcache_cmd="$pkmgr_mkcache_cmd"
+EEOF
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+[ -n "$pkmgr_cmd" ] || { echo "Can not determine the package manager" && exit 1; }
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+case "$1" in
+pip)
+  shift 1
+  pip_bin="$(command -v python3 2>/dev/null || command -v python2 2>/dev/null || command -v python 2>/dev/null || echo "")"
+  py_version="$($pip_bin --version | sed 's|[pP]ython ||g' | awk -F '.' '{print $1$2}' | grep '[0-9]' || echo "0")"
+  [ "$py_version" -gt "310" ] && pip_opts="--break-system-packages " || pip_opts=""
+  case "$1" in
+  install)
+    shift 1
+    pkg_list="$*"
+    for pkg in $pkg_list; do
+      $pip_bin -m pip $pip_opts "$pkg"
+    done
+    ;;
+  *)
+    for pkg in "$@"; do
+      $pip_bin -m pip "$pkg"
+    done
+    ;;
+  esac
+  exit
+  ;;
+install)
+  shift 1
+  [ -n "$1" ] || exit 0
+  [ "$USER_UID" -eq 0 ] || [ "$USER" = "root" ] || pkmgr_install_cmd="sudo $pkmgr_install_cmd"
+  if [ -f "$1" ]; then
+    install_list="$(tr '\n' ' ' < "$1")"
+  else
+    install_list="$*"
+  fi
+  for pkg in $install_list;do
+    echo "installing packages command: $pkmgr_install_cmd $pkg"
+    $pkmgr_install_cmd $pkg
+    if [ -n "$pkmgr_install_post" ]; then eval $pkmgr_install_post; fi
+  done
+  exit
+  ;;
+update | upgrade)
+  shift $#
+  [ "$USER_UID" -eq 0 ] || [ "$USER" = "root" ] || pkmgr_update_cmd="sudo $pkmgr_install_cmd"
+  echo "Updating packages command: $pkmgr_update_cmd"
+  $pkmgr_mkcache_cmd
+  $pkmgr_update_cmd
+  exit $?
+  ;;
+clean)
+  shift $#
+  [ -n "$1" ] || exit 0
+  [ "$USER_UID" -eq 0 ] || [ "$USER" = "root" ] || pkmgr_clean_cmd="sudo $pkmgr_clean_cmd"
+  echo "Cleaning package cache: $pkmgr_clean_cmd"
+  $pkmgr_clean_cmd
+  exit $?
+  ;;
+*)
+  [ -n "$1" ] || exit 0
+  [ "$USER_UID" -eq 0 ] || [ "$USER" = "root" ] || pkmgr_cmd="sudo $pkmgr_cmd"
+  echo "executing packages command: $pkmgr_cmd $*"
+  $pkmgr_cmd "$@"
+  exit $?
+  ;;
+esac
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# end
+
diff --git a/rootfs/usr/local/etc/docker/functions/entrypoint.sh b/rootfs/usr/local/etc/docker/functions/entrypoint.sh
new file mode 100644
index 0000000..3e62e2a
--- /dev/null
+++ b/rootfs/usr/local/etc/docker/functions/entrypoint.sh
@@ -0,0 +1,1624 @@
+#!/usr/bin/env bash
+# shellcheck shell=bash
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+##@Version           :  202606051249-git
+# @@Author           :  Jason Hempstead
+# @@Contact          :  git-admin@casjaysdev.pro
+# @@License          :  LICENSE.md
+# @@ReadME           :  docker-entrypoint --help
+# @@Copyright        :  Copyright: (c) 2023 Jason Hempstead, Casjays Developments
+# @@Created          :  Sunday, Sep 03, 2023 01:40 EDT
+# @@File             :  docker-entrypoint
+# @@Description      :  functions for my docker containers
+# @@Changelog        :  newScript
+# @@TODO             :  Refactor code
+# @@Other            :
+# @@Resource         :
+# @@Terminal App     :  no
+# @@sudo/root        :  no
+# @@Template         :  functions/docker-entrypoint
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# shellcheck disable=SC1001,SC1003,SC2001,SC2003,SC2016,SC2031,SC2090,SC2115,SC2120,SC2155,SC2199,SC2229,SC2317,SC2329
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# setup debugging - https://www.gnu.org/software/bash/manual/html_node/The-Set-Builtin.html
+if [ -f "/config/.debug" ] && [ -z "$DEBUGGER_OPTIONS" ]; then
+  export DEBUGGER_OPTIONS="$(<"/config/.debug")"
+fi
+if [ "$DEBUGGER" = "on" ] || [ -f "/config/.debug" ]; then
+  set -eo pipefail
+  [ -n "$DEBUGGER_OPTIONS" ] && set -"$DEBUGGER_OPTIONS"
+  export DEBUGGER="on"
+else
+  set -eo pipefail
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__remove_extra_spaces() { sed -E 's/  +/ /g; s|^ ||'; }
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__log_debug() {
+  [ "$DEBUGGER" = "on" ] && echo "[DEBUG] $*" >&2
+}
+__log_info() {
+  echo "[INFO] $*"
+}
+__log_warn() {
+  echo "[WARN] $*" >&2
+}
+__log_error() {
+  echo "[ERROR] $*" >&2
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__printf_space() {
+  local pad=$(printf '%0.1s' " "{1..60})
+  local padlength=$1
+  local string1="$2"
+  local string2="$3"
+  local message
+  message+="$(printf '%s' "$string1") "
+  message+="$(printf '%*.*s' 0 $((padlength - ${#string1} - ${#string2})) "$pad") "
+  message+="$(printf '%s\n' "$string2") "
+  printf '%s\n' "$message"
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__mkdir() {
+  if [ -n "$1" ]; then
+    if ! mkdir -p "$@" 2>/dev/null; then
+      [ "$DEBUGGER" = "on" ] && echo "Warning: Failed to create directory: $*" >&2
+      return 1
+    fi
+  fi
+  return 0
+}
+__rm() {
+  if [ -n "$1" ] && [ -e "$1" ]; then
+    if ! rm -Rf "${1:?}" 2>/dev/null; then
+      [ "$DEBUGGER" = "on" ] && echo "Warning: Failed to remove: $1" >&2
+      return 1
+    fi
+  fi
+  return 0
+}
+__grep_test() { grep -sh "$1" "$2" 2>/dev/null | grep -qwF "${3:-$1}"; }
+__netstat() {
+  command -v netstat &>/dev/null || {
+    [ "$DEBUGGER" = "on" ] && echo "Warning: netstat command not found" >&2
+    return 10
+  }
+  netstat "$@" 2>/dev/null
+}
+__cd() {
+  [ -d "$1" ] || mkdir -p "$1" 2>/dev/null || return 1
+  builtin cd "$1" || return 1
+}
+__is_in_file() { [ -e "$2" ] && grep -Rsq "$1" "$2" 2>/dev/null; }
+__curl() { curl -q -sfI --max-time 3 -k -o /dev/null "$@" 2>/dev/null || return 10; }
+__find() {
+  local result
+  result=$(find "$1" -mindepth 1 -type "${2:-f,d}" 2>/dev/null)
+  [ -n "$result" ] || return 10
+  printf '%s\n' "$result"
+}
+__pcheck() {
+  command -v pgrep &>/dev/null && pgrep -x "$1" &>/dev/null || return 10
+}
+__file_exists_with_content() { [ -n "$1" ] && [ -f "$1" ] && [ -s "$1" ] || return 2; }
+__sed() { sed -i "s|$1|$2|g" "$3" 2>/dev/null || return 1; }
+__ps() {
+  command -v ps &>/dev/null || return 10
+  ps "$@" 2>/dev/null | sed 's|:||g' | grep -Fw " ${1:-$SERVICE_NAME}$" || return 10
+}
+__is_dir_empty() {
+  [ -n "$1" ] && [ -d "$1" ] || return 1
+  [ -z "$(ls -A "$1" 2>/dev/null)" ]
+}
+__get_ip6() {
+  ip a 2>/dev/null | awk '/^[[:space:]]*inet6 / {
+    split($2, a, "/"); ip = a[1]
+    if (ip !~ /^::1$/ && ip !~ /^fe/) { print ip; exit }
+  }'
+}
+__get_ip4() {
+  local ip4
+  ip4=$(ip a 2>/dev/null | awk '/^[[:space:]]*inet / {
+    split($2, a, "/"); ip = a[1]
+    if (ip !~ /^127\.0\.0/) { print ip; exit }
+  }')
+  echo "${ip4:-127.0.0.1}"
+}
+__find_and_remove() {
+  find "${2:-/etc}" -iname "$1" -exec rm -Rfv {} \; 2>/dev/null || true
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__pgrep() {
+  local srvc="$1" count=3
+  [ -z "$srvc" ] && return 10
+  while [ $count -ge 0 ]; do
+    pgrep -x "$srvc" &>/dev/null && return 0
+    pgrep -f "$srvc" &>/dev/null && return 0
+    ps -eo comm 2>/dev/null | grep -qxF "$srvc" && return 0
+    [ $count -gt 0 ] && sleep 1
+    count=$((count - 1))
+  done
+  return 10
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__find_file_relative() {
+  [ -e "$1" ] || return 0
+  find "$1"/* -not -path '*env/*' -not -path '*/.git/*' -not -name '.git' -type f 2>/dev/null \
+    | sort -u \
+    | sed "s|^$1/||" || true
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__find_directory_relative() {
+  [ -d "$1" ] || return 0
+  find "$1"/* -not -path '*env/*' -not -path '*/.git/*' -not -name '.git' -type d 2>/dev/null \
+    | sort -u \
+    | sed "s|^$1/||" || true
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__pid_exists() { [ -n "$1" ] && [ -d "/proc/$1" ]; }
+__is_running() {
+  local pat="$1"
+  [ -n "$2" ] && pat="$pat.*$2"
+  if command -v pgrep &>/dev/null; then
+    pgrep -f "$pat" &>/dev/null
+  else
+    ps -eo args 2>/dev/null | grep -v grep | grep -Eq "$pat"
+  fi
+}
+__get_pid() {
+  if [ -z "$1" ]; then
+    [ "$DEBUGGER" = "on" ] && echo "Warning: __get_pid called without process name" >&2
+    return 1
+  fi
+  local pid
+  pid=$(pgrep -x -n "$1" 2>/dev/null)
+  if [ -n "$pid" ]; then
+    echo "$pid"
+    return 0
+  fi
+  [ "$DEBUGGER" = "on" ] && echo "Debug: No PID found for process: $1" >&2
+  return 1
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__format_variables() {
+  local input="${*//,/ }"
+  [ -z "$input" ] && return 0
+  printf '%s\n' $input | sort -Ru | tr '\n' ' '
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__clean_variables() {
+  local var="$*"
+  var="${var#"${var%%[![:space:]]*}"}"
+  var="${var%"${var##*[![:space:]]}"}"
+  while [[ $var == *"  "* ]]; do var="${var//  / }"; done
+  [ -n "$var" ] && printf '%s' "$var"
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__no_exit() {
+  local monitor_interval="${SERVICE_MONITOR_INTERVAL:-60}"
+  local failure_threshold="${SERVICE_FAILURE_THRESHOLD:-3}"
+  local monitor_services="${SERVICES_LIST:-tini}"
+  local failed_services=""
+  local failure_count=0
+
+  # only return early if the recorded PID is still alive; a leftover
+  # pid file from a prior container life (docker restart) would otherwise
+  # cause us to exit instead of entering the monitor loop.
+  if [ -f "/run/.no_exit.pid" ]; then
+    local no_exit_pid
+    no_exit_pid=$(<"/run/.no_exit.pid") 2>/dev/null
+    if [ -n "$no_exit_pid" ] && kill -0 "$no_exit_pid" 2>/dev/null; then
+      return 0
+    fi
+    rm -f /run/.no_exit.pid 2>/dev/null || true
+  fi
+
+  exec bash -c "
+    trap 'echo \"Container shutdown requested\"; rm -f /run/.no_exit.pid /run/*.pid; exit 0' TERM INT
+    echo \$\$ > /run/.no_exit.pid
+    failed_services=\"\"
+    failure_count=0
+
+    while true; do
+      if [ -n \"$monitor_services\" ] && [ \"$monitor_services\" != \"tini\" ]; then
+        for service in \$(echo \"$monitor_services\" | tr ',' ' '); do
+          if [ \"\$service\" != \"tini\" ] && ! pgrep -x \"\$service\" >/dev/null 2>&1; then
+            echo \"WARNING: Service \$service is not running\" >&2
+            failed_services=\"\$failed_services \$service\"
+            failure_count=\$((failure_count + 1))
+          fi
+        done
+
+        if [ \$failure_count -ge $failure_threshold ]; then
+          echo \"ERROR: Too many service failures (\$failure_count), exiting container\" >&2
+          exit 1
+        fi
+
+        if [ -n \"\$failed_services\" ]; then
+          echo \"WARNING: Failed services:\$failed_services\" >&2
+          failed_services=\"\"
+          failure_count=0
+        fi
+      fi
+
+      sleep $monitor_interval & wait \$!
+    done
+  "
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__trim() {
+  local var="${*//;/ }"
+  var="${var#"${var%%[![:space:]]*}"}"
+  var="${var%"${var##*[![:space:]]}"}"
+  while [[ $var == *"  "* ]]; do var="${var//  / }"; done
+  [ -n "$var" ] && printf '%s' "$var"
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__banner() {
+  local message="$*"
+  local total_width=80
+  # Account for "# - - - " and " - - - #"
+  local content_width=$((total_width - 14))
+  printf '# - - - %-*s - - - #\n' "$content_width" "$message"
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__service_banner() {
+  local icon="${1:-🔧}"
+  local message="${2:-Processing}"
+  local service="${3:-service}"
+  local full_message="$message $service"
+  local total_width=80
+  # Account for "# - - - " and " - - - #"
+  local content_width=$((total_width - 14))
+  # Most emojis are 2 chars wide
+  local icon_width=2
+  # Account for both icons and spaces
+  local text_width=$((content_width - icon_width * 2 - 2))
+  printf '# - - - %s %-*s %s - - - #\n' "$icon" "$text_width" "$full_message" "$icon"
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__find_php_bin() {
+  command -v php-fpm &>/dev/null || command -v php &>/dev/null || return 0
+  find -L '/usr'/*bin -maxdepth 4 -name 'php-fpm*' 2>/dev/null | head -n1
+}
+__find_php_ini() {
+  command -v php &>/dev/null || return 0
+  local f
+  f=$(find -L '/etc' -maxdepth 4 -name 'php.ini' 2>/dev/null | head -n1)
+  [ -n "$f" ] && printf '%s\n' "${f%/php.ini}"
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__find_nginx_conf() {
+  command -v nginx &>/dev/null || return 0
+  find -L '/etc' -maxdepth 4 -name 'nginx.conf' 2>/dev/null | head -n1
+}
+__find_caddy_conf() {
+  command -v caddy &>/dev/null || return 0
+  find -L '/etc' -maxdepth 4 -type f -iname 'caddy.conf' 2>/dev/null | head -n1
+}
+__find_lighttpd_conf() {
+  command -v lighttpd &>/dev/null || return 0
+  find -L '/etc' -maxdepth 4 -type f -iname 'lighttpd.conf' 2>/dev/null | head -n1
+}
+__find_cherokee_conf() {
+  command -v cherokee &>/dev/null || command -v cherokee-admin &>/dev/null || return 0
+  find -L '/etc' -maxdepth 4 -type f -iname 'cherokee.conf' 2>/dev/null | head -n1
+}
+__find_httpd_conf() {
+  command -v httpd &>/dev/null || command -v apache2 &>/dev/null || return 0
+  find -L '/etc' -maxdepth 4 -type f \( -iname 'httpd.conf' -o -iname 'apache2.conf' \) 2>/dev/null | head -n1
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__find_mysql_conf() {
+  command -v mysqld &>/dev/null || command -v mariadbd &>/dev/null || command -v mysql &>/dev/null || return 0
+  find -L '/etc' -maxdepth 4 -type f -name 'my.cnf' 2>/dev/null | head -n1
+}
+__find_pgsql_conf() {
+  command -v postgres &>/dev/null || command -v pg_ctl &>/dev/null || return 0
+  find -L '/var/lib' '/etc' -maxdepth 8 -type f -name 'postgresql.conf' 2>/dev/null | head -n1
+}
+__find_couchdb_conf() {
+  command -v couchdb &>/dev/null || return 0
+  find -L '/opt/couchdb/etc' '/etc/couchdb' -maxdepth 4 -type f \( -name 'local.ini' -o -name 'default.ini' \) 2>/dev/null | head -n1
+}
+__find_mongodb_conf() {
+  command -v mongod &>/dev/null || return 0
+  find -L '/etc/mongodb' '/etc' -maxdepth 4 -type f \( -name 'mongod.conf' -o -name 'mongodb.conf' \) 2>/dev/null | head -n1
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__random_password() { tr -dc '0-9a-zA-Z' < /dev/urandom | head -c${1:-16} && echo ""; }
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__init_working_dir() {
+  # get service name
+  local service_name="$SERVICE_NAME"
+  # expand variables
+  local workdir="$(eval echo "${WORK_DIR:-}")"
+  # expand variables
+  local home="$(eval echo "${workdir//\/root/\/tmp\/docker}")"
+  # set working directories
+  [ "$home" = "$workdir" ] && workdir=""
+  [ "$home" = "/root" ] && home="/tmp/$service_name"
+  [ -z "$home" ] && home="${workdir:-/tmp/$service_name}"
+  # Change to working directory
+  [ -n "$WORK_DIR" ] && [ -n "$EXEC_CMD_BIN" ] && workdir="$WORK_DIR"
+  [ -z "$WORK_DIR" ] && [ "$HOME" = "/root" ] && [ "$RUNAS_USER" != "root" ] && [ "$PWD" != "/tmp" ] && home="${workdir:-$home}"
+  [ -z "$WORK_DIR" ] && [ "$HOME" = "/root" ] && [ "$SERVICE_USER" != "root" ] && [ "$PWD" != "/tmp" ] && home="${workdir:-$home}"
+  # create needed directories
+  if [ -n "$home" ]; then
+    if [ ! -d "$home" ]; then
+      mkdir -p "$home"
+    fi
+  fi
+  if [ -n "$workdir" ]; then
+    if [ ! -d "$workdir" ]; then
+      mkdir -p "$workdir"
+    fi
+  fi
+  if [ "$SERVICE_USER" != "root" ] && [ -d "$home" ]; then
+    chmod -f 777 "$home"
+  fi
+  if [ "$SERVICE_USER" != "root" ] && [ -d "$workdir" ]; then
+    chmod -f 777 "$workdir"
+  fi
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  # cd to dir
+  __cd "${workdir:-$home}"
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  echo "Setting the working directory to: $PWD"
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  export WORK_DIR="$workdir" HOME="$home"
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__exec_service() {
+  local count=6
+  echo "Starting $1"
+  eval "$@" 2>>/dev/stderr >>/data/logs/start.log &
+  while [ $count -ne 0 ]; do
+    sleep 3
+    if __pgrep "$1"; then
+      touch "/run/init.d/$1.pid"
+      break
+    else
+      count=$((count - 1))
+    fi
+  done
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__update_ssl_certs() {
+  [ -f "/config/env/ssl.sh" ] && . "/config/env/ssl.sh"
+  if [ -f "$SSL_CERT" ] && [ -f "$SSL_KEY" ]; then
+    mkdir -p /etc/ssl
+    [ -f "$SSL_CA" ] && cp -Rf "$SSL_CA" "/etc/ssl/$SSL_CA"
+    [ -f "$SSL_KEY" ] && cp -Rf "$SSL_KEY" "/etc/ssl/$SSL_KEY"
+    [ -f "$SSL_CERT" ] && cp -Rf "$SSL_CERT" "/etc/ssl/$SSL_CERT"
+  fi
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__display_user_info() {
+  if [ -n "$user_name" ] || [ -n "$user_pass" ] || [ -n "$root_user_name" ] || [ -n "$root_user_pass" ]; then
+    __banner "User info"
+    [ -n "$user_name" ] && __printf_space "40" "username:" "$user_name"
+    if [ -n "$user_pass" ]; then
+      if [ "${SHOW_PASSWORDS:-no}" = "yes" ]; then
+        __printf_space "40" "password:" "$user_pass"
+      else
+        __printf_space "40" "password:" "saved to ${USER_FILE_PREFIX}/${SERVICE_NAME}_pass"
+      fi
+    fi
+    [ -n "$root_user_name" ] && __printf_space "40" "root username:" "$root_user_name"
+    if [ -n "$root_user_pass" ]; then
+      if [ "${SHOW_PASSWORDS:-no}" = "yes" ]; then
+        __printf_space "40" "root password:" "$root_user_pass"
+      else
+        __printf_space "40" "root password:" "saved to ${ROOT_FILE_PREFIX}/${SERVICE_NAME}_pass"
+      fi
+    fi
+    __banner ""
+  fi
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__init_config_etc() {
+  local copy="no"
+  local name="$SERVICE_NAME"
+  local etc_dir="${ETC_DIR:-/etc/$name}"
+  local conf_dir="${CONF_DIR:-/config/$name}"
+  __is_dir_empty "$conf_dir" && copy=yes
+  if [ "$copy" = "yes" ]; then
+    if [ -d "$etc_dir" ]; then
+      mkdir -p "$conf_dir"
+      __copy_templates "$etc_dir/." "$conf_dir/"
+    elif [ -f "$etc_dir" ]; then
+      __copy_templates "$etc_dir" "$conf_dir"
+    fi
+  fi
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+}
+__create_ssl_cert() {
+  local SSL_DIR="${SSL_DIR:-/etc/ssl}"
+  [ -f "/config/env/ssl.sh" ] && . "/config/env/ssl.sh"
+  if [ -z "$SSL_DIR" ]; then
+    echo "SSL_DIR is unset" >&2
+    return 1
+  fi
+  [ -d "$SSL_DIR" ] || mkdir -p "$SSL_DIR"
+  if [ -n "$FORCE_SSL" ] || [ ! -f "$SSL_CERT" ] || [ ! -f "$SSL_KEY" ]; then
+    echo "Setting Country to $COUNTRY and Setting State/Province to $STATE and Setting City to $CITY"
+    echo "Setting OU to $UNIT and Setting ORG to $ORG and Setting server to $CN"
+    echo "All variables can be overwritten by creating a /config/.ssl.env and setting the variables there"
+    echo "Creating ssl key and certificate in $SSL_DIR and will be valid for $((VALID_FOR / 365)) year[s]"
+    openssl req \
+      -new \
+      -newkey rsa:$RSA \
+      -days $VALID_FOR \
+      -nodes \
+      -x509 \
+      -subj "/C=${COUNTRY// /\\ }/ST=${STATE// /\\ }/L=${CITY// /\\ }/O=${ORG// /\\ }/OU=${UNIT// /\\ }/CN=${CN// /\\ }" \
+      -keyout "$SSL_KEY" \
+      -out "$SSL_CERT"
+  fi
+  if [ -f "$SSL_CERT" ] && [ -f "$SSL_KEY" ]; then
+    __update_ssl_certs
+    return 0
+  else
+    return 2
+  fi
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__init_service_conf() {
+  # Seed /config/$svc/ from build-time baked /etc sources on first container start.
+  # Copy only — no symlinks. Symlinking /etc back to /config/ is the service's own
+  # responsibility, done inside __update_conf_files in each init.d/*.sh script so
+  # each service controls its exact paths and variable substitution order.
+  #
+  # Usage: __init_service_conf <conf_dir> <primary_etc_dir> [extra_etc_path ...]
+  #
+  #   primary_etc_dir  directory  → contents copied into conf_dir/ when conf_dir is empty
+  #   extra_etc_path   directory  → copied into conf_dir/<name>/ when that subdir is empty
+  #   extra_etc_path   file       → copied to conf_dir/<filename> when absent
+  local conf_dir="$1"
+  local primary_etc="$2"
+  shift 2
+  local src name
+  mkdir -p "$conf_dir"
+  if [ -d "$primary_etc" ] && __is_dir_empty "$conf_dir"; then
+    __copy_templates "$primary_etc/." "$conf_dir/"
+  fi
+  for src in "$@"; do
+    [ -e "$src" ] || continue
+    name="${src##*/}"
+    if [ -d "$src" ] && __is_dir_empty "$conf_dir/$name"; then
+      mkdir -p "$conf_dir/$name"
+      __copy_templates "$src/." "$conf_dir/$name/"
+    elif [ -f "$src" ] && [ ! -f "$conf_dir/$name" ]; then
+      cp -f "$src" "$conf_dir/$name"
+    fi
+  done
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__init_apache() {
+  command -v httpd &>/dev/null || command -v apache2 &>/dev/null || return 0
+  local svc="${1:-apache2}"
+  __init_service_conf "/config/$svc" "/etc/$svc"
+  return 0
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__init_nginx() {
+  command -v nginx &>/dev/null || return 0
+  local svc="${1:-nginx}"
+  __init_service_conf "/config/$svc" "/etc/$svc"
+  return 0
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__init_php() {
+  command -v php &>/dev/null || return 0
+  local php_etc="${PHP_INI_DIR:-$(__find_php_ini)}"
+  __init_service_conf "/config/php" "${php_etc:-/etc/php}" \
+    "/etc/php.ini" "/etc/php-fpm" "/etc/php-fpm.conf"
+  return 0
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__init_mysql() {
+  command -v mysqld &>/dev/null || command -v mariadbd &>/dev/null || return 0
+  local svc="${1:-mysql}"
+  __init_service_conf "/config/$svc" "/etc/$svc" "/etc/my.ini" "/etc/my.cnf"
+  [ -d "${DATABASE_DIR:-/data/db/$svc}" ] || mkdir -p "${DATABASE_DIR:-/data/db/$svc}"
+  return 0
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__init_mongodb() {
+  command -v mongod &>/dev/null || return 0
+  __init_service_conf "/config/mongodb" "/etc/mongodb" "/etc/mongod.conf"
+  return 0
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__init_postgres() {
+  command -v postgres &>/dev/null || command -v pg_ctl &>/dev/null || return 0
+  local pg_etc
+  pg_etc="${PGSQL_CONFIG_FILE:+${PGSQL_CONFIG_FILE%/*}}"
+  [ -n "$pg_etc" ] || pg_etc="$(__find_pgsql_conf)"
+  [ -n "$pg_etc" ] && pg_etc="${pg_etc%/*}"
+  [ -n "$pg_etc" ] && __init_service_conf "/config/postgres" "$pg_etc"
+  return 0
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__init_couchdb() {
+  command -v couchdb &>/dev/null || return 0
+  __init_service_conf "/config/couchdb" "/etc/couchdb"
+  return 0
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Show available init functions
+__init_help() {
+  echo '
+Config seeding (copy /etc → /config, no symlinks):
+  __init_service_conf <conf_dir> <primary_etc_dir> [extra_etc_path ...]
+  __init_apache   [svc]   seeds /config/apache2  from /etc/apache2
+  __init_nginx    [svc]   seeds /config/nginx     from /etc/nginx
+  __init_php              seeds /config/php       from /etc/php* + /etc/php.ini + /etc/php-fpm
+  __init_mysql    [svc]   seeds /config/mysql     from /etc/mysql + /etc/my.{ini,cnf}
+  __init_mongodb          seeds /config/mongodb   from /etc/mongodb + /etc/mongod.conf
+  __init_postgres         seeds /config/postgres  from pg data dir
+  __init_couchdb          seeds /config/couchdb   from /etc/couchdb
+
+SSL:
+  __update_ssl_certs
+  __create_ssl_cert
+'
+  return
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__run_once() {
+  if [ "$CONFIG_DIR_INITIALIZED" = "no" ] || [ "$DATA_DIR_INITIALIZED" = "no" ] || [ ! -f "/config/.docker_has_run" ]; then
+    return 0
+  else
+    return 1
+  fi
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# run program ever n minutes
+__cron() {
+  local bin=""
+  if [ "$1" = "--pid" ]; then
+    pid="$2"
+    shift 2
+  else
+    pid="$$"
+  fi
+  if test -n "$1" && test -z "${1//[0-9]/}"; then
+    interval=$(($1 * 60))
+    shift 1
+  else
+    interval="300"
+  fi
+  [ $# -eq 0 ] && echo "Usage: cron [interval] [command]" && exit 1
+  local command="$*"
+  bin="${CRON_NAME:-$1}"; bin="${bin##*/}"
+  trap 'retVal=$?;[ -f "/run/cron/$bin.run" ] && rm -Rf "/run/cron/$bin.run";[ -f "/run/cron/$bin.pid" ] && rm -Rf "/run/cron/$bin.pid";exit ${retVal:-0}' SIGINT ERR EXIT
+  [ -d "/run/cron" ] || mkdir -p "/run/cron"
+  echo "$pid" >"/run/cron/$bin.pid"
+  echo "$command" >"/run/cron/$bin.run"
+  echo "Log is saved to /data/logs/cron.log"
+  # eval is intentional: $command is operator-controlled input from this container's init
+  while :; do
+    eval "$command"
+    sleep $interval
+    [ -f "/run/cron/$bin.run" ] || break
+  done 2>/dev/stderr >>"/data/logs/cron.log"
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__replace() {
+  local search="$1" replace="$2" file="${3:-$2}"
+  [ -e "$file" ] || return 1
+  __sed "$search" "$replace" "$file" || return 0
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__find_replace() {
+  local search="$1" replace="$2" file="${3:-$2}"
+  [ -e "$file" ] || return 1
+  find "$file" -type f -not -path '*/.git/*' -not -name '.git' -exec sed -i "s|$search|$replace|g" {} + 2>/dev/null
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# /config > /etc
+__copy_templates() {
+  local from="$1" to="$2" is_link=""
+  [ -L "$to" ] && is_link="$(readlink "$to")"
+  [ "$from" != "$is_link" ] || return 0
+  if [ -e "$from" ] && (! [ -d "$to" ] || __is_dir_empty "$to"); then
+    __file_copy "$from" "$to"
+  fi
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# /config/file > /etc/file
+__symlink() {
+  local from="$1" to="$2"
+  [ -e "$to" ] || return 0
+  [ "$from" = "$to" ] && return 0
+  __rm "$from"
+  [ -d "${from%/*}" ] || mkdir -p "${from%/*}" 2>/dev/null
+  ln -sf "$to" "$from" && echo "Created symlink to $from > $to"
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__file_copy() {
+  local from="$1"
+  local dest="$2"
+  local is_link=""
+  [ -L "$dest" ] && is_link="$(readlink "$dest")"
+  if [ "$from" != "$is_link" ]; then
+    if [ -n "$from" ] && [ -e "$from" ] && [ -n "$dest" ]; then
+      if [ -d "$from" ]; then
+        if cp -Rf "$from/." "$dest/" &>/dev/null; then
+          printf '%s\n' "Copied: $from > $dest"
+          return 0
+        else
+          printf '%s\n' "Copy failed: $from < $dest" >&2
+          return 1
+        fi
+      else
+        if cp -Rf "$from" "$dest" &>/dev/null; then
+          printf '%s\n' "Copied: $from > $dest"
+          return 0
+        else
+          printf '%s\n' "Copy failed: $from < $dest" >&2
+          return 1
+        fi
+      fi
+    else
+      printf '%s\n' "$from does not exist" >&2
+      return 2
+    fi
+  fi
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__generate_random_uids() {
+  local set_random_uid=$((100 + RANDOM % 900))
+  while :; do
+    if grep -shq "x:.*:$set_random_uid:" "/etc/group" && ! grep -shq "x:$set_random_uid:.*:" "/etc/passwd"; then
+      set_random_uid=$((set_random_uid + 1))
+    else
+      echo "$set_random_uid"
+      break
+    fi
+  done
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__setup_directories() {
+  APPLICATION_DIRS="${APPLICATION_DIRS//,/ }"
+  APPLICATION_FILES="${APPLICATION_FILES//,/ }"
+  ADD_APPLICATION_DIRS="${ADD_APPLICATION_DIRS//,/ }"
+  ADD_APPLICATION_FILES="${ADD_APPLICATION_FILES//,/ }"
+  [ -n "$ENV_WWW_ROOT_DIR" ] && export WWW_ROOT_DIR="$ENV_WWW_ROOT_DIR"
+  # Setup WWW_ROOT_DIR
+  if [ "$IS_WEB_SERVER" = "yes" ]; then
+    APPLICATION_DIRS="$APPLICATION_DIRS $WWW_ROOT_DIR"
+    __initialize_www_root
+    (echo "Creating directory $WWW_ROOT_DIR with permissions 777" && mkdir -p "$WWW_ROOT_DIR" && find "$WWW_ROOT_DIR" -type d -exec chmod -f 777 {} \;) 2>/dev/stderr | tee -p -a "/data/logs/init.txt"
+  fi
+  # Setup DATABASE_DIR
+  if [ "$IS_DATABASE_SERVICE" = "yes" ] || [ "$USES_DATABASE_SERVICE" = "yes" ]; then
+    APPLICATION_DIRS="$APPLICATION_DIRS $DATABASE_DIR"
+    if __is_dir_empty "$DATABASE_DIR" || [ ! -d "$DATABASE_DIR" ]; then
+      (echo "Creating directory $DATABASE_DIR with permissions 777" && mkdir -p "$DATABASE_DIR" && chmod -f 777 "$DATABASE_DIR") 2>/dev/stderr | tee -p -a "/data/logs/init.txt"
+    fi
+  fi
+  # create default directories
+  for filedirs in $ADD_APPLICATION_DIRS $APPLICATION_DIRS; do
+    if [ -n "$filedirs" ] && [ ! -d "$filedirs" ]; then
+      (echo "Creating directory $filedirs with permissions 777" && mkdir -p "$filedirs" && chmod -f 777 "$filedirs") 2>/dev/stderr | tee -p -a "/data/logs/init.txt"
+    fi
+  done
+  # create default files
+  for application_files in $ADD_APPLICATION_FILES $APPLICATION_FILES; do
+    if [ -n "$application_files" ] && [ ! -e "$application_files" ]; then
+      (echo "Creating file $application_files with permissions 777" && touch "$application_files" && chmod -Rf 777 "$application_files") 2>/dev/stderr | tee -p -a "/data/logs/init.txt"
+    fi
+  done
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# set user on files/folders
+__fix_permissions() {
+  change_user="${1:-${SERVICE_USER:-root}}"
+  change_group="${2:-${SERVICE_GROUP:-$change_user}}"
+  [ -n "$RUNAS_USER" ] && [ "$RUNAS_USER" != "root" ] && change_user="$RUNAS_USER" && change_group="$change_user"
+  if [ -n "$change_user" ]; then
+    if grep -shq "^$change_user:" "/etc/passwd"; then
+      for permissions in $ADD_APPLICATION_DIRS $APPLICATION_DIRS; do
+        if [ -n "$permissions" ] && [ -e "$permissions" ]; then
+          (chown -Rf $change_user "$permissions" && echo "changed ownership on $permissions to user:$change_user") 2>/dev/stderr | tee -p -a "/data/logs/init.txt"
+        fi
+      done
+    fi
+  fi
+  if [ -n "$change_group" ]; then
+    if grep -shq "^$change_group:" "/etc/group"; then
+      for permissions in $ADD_APPLICATION_DIRS $APPLICATION_DIRS; do
+        if [ -n "$permissions" ] && [ -e "$permissions" ]; then
+          (chgrp -Rf $change_group "$permissions" && echo "changed group ownership on $permissions to group $change_group") 2>/dev/stderr | tee -p -a "/data/logs/init.txt"
+        fi
+      done
+    fi
+  fi
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__get_gid() { awk -F: -v n="$1" '$1==n {print $3; found=1; exit} END {exit !found}' /etc/group 2>/dev/null; }
+__get_uid() { awk -F: -v n="$1" '$1==n {print $3; found=1; exit} END {exit !found}' /etc/passwd 2>/dev/null; }
+__check_for_uid() { awk -F: -v n="$1" '$3==n {found=1; exit} END {exit !found}' /etc/passwd 2>/dev/null; }
+__check_for_guid() { awk -F: -v n="$1" '$3==n {found=1; exit} END {exit !found}' /etc/group 2>/dev/null; }
+__check_for_user() { awk -F: -v n="$1" '$1==n {found=1; exit} END {exit !found}' /etc/passwd 2>/dev/null; }
+__check_for_group() { awk -F: -v n="$1" '$1==n {found=1; exit} END {exit !found}' /etc/group 2>/dev/null; }
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# check if process is already running
+__proc_check() {
+  # Skip process check for one-shot/configuration services
+  if [ "$SERVICE_USES_PID" = "no" ]; then
+    return 1
+  fi
+  local cmd_bin cmd_name check_result
+  cmd_bin="$(type -P "${1:-$EXEC_CMD_BIN}" 2>/dev/null || echo "${1:-$EXEC_CMD_BIN}")"
+  cmd_name="${cmd_bin:-${1:-$EXEC_CMD_NAME}}"; cmd_name="${cmd_name##*/}"
+  if [ -z "$cmd_name" ] || [ "$cmd_name" = "." ]; then
+    return 1
+  fi
+  check_result=1
+  if [ -n "$cmd_bin" ] && __pgrep "$cmd_bin" 2>/dev/null; then
+    check_result=0
+  elif [ -n "$cmd_name" ] && __pgrep "$cmd_name" 2>/dev/null; then
+    check_result=0
+  elif [ -f "$SERVICE_PID_FILE" ]; then
+    local pid_from_file
+    pid_from_file=$(<"$SERVICE_PID_FILE") 2>/dev/null
+    if [ -n "$pid_from_file" ] && kill -0 "$pid_from_file" 2>/dev/null; then
+      check_result=0
+    fi
+  fi
+  if [ $check_result -eq 0 ]; then
+    SERVICE_IS_RUNNING="yes"
+    pgrep -x -n "$cmd_name" >"$SERVICE_PID_FILE" 2>/dev/null || true
+    return 0
+  else
+    return 1
+  fi
+}
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__set_user_group_id() {
+  local exitStatus=0
+  local set_user="${1:-$SERVICE_USER}"
+  local set_uid="${2:-${SERVICE_UID:-1000}}"
+  local set_gid="${3:-${SERVICE_GID:-1000}}"
+  local random_id="$(__generate_random_uids)"
+  set_uid="$(__get_uid "$set_user" || echo "$set_uid")"
+  set_gid="$(__get_gid "$set_user" || echo "$set_gid")"
+  if ! grep -shq "^$set_user:" "/etc/passwd" "/etc/group"; then
+    return 0
+  fi
+  if [ -z "$set_user" ] || [ "$set_user" = "root" ]; then
+    return
+  fi
+  if grep -shq "^$set_user:" "/etc/passwd" "/etc/group"; then
+    if __check_for_guid "$set_gid"; then
+      groupmod -g "${set_gid}" $set_user 2>/dev/stderr | tee -p -a "/data/logs/init.txt" >/dev/null
+    fi
+    if __check_for_uid "$set_uid"; then
+      usermod -u "${set_uid}" -g "${set_gid}" $set_user 2>/dev/stderr | tee -p -a "/data/logs/init.txt" >/dev/null
+    fi
+  fi
+  export SERVICE_UID="$set_uid"
+  export SERVICE_GID="$set_gid"
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__create_service_user() {
+  local exitStatus=0
+  local max_attempts=100
+  local attempt=0
+  local create_user="${1:-$SERVICE_USER}"
+  local create_group="${2:-${SERVICE_GROUP:-$create_user}}"
+  local create_home_dir="${3:-$WORK_DIR}"
+  local create_uid="${4:-${SERVICE_UID:-$USER_UID}}"
+  local create_gid="${5:-${SERVICE_GID:-$USER_GID}}"
+  local random_id="$(__generate_random_uids)"
+  local create_home_dir="${create_home_dir:-/home/$create_user}"
+  local log_file="/data/logs/init.txt"
+  # Ensure log directory exists
+  [ -d "$(dirname "$log_file")" ] || mkdir -p "$(dirname "$log_file")" 2>/dev/null
+  # Validate that we have at least a user or group to create
+  if [ -z "$create_user" ] && [ -z "$create_group" ]; then
+    echo "No user or group specified to create" >&2
+    return 0
+  fi
+  # Validate user/group name format (alphanumeric, underscore, hyphen; must start with letter or underscore)
+  if [ -n "$create_user" ] && [[ ! "$create_user" =~ ^[a-z_][a-z0-9_-]*$ ]]; then
+    echo "Error: Invalid username format '$create_user' - must start with letter/underscore, contain only lowercase alphanumeric, underscore, or hyphen" >&2
+    return 1
+  fi
+  if [ -n "$create_group" ] && [[ ! "$create_group" =~ ^[a-z_][a-z0-9_-]*$ ]]; then
+    echo "Error: Invalid group name format '$create_group' - must start with letter/underscore, contain only lowercase alphanumeric, underscore, or hyphen" >&2
+    return 1
+  fi
+  # Check if user and group already exist
+  if grep -shq "^$create_user:" "/etc/passwd" && grep -shq "^$create_group:" "/etc/group"; then
+    return 0
+  fi
+  # Root user/group - nothing to create
+  if [ "$create_user" = "root" ] && [ "$create_group" = "root" ]; then
+    return 0
+  fi
+  # Override with RUNAS_USER if specified and not root
+  if [ -n "$RUNAS_USER" ] && [ "$RUNAS_USER" != "root" ]; then
+    create_user="$RUNAS_USER"
+    create_group="$RUNAS_USER"
+    create_uid="${create_uid:-1000}"
+    create_gid="${create_gid:-1000}"
+  fi
+  # Get existing UID/GID or use provided values
+  create_uid="$(__get_uid "$create_user" 2>/dev/null || echo "$create_uid")"
+  create_gid="$(__get_gid "$create_user" 2>/dev/null || echo "$create_gid")"
+  # Ensure we have valid non-root UID/GID
+  if [ -z "$create_uid" ] || [ "$create_uid" = "0" ]; then
+    create_uid="$random_id"
+  fi
+  if [ -z "$create_gid" ] || [ "$create_gid" = "0" ]; then
+    create_gid="$random_id"
+  fi
+  # Validate UID/GID are numeric and within valid range
+  if [[ ! "$create_uid" =~ ^[0-9]+$ ]] || [ "$create_uid" -lt 1 ] || [ "$create_uid" -gt 65534 ]; then
+    echo "Error: Invalid UID '$create_uid' - must be a number between 1 and 65534" >&2
+    return 1
+  fi
+  if [[ ! "$create_gid" =~ ^[0-9]+$ ]] || [ "$create_gid" -lt 1 ] || [ "$create_gid" -gt 65534 ]; then
+    echo "Error: Invalid GID '$create_gid' - must be a number between 1 and 65534" >&2
+    return 1
+  fi
+  # Find available UID/GID if current ones are taken (with loop protection)
+  while __check_for_uid "$create_uid" || __check_for_guid "$create_gid"; do
+    attempt=$((attempt + 1))
+    if [ $attempt -ge $max_attempts ]; then
+      echo "Error: Could not find available UID/GID after $max_attempts attempts" >&2
+      return 1
+    fi
+    random_id=$((random_id + 1))
+    create_uid="$random_id"
+    create_gid="$random_id"
+  done
+  # Create group if needed
+  if [ -n "$create_group" ] && ! __check_for_group "$create_group"; then
+    echo "Creating system group '$create_group' with GID $create_gid"
+    if ! groupadd --force --system -g "$create_gid" "$create_group" 2>&1 | tee -a "$log_file"; then
+      echo "Error: Failed to create group '$create_group'" >&2
+      exitStatus=$((exitStatus + 1))
+    elif ! grep -shq "^$create_group:" "/etc/group"; then
+      echo "Error: Group '$create_group' not found in /etc/group after creation" >&2
+      exitStatus=$((exitStatus + 1))
+    fi
+  fi
+  # Create user if needed (only if group creation succeeded)
+  if [ $exitStatus -eq 0 ] && [ -n "$create_user" ] && ! __check_for_user "$create_user"; then
+    echo "Creating system user '$create_user' with UID $create_uid"
+    if ! useradd --system --uid "$create_uid" --gid "$create_group" --comment "Account for $create_user" --home-dir "$create_home_dir" --shell /bin/false "$create_user" 2>&1 | tee -a "$log_file"; then
+      echo "Error: Failed to create user '$create_user'" >&2
+      exitStatus=$((exitStatus + 1))
+    elif ! grep -shq "^$create_user:" "/etc/passwd"; then
+      echo "Error: User '$create_user' not found in /etc/passwd after creation" >&2
+      exitStatus=$((exitStatus + 1))
+    fi
+  fi
+  # Setup user environment if creation succeeded
+  if [ $exitStatus -eq 0 ] && [ -n "$create_group" ] && [ -n "$create_user" ]; then
+    export WORK_DIR="${create_home_dir:-}"
+    if [ -n "$WORK_DIR" ]; then
+      if [ ! -d "$WORK_DIR" ]; then
+        if ! mkdir -p "$WORK_DIR" 2>/dev/null; then
+          echo "Warning: Failed to create home directory '$WORK_DIR'" >&2
+        fi
+      fi
+      if [ -d "/etc/.skel" ] && [ -d "$WORK_DIR" ]; then
+        cp -Rf /etc/.skel/. "$WORK_DIR/" 2>/dev/null || echo "Warning: Failed to copy skeleton files to '$WORK_DIR'" >&2
+      fi
+    fi
+    # Setup sudo access
+    if [ -d "/etc/sudoers.d" ]; then
+      if [ ! -f "/etc/sudoers.d/$create_user" ]; then
+        echo "$create_user ALL=(ALL)   NOPASSWD: ALL" >"/etc/sudoers.d/$create_user" 2>/dev/null || echo "Warning: Failed to create sudoers file for '$create_user'" >&2
+        chmod 0440 "/etc/sudoers.d/$create_user" 2>/dev/null
+      fi
+    elif [ -f "/etc/sudoers" ] && ! grep -qs "^$create_user " "/etc/sudoers"; then
+      echo "$create_user ALL=(ALL)   NOPASSWD: ALL" >>"/etc/sudoers" 2>/dev/null || echo "Warning: Failed to add '$create_user' to sudoers" >&2
+    fi
+    SERVICE_UID="$create_uid"
+    SERVICE_GID="$create_gid"
+    SERVICE_USER="$create_user"
+    SERVICE_GROUP="$create_group"
+  else
+    echo "Warning: Falling back to root user due to creation errors" >&2
+    SERVICE_UID=0
+    SERVICE_GID=0
+    SERVICE_USER=root
+    SERVICE_GROUP=root
+    exitStatus=2
+  fi
+  export SERVICE_UID SERVICE_GID SERVICE_USER SERVICE_GROUP
+  return $exitStatus
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__create_env_file() {
+  local dir=""
+  local envStatus=0
+  local envFile=("${@:-}")
+  local sample_file="/usr/local/etc/docker/env/default.sample"
+  [ -f "$sample_file" ] || return 0
+  for create_env in "/usr/local/etc/docker/env/default.sh" "${envFile[@]}"; do
+    dir="$(dirname "$create_env")"
+    [ -d "$dir" ] || mkdir -p "$dir"
+    if [ -n "$create_env" ] && [ ! -f "$create_env" ]; then
+      cp -f "$sample_file" "$create_env"
+    fi
+    [ -f "$create_env" ] || envStatus=$((1 + envStatus))
+  done
+  [ "$envStatus" -eq 0 ] && rm -f "$sample_file"
+  return $envStatus
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__exec_command() {
+  local arg=("$@")
+  local exitCode=0
+  local cmdExec="${arg:-}"
+  local pre_exec="--login -c"
+  local shell bin prog
+  shell=$(type -P bash || type -P dash || type -P ash || type -P sh) 2>/dev/null
+  bin="${arg[0]:-bash}"
+  prog="$(type -P "$bin" 2>/dev/null || echo "$bin")"
+  if type -t "$bin" &>/dev/null; then
+    echo "${exec_message:-Executing command: $cmdExec}"
+    "$shell" $pre_exec "$cmdExec"
+    exitCode=$?
+  elif [ -f "$prog" ]; then
+    echo "$prog is not executable"
+    exitCode=98
+  else
+    echo "$prog does not exist"
+    exitCode=99
+  fi
+  return $exitCode
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Setup the server init scripts
+__start_init_scripts() {
+  [ "$1" = " " ] && shift 1
+  if [ "$DEBUGGER" = "on" ]; then
+    echo "Enabling debugging"
+    set -eo pipefail
+    [ -n "$DEBUGGER_OPTIONS" ] && set -"$DEBUGGER_OPTIONS"
+  else
+    set -eo pipefail
+  fi
+  local retPID=""
+  local basename=""
+  local init_pids=""
+  local retstatus="0"
+  local initStatus="0"
+  local critical_failures="0"
+  local pidFile="/run/.start_init_scripts.pid"
+  local init_dir="${1:-/usr/local/etc/docker/init.d}"
+  local init_files=("$init_dir"/*.sh)
+  local init_count=0
+  [ -e "${init_files[0]}" ] && init_count=${#init_files[@]}
+  local exit_on_failure="${EXIT_ON_SERVICE_FAILURE:-true}"
+
+  # Clean stale PID files from previous runs
+  if [ ! -f "/run/.start_init_scripts.pid" ]; then
+    echo "🧹 Cleaning stale PID files from previous container run"
+    rm -f /run/*.pid /run/init.d/*.pid 2>/dev/null || true
+  fi
+
+  touch "$pidFile"
+
+  if [ "$init_count" -eq 0 ] || [ ! -d "$init_dir" ]; then
+    mkdir -p "/data/logs/init"
+    while :; do echo "Running: $(date)" >"/data/logs/init/keep_alive" && sleep 3600; done &
+  else
+    if [ -d "$init_dir" ]; then
+      local sample
+      for sample in "$init_dir"/*.sample; do
+        [ -e "$sample" ] && __rm "$sample"
+      done
+      (shopt -s nullglob; chmod -Rf 755 "$init_dir"/*.sh 2>/dev/null || true)
+
+      echo "🚀 Starting container services initialization"
+      echo "📂 Init directory: $init_dir"
+      echo "📊 Services to start: $init_count"
+      echo "📋 Found $init_count service scripts to execute"
+      echo ""
+
+      for init in "$init_dir"/*.sh; do
+        if [ -x "$init" ]; then
+          touch "$pidFile"
+          name="${init##*/}"
+          service="${name#*-}"; service="${service%.sh}"
+          __service_banner "🔧" "Executing service script:" "${init##*/}"
+          # Execute the init script and capture the exit code (subshell isolates exit calls)
+          if ( source "$init" ); then
+            # Check if service was disabled first
+            if [ -n "$SERVICE_DISABLED" ]; then
+              initStatus="0"
+              __service_banner "🚫" "Service $service is disabled -" "skipping"
+              unset SERVICE_DISABLED
+              # Continue to next service
+            elif [ "$CONTAINER_INIT" = "yes" ]; then
+              initStatus="0"
+              __service_banner "✅" "Service $service completed successfully -" "configuration service"
+            else
+              # Allow some time for service to initialize
+              sleep 1
+              # Check for service success indicators
+              local expected_pid_file="/run/init.d/$service.pid"
+              set +e
+              # Check if this is a configuration service (no daemon process expected)
+              if [ "$SERVICE_USES_PID" = "no" ]; then
+                # Configuration service - no daemon process expected
+                initStatus="0"
+                __service_banner "✅" "Service $service completed successfully -" "configuration service"
+              else
+                # Service uses PID tracking - verify actual running processes
+                retPID=""
+                local found_process=""
+                # Try multiple name variants to find the process
+                for name_variant in "$service" "${service}d" "${service//-/}"; do
+                  if [ -z "$retPID" ]; then
+                    retPID=$(__get_pid "$name_variant" 2>/dev/null || echo "")
+                    if [ -n "$retPID" ] && [ "$retPID" != "0" ]; then
+                      found_process="$name_variant"
+                      break
+                    fi
+                  fi
+                done
+                if [ -n "$retPID" ] && [ "$retPID" != "0" ]; then
+                  # Found actual running process
+                  initStatus="0"
+                  __service_banner "✅" "Service $service started successfully -" "PID: ${retPID} ($found_process)"
+                elif [ -f "$expected_pid_file" ]; then
+                  # No running process but PID file exists - verify PID is valid
+                  file_pid=$(<"$expected_pid_file") 2>/dev/null
+                  if [ -n "$file_pid" ] && kill -0 "$file_pid" 2>/dev/null; then
+                    initStatus="0"
+                    __service_banner "✅" "Service $service started successfully -" "PID: $file_pid (from file)"
+                  else
+                    # PID file exists but process isn't running - treat as warning, not failure
+                    initStatus="0"
+                    __service_banner "⚠️" "Service $service may not be running -" "no process found (non-critical)"
+                  fi
+                else
+                  # No process and no PID file - likely a configuration-only service
+                  initStatus="0"
+                  __service_banner "✅" "Service $service completed successfully -" "configuration service"
+                fi
+              fi
+              set -e
+            fi
+          else
+            initStatus="1"
+            critical_failures=$((critical_failures + 1))
+            __service_banner "❌" "Service $service failed to start -" "check logs"
+          fi
+          echo ""
+        fi
+        retstatus=$((retstatus + initStatus))
+      done
+
+      # Summary
+      echo ""
+      if [ $critical_failures -gt 0 ]; then
+        echo "⚠️ Warning: $critical_failures critical service(s) reported failures"
+        if [ "$exit_on_failure" = "true" ] && [ $critical_failures -ge 2 ]; then
+          echo "❌ Exiting due to multiple critical service failures (threshold: 2)"
+          return 1
+        else
+          echo "ℹ️ Continuing with $critical_failures failure(s) - container may still be functional"
+        fi
+      else
+        echo "✅ All service initializations completed successfully"
+      fi
+      echo ""
+    fi
+  fi
+
+  printf '%s\n' "$SERVICE_NAME started on $(date)" >"/data/logs/start.log"
+  return $retstatus
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__setup_mta() {
+  [ -d "/etc/ssmtp" ] || [ -d "/etc/postfix" ] || return
+  if [ ! -d "/config/ssmtp" ] || [ ! -d "/config/postfix" ]; then
+    echo "Configuring smtp server"
+  fi
+  local exitCode=0
+  local relay_port="${EMAIL_RELAY//*:/}"
+  local relay_server="${EMAIL_RELAY//:*/}"
+  local local_hostname="${FULL_DOMAIN_NAME:-}"
+  local account_user="${SERVER_ADMIN//@*/}"
+  local account_domain="${EMAIL_DOMAIN//*@/}"
+  [[ $EMAIL_RELAY == *[0-9][0-9]* ]] || relay_port="465"
+  ################# sSMTP relay setup
+  if command -v ssmtp &>/dev/null; then
+    [ -d "/config/ssmtp" ] || mkdir -p "/config/ssmtp"
+    [ -f "/etc/ssmtp/ssmtp.conf" ] && __rm "/etc/ssmtp/ssmtp.conf"
+    symlink_files="$(__find_file_relative "/config/ssmtp")"
+    if [ ! -f "/config/ssmtp/ssmtp.conf" ]; then
+      cat >"/config/ssmtp/ssmtp.conf" <<EOF
+# ssmtp configuration.
+root=${account_user:-root}@${account_domain:-$HOSTNAME}
+mailhub=${relay_server:-172.17.0.1}:$relay_port
+rewriteDomain=$local_hostname
+hostname=$local_hostname
+TLS_CA_FILE=/etc/ssl/certs/ca-certificates.crt
+UseTLS=Yes
+UseSTARTTLS=No
+AuthMethod=LOGIN
+FromLineOverride=yes
+#AuthUser=username
+#AuthPass=password
+
+EOF
+    fi
+    if [ -f "/config/ssmtp/ssmtp.conf" ]; then
+      for file in $symlink_files; do
+        __symlink "/config/ssmtp/$file" "/etc/ssmtp/$file"
+        __initialize_replace_variables "/etc/ssmtp/$file"
+      done
+      if [ -f "/etc/ssmtp/revaliases" ] && [ ! -f "/config/ssmtp/revaliases" ]; then
+        mv -f "/etc/ssmtp/revaliases" "/config/ssmtp/revaliases"
+        __symlink "/config/ssmtp/revaliases" "/etc/ssmtp/revaliases"
+        __initialize_replace_variables "/etc/ssmtp/revaliases"
+      else
+        touch "/config/ssmtp/revaliases"
+        __symlink "/config/ssmtp/revaliases" "/etc/ssmtp/revaliases"
+        __initialize_replace_variables "/etc/ssmtp/revaliases"
+      fi
+      echo "Done setting up ssmtp"
+    fi
+
+    ################# postfix relay setup
+  elif command -v postfix &>/dev/null; then
+    [ -d "/etc/postfix" ] || mkdir -p "/etc/postfix"
+    [ -d "/config/postfix" ] || mkdir -p "/config/postfix"
+    [ -f "/etc/postfix/main.cf" ] && __rm "/etc/postfix/main.cf"
+    symlink_files="$(__find_file_relative "/config/postfix")"
+    if [ ! -f "/config/postfix/main.cf" ]; then
+      cat >"/config/postfix/main.cf" <<EOF
+# postfix configuration.
+smtpd_banner = \$myhostname ESMTP email server
+compatibility_level = 2
+inet_protocols = ipv4
+inet_interfaces = all
+mydestination =
+local_transport=error: local delivery disabled
+mynetworks = /etc/postfix/mynetworks
+alias_maps = hash:/etc/postfix/aliases
+alias_database = hash:/etc/postfix/aliases
+transport_maps = hash:/etc/postfix/transport
+virtual_alias_maps = hash:/etc/postfix/virtual
+relay_domains = hash:/etc/postfix/mydomains, regexp:/etc/postfix/mydomains.pcre
+tls_random_source = dev:/dev/urandom
+smtp_use_tls = yes
+smtpd_use_tls = yes
+smtpd_tls_session_cache_database = btree:/etc/postfix/smtpd_scache
+smtpd_tls_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH, EDH-DSS-DES-CBC3-SHA, EDH-RSA-DES-CBC3-SHA, KRB5-DES, CBC3-SHA
+smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, defer_unauth_destination
+append_dot_mydomain = yes
+myorigin = $local_hostname
+myhostname = $local_hostname
+relayhost = [$relay_server]:$relay_port
+
+EOF
+    fi
+    if [ -d "/config/postfix" ]; then
+      for f in $symlink_files; do
+        __symlink "/config/postfix/$f" "/etc/postfix/$f"
+      done
+      __initialize_replace_variables "/etc/postfix"
+      touch "/config/postfix/aliases" "/config/postfix/mynetworks" "/config/postfix/transport"
+      touch "/config/postfix/mydomains.pcre" "/config/postfix/mydomains" "/config/postfix/virtual"
+      postmap "/config/postfix/aliases" "/config/postfix/mynetworks" "/config/postfix/transport" &>/dev/null
+      postmap "/config/postfix/mydomains.pcre" "/config/postfix/mydomains" "/config/postfix/virtual" &>/dev/null
+    fi
+    if [ -f "/etc/postfix/main.cf" ] && [ ! -f "/run/init.d/postfix.pid" ]; then
+      SERVICES_LIST+="postfix "
+      if [ ! -f "/run/init.d/postfix.pid" ]; then
+        __exec_service postfix start
+      fi
+      echo "Done setting up postfix"
+    fi
+  fi
+  [ -f "/root/dead.letter" ] && __rm "/root/dead.letter"
+  return $exitCode
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__initialize_web_health() {
+  local www_dir="${1:-${WWW_ROOT_DIR:-/usr/local/share/httpd/default}}"
+  if [ -d "$www_dir" ]; then
+    __find_replace "REPLACE_CONTAINER_IP4" "${REPLACE_CONTAINER_IP4:-127.0.0.1}" "/usr/local/share/httpd"
+    __find_replace "REPLACE_COPYRIGHT_FOOTER" "${COPYRIGHT_FOOTER:-Copyright 1999 - $(date +'%Y')}" "/usr/local/share/httpd"
+    __find_replace "REPLACE_LAST_UPDATED_ON_MESSAGE" "${LAST_UPDATED_ON_MESSAGE:-$(date +'Last updated on: %Y-%m-%d at %H:%M:%S')}" "/usr/local/share/httpd"
+  fi
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+#  file_dir
+__initialize_replace_variables() {
+  local set_dir="" get_dir="$*"
+  [ $# -ne 0 ] || return 1
+  for set_dir in $get_dir; do
+    __find_replace "REPLACE_SSL_DIR" "${SSL_DIR:-/etc/ssl}" "$set_dir"
+    __find_replace "REPLACE_RANDOM_ID" "$(__random_password 8)" "$set_dir"
+    __find_replace "REPLACE_TZ" "${TZ:-${TIMEZONE:-America/New_York}}" "$set_dir"
+    __find_replace "REPLACE_SERVER_PROTO" "${SERVICE_PROTOCOL:-http}" "$set_dir"
+    __find_replace "REPLACE_SERVER_SITE_TITLE" "${SERVER_SITE_TITLE:-CasjaysDev - Docker Container}" "$set_dir"
+    __find_replace "REPLACE_TMP_DIR" "${TMP_DIR:-/tmp/$SERVICE_NAME}" "$set_dir"
+    __find_replace "REPLACE_RUN_DIR" "${RUN_DIR:-/run/$SERVICE_NAME}" "$set_dir"
+    __find_replace "REPLACE_LOG_DIR" "${LOG_DIR:-/data/logs/$SERVICE_NAME}" "$set_dir"
+    __find_replace "REPLACE_ETC_DIR" "${ETC_DIR:-/etc/$SERVICE_NAME}" "$set_dir"
+    __find_replace "REPLACE_DATA_DIR" "${DATA_DIR:-/data/$SERVICE_NAME}" "$set_dir"
+    __find_replace "REPLACE_CONFIG_DIR" "${CONF_DIR:-/config/$SERVICE_NAME}" "$set_dir"
+    __find_replace "REPLACE_EMAIL_RELAY" "${EMAIL_RELAY:-172.17.0.1}" "$set_dir"
+    __find_replace "REPLACE_SERVER_ADMIN" "${SERVER_ADMIN:-root@${EMAIL_DOMAIN:-${FULL_DOMAIN_NAME:-$HOSTNAME}}}" "$set_dir"
+    __find_replace "REPLACE_APP_USER" "${SERVICE_USER:-${RUNAS_USER:-root}}" "$set_dir"
+    __find_replace "REPLACE_WWW_USER" "${SERVICE_USER:-${RUNAS_USER:-root}}" "$set_dir"
+    __find_replace "REPLACE_APP_GROUP" "${SERVICE_GROUP:-${SERVICE_USER:-${RUNAS_USER:-root}}}" "$set_dir"
+    __find_replace "REPLACE_WWW_GROUP" "${SERVICE_GROUP:-${SERVICE_USER:-${RUNAS_USER:-root}}}" "$set_dir"
+    __find_replace "REPLACE_SERVICE_USER" "${SERVICE_USER:-${RUNAS_USER:-root}}" "$set_dir"
+    __find_replace "REPLACE_SERVICE_GROUP" "${SERVICE_GROUP:-${RUNAS_USER:-root}}" "$set_dir"
+    __find_replace "REPLACE_SERVER_ADMIN_URL" "$SERVER_ADMIN_URL" "$set_dir"
+    if [ -n "$VAR_DIR" ]; then
+      mkdir -p "$VAR_DIR"
+      __find_replace "REPLACE_VAR_DIR" "$VAR_DIR" "$set_dir"
+    fi
+    [ -n "$SERVICE_PORT" ] && __find_replace "REPLACE_SERVER_PORT" "${SERVICE_PORT:-80}" "$set_dir"
+    [ -n "$HOSTNAME" ] && __find_replace "REPLACE_SERVER_NAME" "${FULL_DOMAIN_NAME:-$HOSTNAME}" "$set_dir"
+    [ -n "$CONTAINER_NAME" ] && __find_replace "REPLACE_SERVER_SOFTWARE" "${CONTAINER_NAME:-docker}" "$set_dir"
+    [ -n "$WWW_ROOT_DIR" ] && __find_replace "REPLACE_SERVER_WWW_DIR" "${WWW_ROOT_DIR:-/usr/local/share/httpd/default}" "$set_dir"
+  done
+  if [ -n "$WWW_ROOT_DIR" ] && [ "$set_dir" != "$WWW_ROOT_DIR" ] && [ -d "$WWW_ROOT_DIR" ]; then
+    __find_replace "REPLACE_CONTAINER_IP4" "${REPLACE_CONTAINER_IP4:-127.0.0.1}" "$WWW_ROOT_DIR"
+    __find_replace "REPLACE_COPYRIGHT_FOOTER" "${COPYRIGHT_FOOTER:-Copyright 1999 - $(date +'%Y')}" "$WWW_ROOT_DIR"
+    __find_replace "REPLACE_LAST_UPDATED_ON_MESSAGE" "${LAST_UPDATED_ON_MESSAGE:-$(date +'Last updated on: %Y-%m-%d at %H:%M:%S')}" "$WWW_ROOT_DIR"
+  fi
+  mkdir -p "${TMP_DIR:-/tmp/$SERVICE_NAME}" "${RUN_DIR:-/run/$SERVICE_NAME}" "${LOG_DIR:-/data/logs/$SERVICE_NAME}"
+  chmod -f 777 "${TMP_DIR:-/tmp/$SERVICE_NAME}" "${RUN_DIR:-/run/$SERVICE_NAME}" "${LOG_DIR:-/data/logs/$SERVICE_NAME}"
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__initialize_database() {
+  [ "$IS_DATABASE_SERVICE" = "yes" ] || [ "$USES_DATABASE_SERVICE" = "yes" ] || return 0
+  local dir="${1:-$ETC_DIR}"
+  local db_normal_user="${DATABASE_USER_NORMAL:-$user_name}"
+  local db_normal_pass="${DATABASE_PASS_NORMAL:-$user_pass}"
+  local db_admin_user="${DATABASE_USER_ROOT:-$root_user_name}"
+  local db_admin_pass="${DATABASE_PASS_ROOT:-$root_user_pass}"
+  __find_replace "REPLACE_USER_NAME" "$db_normal_user" "$dir"
+  __find_replace "REPLACE_USER_PASS" "$db_normal_pass" "$dir"
+  __find_replace "REPLACE_DATABASE_USER" "$db_normal_user" "$dir"
+  __find_replace "REPLACE_DATABASE_PASS" "$db_normal_pass" "$dir"
+  __find_replace "REPLACE_ROOT_ADMIN" "$db_admin_user" "$dir"
+  __find_replace "REPLACE_ROOT_PASS" "$db_admin_pass" "$dir"
+  __find_replace "REPLACE_DATABASE_ROOT_USER" "$db_admin_user" "$dir"
+  __find_replace "REPLACE_DATABASE_ROOT_PASS" "$db_admin_pass" "$dir"
+  __find_replace "REPLACE_DATABASE_NAME" "$DATABASE_NAME" "$dir"
+  __find_replace "REPLACE_DATABASE_DIR" "$DATABASE_DIR" "$dir"
+  if [[ "$dir" == "/etc"* ]]; then
+    __find_replace "REPLACE_USER_NAME" "$db_normal_user" "/etc"
+    __find_replace "REPLACE_USER_PASS" "$db_normal_pass" "/etc"
+    __find_replace "REPLACE_DATABASE_USER" "$db_normal_user" "/etc"
+    __find_replace "REPLACE_DATABASE_PASS" "$db_normal_pass" "/etc"
+    __find_replace "REPLACE_ROOT_ADMIN" "$db_admin_user" "/etc"
+    __find_replace "REPLACE_ROOT_PASS" "$db_admin_pass" "/etc"
+    __find_replace "REPLACE_DATABASE_ROOT_USER" "$db_admin_user" "/etc"
+    __find_replace "REPLACE_DATABASE_ROOT_PASS" "$db_admin_pass" "/etc"
+    __find_replace "REPLACE_DATABASE_NAME" "$DATABASE_NAME" "/etc"
+    __find_replace "REPLACE_DATABASE_DIR" "$DATABASE_DIR" "/etc"
+  fi
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__initialize_db_users() {
+  [ "$IS_DATABASE_SERVICE" = "yes" ] || [ "$USES_DATABASE_SERVICE" = "yes" ] || return 0
+  db_normal_user="${DATABASE_USER_NORMAL:-$user_name}"
+  db_normal_pass="${DATABASE_PASS_NORMAL:-$user_pass}"
+  db_admin_user="${DATABASE_USER_ROOT:-$root_user_name}"
+  db_admin_pass="${DATABASE_PASS_ROOT:-$root_user_pass}"
+  export DATABASE_USER_NORMAL="$db_normal_user"
+  export DATABASE_PASS_NORMAL="$db_normal_pass"
+  export DATABASE_USER_ROOT="$db_admin_user"
+  export DATABASE_PASS_ROOT="$db_admin_pass"
+  export db_normal_user db_normal_pass db_admin_user db_admin_pass
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__initialize_system_etc() {
+  local conf_dir="$1"
+  local dir=""
+  local files=""
+  local directories=""
+  if [ -n "$conf_dir" ] && [ -e "$conf_dir" ]; then
+    files=$(find "$conf_dir"/* -not -path '*/env/*' -type f 2>/dev/null | sort -u | sed 's|/config/||')
+    directories=$(find "$conf_dir"/* -not -path '*/env/*' -type d 2>/dev/null | sort -u | sed 's|/config/||')
+    echo "Copying config files to system: $conf_dir > /etc/${conf_dir//\/config\//}"
+    if [ -n "$directories" ]; then
+      for d in $directories; do
+        dir="/etc/$d"
+        echo "Creating directory: $dir"
+        mkdir -p "$dir"
+      done
+    fi
+    for f in $files; do
+      etc_file="/etc/$f"
+      conf_file="/config/$f"
+      [ -f "$etc_file" ] && __rm "$etc_file"
+      __symlink "$etc_file" "$conf_file"
+      __initialize_replace_variables "$conf_file" "$etc_file"
+      [ -e "/data/$f" ] && __initialize_replace_variables "/data/$f"
+    done
+  fi
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__initialize_custom_bin_dir() {
+  local SET_USR_BIN=""
+  [ -d "/data/bin" ] && SET_USR_BIN+="$(__find /data/bin f) "
+  [ -d "/config/bin" ] && SET_USR_BIN+="$(__find /config/bin f) "
+  if [ -n "$SET_USR_BIN" ]; then
+    echo "Setting up bin $SET_USR_BIN > $LOCAL_BIN_DIR"
+    for create_bin_template in $SET_USR_BIN; do
+      if [ -n "$create_bin_template" ]; then
+        create_bin_name="${create_bin_template##*/}"
+        if [ -e "$create_bin_template" ]; then
+          ln -sf "$create_bin_template" "$LOCAL_BIN_DIR/$create_bin_name"
+        fi
+      fi
+    done
+    unset create_bin_template create_bin_name SET_USR_BIN
+  fi
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__initialize_www_root() {
+  local WWW_INIT=""
+  local WWW_TEMPLATE=""
+  [ -d "/usr/local/share/httpd/default" ] && WWW_TEMPLATE="/usr/local/share/httpd/default"
+  [ "$WWW_ROOT_DIR" = "/app" ] && WWW_INIT="${WWW_INIT:-true}"
+  [ "$WWW_ROOT_DIR" = "/data/htdocs" ] && WWW_INIT="${WWW_INIT:-true}"
+  if __is_dir_empty "$WWW_ROOT_DIR/"; then
+    WWW_INIT="true"
+  else
+    WWW_INIT="false"
+  fi
+  if [ "$WWW_INIT" = "true" ] && [ -d "$WWW_TEMPLATE" ]; then
+    cp -Rf "$WWW_TEMPLATE/." "$WWW_ROOT_DIR/" 2>/dev/null
+  fi
+  __initialize_web_health "$WWW_ROOT_DIR"
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__is_htdocs_mounted() {
+  WWW_ROOT_DIR="${WWW_ROOT_DIR:-/data/htdocs}"
+  [ -n "$ENV_WWW_ROOT_DIR" ] && WWW_ROOT_DIR="$ENV_WWW_ROOT_DIR"
+  if [ -n "$IMPORT_FROM_GIT" ]; then
+    if [[ ! "$IMPORT_FROM_GIT" =~ (https://|http://|git://|ssh://) ]]; then
+      unset IMPORT_FROM_GIT
+    fi
+  fi
+  if [ -n "$IMPORT_FROM_GIT" ] && command -v git &>/dev/null; then
+    if __is_dir_empty "$WWW_ROOT_DIR"; then
+      echo "Importing project from $IMPORT_FROM_GIT to $WWW_ROOT_DIR"
+      git clone -q "$IMPORT_FROM_GIT" "$WWW_ROOT_DIR"
+    elif [ -d "$WWW_ROOT_DIR" ]; then
+      echo "Updating the project in $WWW_ROOT_DIR"
+      git -C "$WWW_ROOT_DIR" pull -q
+    fi
+  elif [ -d "/app" ]; then
+    WWW_ROOT_DIR="/app"
+  elif [ -d "/data/htdocs/www" ]; then
+    WWW_ROOT_DIR="/data/htdocs/www"
+  elif [ -d "/data/htdocs/root" ]; then
+    WWW_ROOT_DIR="/data/htdocs/root"
+  elif [ -d "/data/htdocs" ]; then
+    WWW_ROOT_DIR="/data/htdocs"
+  elif [ -d "/data/wwwroot" ]; then
+    WWW_ROOT_DIR="/data/wwwroot"
+  fi
+  [ -d "$WWW_ROOT_DIR" ] || mkdir -p "$WWW_ROOT_DIR"
+  export WWW_ROOT_DIR="${WWW_ROOT_DIR:-/usr/local/share/httpd/default}"
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__initialize_ssl_certs() {
+  [ -d "$SSL_DIR" ] || mkdir -p "$SSL_DIR"
+  if [ "$SSL_ENABLED" = "yes" ]; then
+    if [ -f "$SSL_CERT" ] && [ -f "$SSL_KEY" ]; then
+      if [ -n "$SSL_CA" ] && [ -f "$SSL_CA" ]; then
+        mkdir -p "$SSL_DIR/certs"
+        cat "$SSL_CA" >>"/etc/ssl/certs/ca-certificates.crt"
+      fi
+      __update_ssl_certs
+    else
+      __create_ssl_cert
+    fi
+  fi
+  type update-ca-certificates &>/dev/null && update-ca-certificates &>/dev/null
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__start_php_dev_server() {
+  if [ "$2" = "yes" ]; then
+    if [ -d "/usr/local/share/httpd" ]; then
+      find "/usr/local/share/httpd" -type f -not -path '.git*' -iname '*.php' -exec sed -i 's|[<].*SERVER_ADDR.*[>]|'${CONTAINER_IP4_ADDRESS:-127.0.0.1}'|g' {} \; 2>/dev/null
+      php -S 0.0.0.0:$PHP_DEV_SERVER_PORT -t "/usr/local/share/httpd"
+    fi
+    if [[ "$1" != "/usr/local/share/httpd"* ]]; then
+      find "$1" -type f -not -path '.git*' -iname '*.php' -exec sed -i 's|[<].*SERVER_ADDR.*[>]|'${CONTAINER_IP4_ADDRESS:-127.0.0.1}'|g' {} \; 2>/dev/null
+      php -S 0.0.0.0:$PHP_DEV_SERVER_PORT -t "$1"
+    fi
+  fi
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__check_service() {
+  if [ "$1" = "check" ]; then
+    shift $#
+    __proc_check "$EXEC_CMD_NAME" || __proc_check "$EXEC_CMD_BIN"
+    exit $?
+  fi
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__switch_to_user() {
+  # Use SERVICE_USER if set, otherwise fall back to RUNAS_USER
+  local switch_user="${SERVICE_USER:-$RUNAS_USER}"
+  if [ "$switch_user" = "root" ]; then
+    su_exec=""
+    su_cmd() { eval "$@" || return 1; }
+  elif command -v gosu &>/dev/null; then
+    su_exec="gosu $switch_user"
+    su_cmd() { $su_exec "$@" || return 1; }
+  elif command -v runuser &>/dev/null; then
+    su_exec="runuser -u $switch_user"
+    su_cmd() { $su_exec "$@" || return 1; }
+  elif command -v sudo &>/dev/null; then
+    su_exec="sudo -u $switch_user"
+    su_cmd() { $su_exec "$@" || return 1; }
+  elif command -v su &>/dev/null; then
+    su_exec="su -s /bin/sh - $switch_user"
+    su_cmd() { $su_exec -c "$@" || return 1; }
+  else
+    su_exec=""
+    su_cmd() {
+      echo "Can not switch to $switch_user: attempting to run as root"
+      if ! eval "$@"; then
+        return 1
+      fi
+    }
+  fi
+  export su_exec
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# usage backup "days" "hours"
+__backup() {
+  local dirs="" backup_dir backup_name backup_exclude runTime cronTime maxDays
+  if test -n "$1" && test -z "${1//[0-9]/}"; then
+    maxDays="$1"
+    shift 1
+  else
+    maxDays="7"
+  fi
+  if test -n "$1" && test -z "${1//[0-9]/}"; then
+    cronTime="$1"
+    shift 1
+  else
+    cronTime=""
+  fi
+  local exitCodeP=0
+  local exitStatus=0
+  local pidFile="/run/.backup.pid"
+  local logDir="/data/log/backups"
+  maxDays="${BACKUP_MAX_DAYS:-$maxDays}"
+  cronTime="${BACKUP_RUN_CRON:-$cronTime}"
+  backup_dir="$BACKUP_DIR/$(date +'%y/%m')"
+  backup_name="$(date +'%d_%H-%M').tar.gz"
+  backup_exclude="/data/logs $BACKUP_DIR $BACK_EXCLUDE_DIR"
+  [ -d "/data" ] && dirs+="/data "
+  [ -d "/config" ] && dirs+="/config "
+  [ -d "$logDir" ] || mkdir -p "$logDir"
+  [ -d "$backup_dir" ] || mkdir -p "$backup_dir"
+  [ -z "$dirs" ] && echo "BACKUP_DIR is unset" >&2 && return 1
+  [ -f "$pidFile" ] && echo "A backup job is already running" >&2 && return 1
+  echo "$$" >"$pidFile"
+  trap "rm -f '$pidFile'" EXIT INT TERM
+  echo "Starting backup in $(date)" >>"$logDir/$CONTAINER_NAME"
+  local tar_excludes=()
+  for excl in $backup_exclude; do
+    tar_excludes+=("--exclude=$excl")
+  done
+  tar "${tar_excludes[@]}" -cfvz "$backup_dir/$backup_name" $dirs 2>/dev/stderr >>"$logDir/$CONTAINER_NAME" || exitCodeP=1
+  if [ $exitCodeP -eq 0 ]; then
+    echo "Backup has completed and saved to: $backup_dir/$backup_name"
+    printf '%s\n\n' "Backup has completed on $(date)" >>"$logDir/$CONTAINER_NAME"
+  else
+    __rm "${backup_dir:?}/$backup_name"
+    echo "Backup has failed - log file saved to: $logDir/$CONTAINER_NAME" >&2
+    printf '%s\n\n' "Backup has completed on $(date)" >>"$logDir/$CONTAINER_NAME"
+    exitStatus=1
+  fi
+  [ -f "$pidFile" ] && __rm "$pidFile"
+  [ -n "$maxDays" ] && find "$BACKUP_DIR" -mtime +"$maxDays" -exec rm -Rf {} \; >/dev/null 2>&1
+  if [ -n "$cronTime" ]; then
+    runTime=$((cronTime * 3600))
+  else
+    return $exitStatus
+  fi
+  sleep $runTime && __backup "$maxDays" "$cronTime"
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# set variables from function calls
+export INIT_DATE="${INIT_DATE:-$(date)}"
+export START_SERVICES="${START_SERVICES:-yes}"
+export ENTRYPOINT_MESSAGE="${ENTRYPOINT_MESSAGE:-yes}"
+export ENTRYPOINT_FIRST_RUN="${ENTRYPOINT_FIRST_RUN:-yes}"
+export DATA_DIR_INITIALIZED="${DATA_DIR_INITIALIZED:-no}"
+export CONFIG_DIR_INITIALIZED="${CONFIG_DIR_INITIALIZED:-no}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# System
+export LANG="${LANG:-C.UTF-8}"
+export LC_ALL="${LANG:-C.UTF-8}"
+export TZ="${TZ:-${TIMEZONE:-America/New_York}}"
+export HOSTNAME="${FULL_DOMAIN_NAME:-${SERVER_HOSTNAME:-$HOSTNAME}}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Default directories
+export SSL_DIR="${SSL_DIR:-/config/ssl}"
+export SSL_CA="${SSL_CA:-/config/ssl/ca.crt}"
+export SSL_KEY="${SSL_KEY:-/config/ssl/localhost.pem}"
+export SSL_CERT="${SSL_CERT:-/config/ssl/localhost.crt}"
+export LOCAL_BIN_DIR="${LOCAL_BIN_DIR:-/usr/local/bin}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Backup settings
+export BACKUP_MAX_DAYS="${BACKUP_MAX_DAYS:-}"
+export BACKUP_RUN_CRON="${BACKUP_RUN_CRON:-}"
+export BACKUP_DIR="${BACKUP_DIR:-/data/backups}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+CONTAINER_IP4_ADDRESS="${CONTAINER_IP4_ADDRESS:-$(__get_ip4)}"
+CONTAINER_IP6_ADDRESS="${CONTAINER_IP6_ADDRESS:-$(__get_ip6)}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Additional
+export WORK_DIR="${ENV_WORK_DIR:-$WORK_DIR}"
+export SET_RANDOM_PASS="${SET_RANDOM_PASS:-$(__random_password 16)}"
+export PHP_INI_DIR="${PHP_INI_DIR:-$(__find_php_ini)}"
+export PHP_BIN_DIR="${PHP_BIN_DIR:-$(__find_php_bin)}"
+export HTTPD_CONFIG_FILE="${HTTPD_CONFIG_FILE:-$(__find_httpd_conf)}"
+export NGINX_CONFIG_FILE="${NGINX_CONFIG_FILE:-$(__find_nginx_conf)}"
+export MYSQL_CONFIG_FILE="${MYSQL_CONFIG_FILE:-$(__find_mysql_conf)}"
+export PGSQL_CONFIG_FILE="${PGSQL_CONFIG_FILE:-$(__find_pgsql_conf)}"
+export LIGHTTPD_CONFIG_FILE="${LIGHTTPD_CONFIG_FILE:-$(__find_lighttpd_conf)}"
+export MARIADB_CONFIG_FILE="${MARIADB_CONFIG_FILE:-$(__find_mysql_conf)}"
+export POSTGRES_CONFIG_FILE="${POSTGRES_CONFIG_FILE:-$(__find_pgsql_conf)}"
+export MONGODB_CONFIG_FILE="${MONGODB_CONFIG_FILE:-$(__find_mongodb_conf)}"
+export ENTRYPOINT_PID_FILE="${ENTRYPOINT_PID_FILE:-/run/.entrypoint.pid}"
+export ENTRYPOINT_INIT_FILE="${ENTRYPOINT_INIT_FILE:-/config/.entrypoint.done}"
+export ENTRYPOINT_DATA_INIT_FILE="${ENTRYPOINT_DATA_INIT_FILE:-/data/.docker_has_run}"
+export ENTRYPOINT_CONFIG_INIT_FILE="${ENTRYPOINT_CONFIG_INIT_FILE:-/config/.docker_has_run}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# is already Initialized
+if [ -z "$DATA_DIR_INITIALIZED" ]; then
+  if [ -f "$ENTRYPOINT_DATA_INIT_FILE" ]; then
+    DATA_DIR_INITIALIZED="yes"
+  else
+    DATA_DIR_INITIALIZED="no"
+  fi
+fi
+if [ -z "$CONFIG_DIR_INITIALIZED" ]; then
+  if [ -f "$ENTRYPOINT_CONFIG_INIT_FILE" ]; then
+    CONFIG_DIR_INITIALIZED="yes"
+  else
+    CONFIG_DIR_INITIALIZED="no"
+  fi
+fi
+if [ -z "$ENTRYPOINT_FIRST_RUN" ]; then
+  if [ -f "$ENTRYPOINT_PID_FILE" ] || [ -f "$ENTRYPOINT_INIT_FILE" ]; then
+    ENTRYPOINT_FIRST_RUN="no"
+  else
+    ENTRYPOINT_FIRST_RUN="yes"
+  fi
+fi
+export ENTRYPOINT_DATA_INIT_FILE DATA_DIR_INITIALIZED ENTRYPOINT_CONFIG_INIT_FILE CONFIG_DIR_INITIALIZED
+export ENTRYPOINT_PID_FILE ENTRYPOINT_INIT_FILE ENTRYPOINT_FIRST_RUN
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# export the functions
+export -f __get_pid __start_init_scripts __is_running __update_ssl_certs __create_ssl_cert
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# end of functions
+# vim: set ft=sh ts=4 sw=4 st=4 et :
diff --git a/rootfs/usr/local/etc/docker/init.d/zz-nginx.sh b/rootfs/usr/local/etc/docker/init.d/zz-nginx.sh
new file mode 100755
index 0000000..642e41c
--- /dev/null
+++ b/rootfs/usr/local/etc/docker/init.d/zz-nginx.sh
@@ -0,0 +1,1058 @@
+#!/usr/bin/env bash
+# shellcheck shell=bash
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+##@Version           :  202606051249-git
+# @@Author           :  Jason Hempstead
+# @@Contact          :  jason@casjaysdev.pro
+# @@License          :  WTFPL
+# @@ReadME           :  zz-nginx.sh --help
+# @@Copyright        :  Copyright: (c) 2026 Jason Hempstead, Casjays Developments
+# @@Created          :  Friday, Jun 26, 2026 11:57 EDT
+# @@File             :  zz-nginx.sh
+# @@Description      :  
+# @@Changelog        :  New script
+# @@TODO             :  Better documentation
+# @@Other            :  
+# @@Resource         :  
+# @@Terminal App     :  no
+# @@sudo/root        :  no
+# @@Template         :  other/start-service
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# shellcheck disable=SC1001,SC1003,SC2001,SC2003,SC2016,SC2031,SC2090,SC2115,SC2120,SC2155,SC2199,SC2229,SC2317,SC2329
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+set -eo pipefail
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# run trap command on exit
+trap '__trap_err_handler' ERR
+trap 'retVal=$?;if [ "$SERVICE_IS_RUNNING" != "yes" ] && [ -f "$SERVICE_PID_FILE" ]; then rm -Rf "$SERVICE_PID_FILE"; fi;exit $retVal' SIGINT SIGTERM
+trap 'retVal=$?;if [ "$SERVICE_IS_RUNNING" != "yes" ] && [ -f "$SERVICE_PID_FILE" ]; then rm -Rf "$SERVICE_PID_FILE"; fi;exit $retVal' SIGPWR 2>/dev/null || true
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# ERR trap handler - smart about critical vs non-critical errors
+__trap_err_handler() {
+  local retVal=$?
+  local command="$BASH_COMMAND"
+  # Ignore SIGPIPE and user interrupts
+  [ $retVal -eq 130 ] || [ $retVal -eq 141 ] && return $retVal
+  # Non-critical: file operations, text processing, user/group operations
+  if [[ "$command" =~ (mkdir|touch|chmod|chown|chgrp|ln|cp|mv|rm|echo|printf|cat|tee|sed|awk|grep|find|sort|uniq|adduser|addgroup|usermod|groupmod|id|getent) ]]; then
+    return 0
+  fi
+  # Non-critical: conditional checks that might fail
+  if [[ "$command" =~ (test|\[|\[\[|kill -0|pgrep|pidof|ps) ]]; then
+    return 0
+  fi
+  # Critical error - but only fail if service hasn't started yet
+  if [ "$SERVICE_IS_RUNNING" != "yes" ]; then
+    echo "❌ Critical error (exit $retVal): $command" >&2
+    kill -TERM 1 2>/dev/null || exit $retVal
+  fi
+  return 0
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+SCRIPT_FILE="$0"
+SERVICE_NAME="nginx"
+SCRIPT_NAME="${SCRIPT_FILE##*/}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Function to exit appropriately based on context
+__script_exit() {
+  local exit_code="${1:-0}"
+  if [ "${BASH_SOURCE[0]}" != "${0}" ]; then
+    # Script is being sourced - use return
+    return "$exit_code"
+  else
+    # Script is being executed - use exit
+    exit "$exit_code"
+  fi
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Exit if service is disabled
+if [ -n "$ZZ_NGINX_SH_APPNAME_ENABLED" ]; then
+  if [ "$ZZ_NGINX_SH_APPNAME_ENABLED" != "yes" ]; then
+    export SERVICE_DISABLED="$SERVICE_NAME"
+    __script_exit 0
+  fi
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# setup debugging - https://www.gnu.org/software/bash/manual/html_node/The-Set-Builtin.html
+[ -f "/config/.debug" ] && [ -z "$DEBUGGER_OPTIONS" ] && export DEBUGGER_OPTIONS="$(<"/config/.debug")" || DEBUGGER_OPTIONS="${DEBUGGER_OPTIONS:-}"
+if [ "$DEBUGGER" = "on" ] || [ -f "/config/.debug" ]; then
+  echo "Enabling debugging"
+  [ -n "$DEBUGGER_OPTIONS" ] && set -"$DEBUGGER_OPTIONS"
+  export DEBUGGER="on"
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+export PATH="/usr/local/etc/docker/bin:/usr/local/bin:/usr/bin:/usr/sbin:/bin:/sbin"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# import the functions file
+if [ -f "/usr/local/etc/docker/functions/entrypoint.sh" ]; then
+  . "/usr/local/etc/docker/functions/entrypoint.sh"
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# import variables
+for set_env in "/root/env.sh" "/usr/local/etc/docker/env"/*.sh "/config/env"/*.sh; do
+  if [ -f "$set_env" ]; then
+    . "$set_env"
+  fi
+done
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# exit if __start_init_scripts function hasn't been Initialized
+if [ ! -f "/run/.start_init_scripts.pid" ]; then
+  echo "__start_init_scripts function hasn't been Initialized" >&2
+  SERVICE_IS_RUNNING="no"
+  __script_exit 1
+fi
+# Clean up any stale PID file for this service on startup
+if [ -n "$SERVICE_NAME" ] && [ -f "/run/init.d/$SERVICE_NAME.pid" ]; then
+  old_pid=$(<"/run/init.d/$SERVICE_NAME.pid") 2>/dev/null
+  if [ -n "$old_pid" ] && ! kill -0 "$old_pid" 2>/dev/null; then
+    echo "🧹 Removing stale PID file for $SERVICE_NAME"
+    rm -f "/run/init.d/$SERVICE_NAME.pid"
+  fi
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Custom functions
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Script to execute
+START_SCRIPT="/usr/local/etc/docker/exec/$SERVICE_NAME"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Reset environment before executing service
+RESET_ENV="no"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set webroot
+WWW_ROOT_DIR="/usr/local/share/httpd/default"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Default predefined variables
+# set data directory
+DATA_DIR="/data/nginx"
+# set config directory
+CONF_DIR="/config/nginx"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# set the containers etc directory
+ETC_DIR="/etc/nginx"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# set the var dir
+VAR_DIR=""
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# set the temp dir
+TMP_DIR="/tmp/nginx"
+# set scripts pid dir
+RUN_DIR="/run/nginx"
+# set log directory
+LOG_DIR="/data/logs/nginx"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set the working dir
+WORK_DIR=""
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# port which service is listening on
+SERVICE_PORT="80"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# User to use to launch service - IE: postgres
+# normally root
+RUNAS_USER="root"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# User and group in which the service switches to - IE: nginx,apache,mysql,postgres
+# execute command as another user
+#SERVICE_USER="init.d"
+# Set the service group
+#SERVICE_GROUP="init.d"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set password length
+RANDOM_PASS_USER=""
+RANDOM_PASS_ROOT=""
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set user and group ID
+# set the user id
+SERVICE_UID="0"
+# set the group id
+SERVICE_GID="0"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# execute command variables - keep single quotes variables will be expanded later
+# command to execute
+EXEC_CMD_BIN='/usr/sbin/nginx'
+# command arguments - daemon off; is set in nginx.conf so no extra flags needed
+EXEC_CMD_ARGS=''
+# execute script before
+EXEC_PRE_SCRIPT=''
+# Set to 'no' for configuration services (no daemon process), leave blank for actual services
+SERVICE_USES_PID=''
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Is this service a web server
+IS_WEB_SERVER="yes"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Is this service a database server
+IS_DATABASE_SERVICE="no"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Does this service use a database server
+USES_DATABASE_SERVICE="no"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set defualt type - [custom,sqlite,redis,postgres,mariadb,mysql,couchdb,mongodb,supabase]
+DATABASE_SERVICE_TYPE="sqlite"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Show message before execute
+PRE_EXEC_MESSAGE=""
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set the wait time to execute __post_execute function - minutes
+POST_EXECUTE_WAIT_TIME="1"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Update path var
+PATH="$PATH:."
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Where to save passwords to
+# directory to save username/password for root user
+ROOT_FILE_PREFIX="/config/secure/auth/root"
+# directory to save username/password for normal user
+USER_FILE_PREFIX="/config/secure/auth/user"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# root/admin user info password/random]
+# root user name
+root_user_name="${ZZ_NGINX_SH_ROOT_USER_NAME:-}"
+# root user password
+root_user_pass="${ZZ_NGINX_SH_ROOT_PASS_WORD:-}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Normal user info [password/random]
+# normal user name
+user_name="${ZZ_NGINX_SH_USER_NAME:-}"
+# normal user password
+user_pass="${ZZ_NGINX_SH_USER_PASS_WORD:-}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Load variables from config
+# Generated by my dockermgr script
+if [ -f "/config/env/nginx.script.sh" ]; then
+  . "/config/env/nginx.script.sh"
+fi
+# Overwrite the variables
+if [ -f "/config/env/nginx.sh" ]; then
+  . "/config/env/nginx.sh"
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Additional predefined variables
+# Runtime sync-provider env vars (read in __pre_execute to seed sync-config-default-override.json)
+APP_PORT="${APP_PORT:-80}"
+WEBDAV_BACKEND="${WEBDAV_BACKEND:-}"
+WEBDAV_BASE_URL="${WEBDAV_BASE_URL:-}"
+WEBDAV_USERNAME="${WEBDAV_USERNAME:-}"
+WEBDAV_SYNC_FOLDER_PATH="${WEBDAV_SYNC_FOLDER_PATH:-}"
+SYNC_INTERVAL="${SYNC_INTERVAL:-}"
+IS_COMPRESSION_ENABLED="${IS_COMPRESSION_ENABLED:-}"
+IS_ENCRYPTION_ENABLED="${IS_ENCRYPTION_ENABLED:-}"
+# SuperSync (super-productivity's own operation-based sync server)
+# Set SUPERSYNC_BASE_URL to point at a self-hosted supersync server;
+# leave empty to use the public https://sync.super-productivity.com
+SUPERSYNC_BASE_URL="${SUPERSYNC_BASE_URL:-}"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Additional variables
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Specifiy custom directories to be created
+ADD_APPLICATION_FILES=""
+ADD_APPLICATION_DIRS=""
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+APPLICATION_FILES="$LOG_DIR/$SERVICE_NAME.log"
+APPLICATION_DIRS="$ETC_DIR $CONF_DIR $DATA_DIR $LOG_DIR $TMP_DIR $RUN_DIR $VAR_DIR"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Additional config dirs - will be Copied to /etc/$name
+ADDITIONAL_CONFIG_DIRS=""
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# define variables that need to be loaded into the service - escape quotes - var=\"value\",other=\"test\"
+CMD_ENV=""
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Overwrite based on file/directory
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Per Application Variables or imports
+
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Custom commands to run before copying to /config
+__run_precopy() {
+  # Define environment
+  local hostname=${HOSTNAME}
+  if [ ! -d "/run/healthcheck" ]; then
+    mkdir -p "/run/healthcheck"
+  fi
+  # Seed /config/nginx from /etc/nginx on first run and symlink back
+  if builtin type -t __init_nginx | grep -q 'function'; then
+    __init_nginx
+  fi
+  # Ensure nginx monitors alongside tini in the __no_exit health loop
+  export SERVICES_LIST="${SERVICES_LIST:+$SERVICES_LIST }nginx"
+  # allow custom functions
+  if builtin type -t __run_precopy_local | grep -q 'function'; then
+    __run_precopy_local
+  fi
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Custom prerun functions - IE setup WWW_ROOT_DIR
+__execute_prerun() {
+  # Define environment
+  local hostname=${HOSTNAME}
+  # Define actions/commands
+
+  # allow custom functions
+  if builtin type -t __execute_prerun_local | grep -q 'function'; then
+    __execute_prerun_local
+  fi
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Run any pre-execution checks
+__run_pre_execute_checks() {
+  # Set variables
+  local exitStatus=0
+  # message to show at start
+  local pre_execute_checks_MessageST="Running preexecute check for $SERVICE_NAME"
+  # message to show at completion
+  local pre_execute_checks_MessageEnd="Finished preexecute check for $SERVICE_NAME"
+  __banner "$pre_execute_checks_MessageST"
+  # Put command to execute in parentheses
+  {
+    true
+  }
+  exitStatus=$?
+  __banner "$pre_execute_checks_MessageEnd: Status $exitStatus"
+
+  # show exit message
+  if [ $exitStatus -ne 0 ]; then
+    echo "The pre-execution check has failed" >&2
+    if [ -f "$SERVICE_PID_FILE" ]; then
+      rm -Rf "$SERVICE_PID_FILE"
+    fi
+    __script_exit 1
+  fi
+  # allow custom functions
+  if builtin type -t __run_pre_execute_checks_local | grep -q 'function'; then
+    __run_pre_execute_checks_local
+  fi
+  # exit function
+  return $exitStatus
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# use this function to update config files - IE: change port
+__update_conf_files() {
+  # default exit code
+  local exitCode=0
+  # set hostname
+  local sysname="${SERVER_NAME:-${FULL_DOMAIN_NAME:-$HOSTNAME}}"
+  local app_port="${APP_PORT:-80}"
+  local webdav_backend="${WEBDAV_BACKEND:-}"
+  local wwwroot="${WWW_ROOT_DIR:-/usr/local/share/httpd/default}"
+  local nginx_conf
+
+  # Write to vhosts.d — seeded from rootfs/tmp/etc/nginx/vhosts.d/ and included by nginx.conf
+  mkdir -p "/etc/nginx/vhosts.d"
+  nginx_conf="/etc/nginx/vhosts.d/default.conf"
+
+  # Write the nginx vhost config with runtime values substituted
+  {
+    echo "server {"
+    echo "    listen       ${app_port};"
+    echo "    listen  [::]:${app_port};"
+    echo "    server_name  _;"
+    echo ""
+    echo "    root   ${wwwroot};"
+    echo "    index  index.html;"
+    echo ""
+    echo "    # SPA routing - return index.html for all Angular routes"
+    echo "    location / {"
+    echo '        try_files $uri $uri/ /index.html;'
+    echo "    }"
+    echo ""
+    echo "    # Cache static assets aggressively"
+    echo '    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot|map|webp|avif)$ {'
+    echo "        expires 1y;"
+    echo '        add_header Cache-Control "public, immutable";'
+    echo "        access_log off;"
+    echo "    }"
+    if [ -n "$webdav_backend" ]; then
+      echo ""
+      echo "    # WebDAV reverse proxy"
+      echo "    location = /webdav { return 302 /webdav/; }"
+      echo "    location /webdav/ {"
+      echo "        resolver 127.0.0.11;"
+      echo '        rewrite ^/webdav/(.*)$ /$1 break;'
+      echo "        proxy_pass ${webdav_backend};"
+      echo "    }"
+    fi
+    echo ""
+    echo "    # Health check endpoint used by HEALTHCHECK in Dockerfile"
+    echo "    location = /health {"
+    echo "        access_log off;"
+    echo '        return 200 "healthy\n";'
+    echo "        add_header Content-Type text/plain;"
+    echo "    }"
+    echo ""
+    echo "    error_page   500 502 503 504  /50x.html;"
+    echo "    location = /50x.html {"
+    echo "        root   /usr/share/nginx/html;"
+    echo "    }"
+    echo "}"
+  } > "$nginx_conf"
+
+  unset sysname
+  # allow custom functions
+  if builtin type -t __update_conf_files_local | grep -q 'function'; then
+    __update_conf_files_local
+  fi
+  # exit function
+  return $exitCode
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# function to run before executing
+__pre_execute() {
+  # default exit code
+  local exitCode=0
+  # set hostname
+  local sysname="${SERVER_NAME:-${FULL_DOMAIN_NAME:-$HOSTNAME}}"
+  local wwwroot="${WWW_ROOT_DIR:-/usr/local/share/httpd/default}"
+  local sync_config="${wwwroot}/assets/sync-config-default-override.json"
+
+  # Seed sync provider pre-config from environment variables if jq is available
+  # and at least one relevant env var is set. super-productivity reads this file
+  # on startup to pre-populate the sync settings dialog.
+  if command -v jq >/dev/null 2>&1; then
+    local json="{}"
+
+    # WebDAV sync provider settings (mutually exclusive with SuperSync)
+    if [ -n "${WEBDAV_BASE_URL:-}" ]; then
+      json=$(printf '%s' "$json" | jq '.syncProvider = "WebDAV"')
+      json=$(printf '%s' "$json" | jq --arg v "$WEBDAV_BASE_URL" '.webDav.baseUrl = $v')
+    fi
+    if [ -n "${WEBDAV_USERNAME:-}" ]; then
+      json=$(printf '%s' "$json" | jq --arg v "$WEBDAV_USERNAME" '.webDav.userName = $v')
+    fi
+    if [ -n "${WEBDAV_SYNC_FOLDER_PATH:-}" ]; then
+      json=$(printf '%s' "$json" | jq --arg v "$WEBDAV_SYNC_FOLDER_PATH" '.webDav.syncFolderPath = $v')
+    fi
+
+    # SuperSync (super-productivity's own operation-based sync server)
+    # SUPERSYNC_BASE_URL overrides the default https://sync.super-productivity.com
+    # Auth tokens are obtained through the in-app login flow after startup.
+    if [ -n "${SUPERSYNC_BASE_URL:-}" ]; then
+      json=$(printf '%s' "$json" | jq '.syncProvider = "SuperSync"')
+      json=$(printf '%s' "$json" | jq --arg v "$SUPERSYNC_BASE_URL" '.superSync.baseUrl = $v')
+    fi
+
+    # Shared sync settings (apply regardless of provider)
+    if [ -n "${SYNC_INTERVAL:-}" ]; then
+      # App expects milliseconds; env var is in minutes
+      local sync_ms=$(( SYNC_INTERVAL * 60000 ))
+      json=$(printf '%s' "$json" | jq --argjson v "$sync_ms" '.syncInterval = $v')
+    fi
+    if [ -n "${IS_COMPRESSION_ENABLED:-}" ]; then
+      json=$(printf '%s' "$json" | jq --argjson v "${IS_COMPRESSION_ENABLED}" '.isCompressionEnabled = $v')
+    fi
+    if [ -n "${IS_ENCRYPTION_ENABLED:-}" ]; then
+      json=$(printf '%s' "$json" | jq --argjson v "${IS_ENCRYPTION_ENABLED}" '.isEncryptionEnabled = $v')
+    fi
+
+    # Write the file only if at least one setting was injected
+    if [ "$json" != "{}" ]; then
+      mkdir -p "$(dirname "$sync_config")"
+      printf '%s\n' "$json" > "$sync_config"
+    fi
+  fi
+
+  # - - - - - - - - - - - - - - - - - - - - - - - - -
+  # unset unneeded variables
+  unset sysname
+  # Lets wait a few seconds before continuing
+  sleep 2
+  # allow custom functions
+  if builtin type -t __pre_execute_local | grep -q 'function'; then
+    __pre_execute_local
+  fi
+  # exit function
+  return $exitCode
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# function to run after executing
+__post_execute() {
+  # init pid var
+  local pid=""
+  # set default exit code
+  local retVal=0
+  # how long to wait before executing
+  local ctime=${POST_EXECUTE_WAIT_TIME:-1}
+  # convert minutes to seconds
+  local waitTime=$((ctime * 60))
+  # message to show at start
+  local postMessageST="Running post commands for $SERVICE_NAME"
+  # message to show at completion
+  local postMessageEnd="Finished post commands for $SERVICE_NAME"
+  # wait
+  sleep $waitTime
+  # execute commands after waiting
+  (
+    # show message
+    __banner "$postMessageST"
+    # commands to execute
+    sleep 5
+    # show exit message
+    __banner "$postMessageEnd: Status $retVal"
+  ) 2>"/dev/stderr" | tee -p -a "/data/logs/init.txt" &
+  # fire-and-forget: backgrounded subshell always succeeds at launch
+  retVal=0
+  # allow custom functions
+  if builtin type -t __post_execute_local | grep -q 'function'; then
+    __post_execute_local
+  fi
+  # exit function
+  return $retVal
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# use this function to update config files - IE: change port
+__pre_message() {
+  local exitCode=0
+  if [ -n "$PRE_EXEC_MESSAGE" ]; then
+    eval echo "$PRE_EXEC_MESSAGE"
+  fi
+  # execute commands
+
+  # allow custom functions
+  if builtin type -t __pre_message_local | grep -q 'function'; then
+    __pre_message_local
+  fi
+  # exit function
+  return $exitCode
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# use this function to setup ssl support
+__update_ssl_conf() {
+  local exitCode=0
+  local sysname="${SERVER_NAME:-${FULL_DOMAIN_NAME:-$HOSTNAME}}"
+  # execute commands
+
+  # allow custom functions
+  if builtin type -t __update_ssl_conf_local | grep -q 'function'; then
+    __update_ssl_conf_local
+  fi
+  # set exitCode
+  return $exitCode
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__create_service_env() {
+  local exitCode=0
+  if [ ! -f "/config/env/${SERVICE_NAME:-$SCRIPT_NAME}.sh" ]; then
+    cat <<EOF | tee -p "/config/env/${SERVICE_NAME:-$SCRIPT_NAME}.sh" &>/dev/null
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# root/admin user info [password/random]
+#ENV_ROOT_USER_NAME="${ENV_ROOT_USER_NAME:-$ZZ_NGINX_SH_ROOT_USER_NAME}"   # root user name
+#ENV_ROOT_USER_PASS="${ENV_ROOT_USER_NAME:-$ZZ_NGINX_SH_ROOT_PASS_WORD}"   # root user password
+#root_user_name="${ENV_ROOT_USER_NAME:-$root_user_name}"                              #
+#root_user_pass="${ENV_ROOT_USER_PASS:-$root_user_pass}"                              #
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+#Normal user info [password/random]
+#ENV_USER_NAME="${ENV_USER_NAME:-$ZZ_NGINX_SH_USER_NAME}"                  #
+#ENV_USER_PASS="${ENV_USER_PASS:-$ZZ_NGINX_SH_USER_PASS_WORD}"             #
+#user_name="${ENV_USER_NAME:-$user_name}"                                             # normal user name
+#user_pass="${ENV_USER_PASS:-$user_pass}"                                             # normal user password
+
+EOF
+  fi
+  if [ ! -f "/config/env/${SERVICE_NAME:-$SCRIPT_NAME}.local.sh" ]; then
+    # - - - - - - - - - - - - - - - - - - - - - - - - -
+    __run_precopy_local() { true; }
+    # - - - - - - - - - - - - - - - - - - - - - - - - -
+    __execute_prerun_local() { true; }
+    # - - - - - - - - - - - - - - - - - - - - - - - - -
+    __run_pre_execute_checks_local() { true; }
+    # - - - - - - - - - - - - - - - - - - - - - - - - -
+    __update_conf_files_local() { true; }
+    # - - - - - - - - - - - - - - - - - - - - - - - - -
+    __pre_execute_local() { true; }
+    # - - - - - - - - - - - - - - - - - - - - - - - - -
+    __post_execute_local() { true; }
+    # - - - - - - - - - - - - - - - - - - - - - - - - -
+    __pre_message_local() { true; }
+    # - - - - - - - - - - - - - - - - - - - - - - - - -
+    __update_ssl_conf_local() { true; }
+    # - - - - - - - - - - - - - - - - - - - - - - - - -
+  fi
+  if ! __file_exists_with_content "/config/env/${SERVICE_NAME:-$SCRIPT_NAME}.sh"; then
+    exitCode=$((exitCode + 1))
+  fi
+  if ! __file_exists_with_content "/config/env/${SERVICE_NAME:-$SCRIPT_NAME}.local.sh"; then
+    exitCode=$((exitCode + 1))
+  fi
+  return $exitCode
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# script to start server
+__run_start_script() {
+  local runExitCode=0
+  # expand variables
+  local workdir="$(eval echo "${WORK_DIR:-}")"
+  # expand variables
+  local cmd="$(eval echo "${EXEC_CMD_BIN:-}")"
+  # expand variables
+  local args="$(eval echo "${EXEC_CMD_ARGS:-}")"
+  # expand variables
+  local name="$(eval echo "${EXEC_CMD_NAME:-}")"
+  # expand variables
+  local pre="$(eval echo "${EXEC_PRE_SCRIPT:-}")"
+  # expand variables
+  local extra_env="$(eval echo "${CMD_ENV//,/ }")"
+  # expand variables
+  local lc_type="$(eval echo "${LANG:-${LC_ALL:-$LC_CTYPE}}")"
+  # expand variables
+  local home="$(eval echo "${workdir//\/root/\/tmp\/docker}")"
+  # expand variables
+  local path="$(eval echo "$PATH")"
+  # expand variables
+  local message="$(eval echo "")"
+  local sysname="${SERVER_NAME:-${FULL_DOMAIN_NAME:-$HOSTNAME}}"
+  if [ -f "$CONF_DIR/$SERVICE_NAME.exec_cmd.sh" ]; then
+    . "$CONF_DIR/$SERVICE_NAME.exec_cmd.sh"
+  fi
+  #
+  if [ -z "$cmd" ]; then
+    __post_execute 2>"/dev/stderr" | tee -p -a "/data/logs/init.txt"
+    retVal=$?
+    __log_info "Initialization of $SCRIPT_NAME has completed"
+    __script_exit $retVal
+  else
+    # ensure the command exists
+    if [ ! -x "$cmd" ]; then
+      __log_error "$name is not a valid executable"
+      return 2
+    fi
+    # check and exit if already running (respects SERVICE_USES_PID in __proc_check)
+    if __proc_check "$name" || __proc_check "$cmd"; then
+      __log_debug "Service $name is already running"
+      return 0
+    else
+      # - - - - - - - - - - - - - - - - - - - - - - - - -
+      # show message if env exists
+      if [ -n "$cmd" ]; then
+        if [ -n "$SERVICE_USER" ]; then
+          __log_info "Setting up $cmd to run as $SERVICE_USER"
+        else
+          SERVICE_USER="root"
+        fi
+        if [ -n "$SERVICE_PORT" ]; then
+          __log_info "$name will be running on port $SERVICE_PORT"
+        else
+          SERVICE_PORT=""
+        fi
+      fi
+      if [ -n "$pre" ] && command -v "$pre" &>/dev/null; then
+        export cmd_exec="$pre $cmd $args"
+        message="Starting service: $name $args through $pre"
+      else
+        export cmd_exec="$cmd $args"
+        message="Starting service: $name $args"
+      fi
+      if [ -n "$su_exec" ]; then
+        __log_debug "Using $su_exec" | tee -a -p "/data/logs/init.txt"
+      fi
+      __log_info "$message" | tee -a -p "/data/logs/init.txt"
+      su_cmd touch "$SERVICE_PID_FILE"
+      # W14: invalidate cached START_SCRIPT if key variables changed
+      local _script_hash_src="$cmd $args $SERVICE_USER $RESET_ENV $su_exec"
+      local _script_hash
+      _script_hash=$(printf '%s' "$_script_hash_src" | md5sum 2>/dev/null | cut -c1-8 || true)
+      if [ -f "${START_SCRIPT}.hash" ] && [ -f "$START_SCRIPT" ]; then
+        if [ "$(<"${START_SCRIPT}.hash")" != "$_script_hash" ]; then
+          rm -f "$START_SCRIPT" "${START_SCRIPT}.hash"
+        fi
+      fi
+      if [ "$RESET_ENV" = "yes" ]; then
+        # RESET_ENV=yes intentionally strips all inherited vars; only explicit vars are passed
+        if [ ! -f "$START_SCRIPT" ]; then
+          # Use printf %q to safely quote each env component for embedding in the script
+          local _q_home _q_lc _q_path _q_sysname _q_svcuser _q_su _q_cmd _q_args _q_extra
+          _q_home=$(printf '%q' "$home")
+          _q_lc=$(printf '%q' "$lc_type")
+          _q_path=$(printf '%q' "$path")
+          _q_sysname=$(printf '%q' "$sysname")
+          _q_svcuser=$(printf '%q' "${SERVICE_USER:-$RUNAS_USER}")
+          _q_su=''
+          [ -n "$su_exec" ] && _q_su=$(printf '%q ' $su_exec)
+          _q_cmd=$(printf '%q' "$cmd")
+          _q_args=''
+          [ -n "$args" ] && _q_args=$(printf '%q ' $args)
+          _q_extra=''
+          [ -n "$extra_env" ] && _q_extra=$(printf '%q ' $extra_env)
+          {
+            printf '#!/usr/bin/env bash\n'
+            printf "trap 'exitCode=\$?;[ \$exitCode -ne 0 ] && [ -f \"\$SERVICE_PID_FILE\" ] && rm -Rf \"\$SERVICE_PID_FILE\";exit \$exitCode' EXIT\n"
+            printf 'set -Eeo pipefail\n'
+            printf '# Setting up %s to run as %s with env\n' "$cmd" "${SERVICE_USER:-root}"
+            printf 'retVal=10\n'
+            printf 'SERVICE_NAME=%q\n' "$SERVICE_NAME"
+            printf 'SERVICE_PID_FILE=%q\n' "$SERVICE_PID_FILE"
+            printf 'LOG_DIR=%q\n' "$LOG_DIR"
+            printf '%s env -i HOME=%s LC_CTYPE=%s PATH=%s HOSTNAME=%s USER=%s %s %s %s 2>>"/dev/stderr" >>"$LOG_DIR/$SERVICE_NAME.log" &\n' \
+              "$_q_su" "$_q_home" "$_q_lc" "$_q_path" "$_q_sysname" "$_q_svcuser" "$_q_extra" "$_q_cmd" "$_q_args"
+            printf 'execPid=$!\n'
+            printf 'sleep 1\n'
+            printf 'if [ -n "$execPid" ] && kill -0 "$execPid" 2>/dev/null; then\n'
+            printf '  echo "$execPid" >"$SERVICE_PID_FILE"\n'
+            printf '  retVal=0\n'
+            printf '  printf '"'"'%%s\n'"'"' "$SERVICE_NAME: $execPid" >"/run/healthcheck/$SERVICE_NAME"\n'
+            printf 'else\n'
+            printf '  retVal=10\n'
+            printf '  echo "Failed to start service %s" >&2\n' "$cmd"
+            printf 'fi\n'
+            printf 'exit $retVal\n'
+          } >"$START_SCRIPT"
+          printf '%s' "$_script_hash" >"${START_SCRIPT}.hash"
+        fi
+      else
+        if [ ! -f "$START_SCRIPT" ]; then
+          local _q_su _q_cmd _q_args
+          _q_su=''
+          [ -n "$su_exec" ] && _q_su=$(printf '%q ' $su_exec)
+          _q_cmd=$(printf '%q' "$cmd")
+          _q_args=''
+          [ -n "$args" ] && _q_args=$(printf '%q ' $args)
+          {
+            printf '#!/usr/bin/env bash\n'
+            printf "trap 'exitCode=\$?;[ \$exitCode -ne 0 ] && [ -f \"\$SERVICE_PID_FILE\" ] && rm -Rf \"\$SERVICE_PID_FILE\";exit \$exitCode' EXIT\n"
+            printf 'set -Eeo pipefail\n'
+            printf '# Setting up %s to run as %s\n' "$cmd" "${SERVICE_USER:-root}"
+            printf 'retVal=10\n'
+            printf 'SERVICE_NAME=%q\n' "$SERVICE_NAME"
+            printf 'SERVICE_PID_FILE=%q\n' "$SERVICE_PID_FILE"
+            printf 'LOG_DIR=%q\n' "$LOG_DIR"
+            printf '%s %s %s 2>>"/dev/stderr" >>"$LOG_DIR/$SERVICE_NAME.log" &\n' \
+              "$_q_su" "$_q_cmd" "$_q_args"
+            printf 'execPid=$!\n'
+            printf 'sleep 1\n'
+            printf 'if [ -n "$execPid" ] && kill -0 "$execPid" 2>/dev/null; then\n'
+            printf '  echo "$execPid" >"$SERVICE_PID_FILE"\n'
+            printf '  retVal=0\n'
+            printf 'else\n'
+            printf '  retVal=10\n'
+            printf '  echo "Failed to start service %s" >&2\n' "$cmd"
+            printf 'fi\n'
+            printf 'exit $retVal\n'
+          } >"$START_SCRIPT"
+          printf '%s' "$_script_hash" >"${START_SCRIPT}.hash"
+        fi
+      fi
+    fi
+    if [ ! -x "$START_SCRIPT" ]; then
+      chmod 755 -Rf "$START_SCRIPT"
+    fi
+    if [ "$CONTAINER_INIT" != "yes" ]; then
+      # W15: launch as bash, not sh, since the generated script uses bash-specific features
+      bash "$START_SCRIPT"
+      runExitCode=$?
+    fi
+  fi
+  return $runExitCode
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# username and password actions
+__run_secure_function() {
+  local filesperms
+  if [ -n "$user_name" ] || [ -n "$user_pass" ]; then
+    for filesperms in "${USER_FILE_PREFIX}"/*; do
+      if [ -e "$filesperms" ]; then
+        chmod -Rf 600 "$filesperms"
+        [ -n "$SERVICE_USER" ] && chown -Rf "$SERVICE_USER:$SERVICE_USER" "$filesperms" 2>/dev/null
+      fi
+    done 2>/dev/null | tee -p -a "/data/logs/init.txt"
+  fi
+  if [ -n "$root_user_name" ] || [ -n "$root_user_pass" ]; then
+    for filesperms in "${ROOT_FILE_PREFIX}"/*; do
+      if [ -e "$filesperms" ]; then
+        chmod -Rf 600 "$filesperms"
+        [ -n "$SERVICE_USER" ] && chown -Rf "$SERVICE_USER:$SERVICE_USER" "$filesperms" 2>/dev/null
+      fi
+    done 2>/dev/null | tee -p -a "/data/logs/init.txt"
+  fi
+  unset filesperms
+}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Allow ENV_ variable - Import env file
+if __file_exists_with_content "/config/env/${SERVICE_NAME:-$SCRIPT_NAME}.sh"; then
+  . "/config/env/${SERVICE_NAME:-$SCRIPT_NAME}.sh"
+fi
+if __file_exists_with_content "/config/env/${SERVICE_NAME:-$SCRIPT_NAME}.local.sh"; then
+  . "/config/env/${SERVICE_NAME:-$SCRIPT_NAME}.local.sh"
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# default exit code
+SERVICE_EXIT_CODE=0
+# application specific
+EXEC_CMD_NAME="${EXEC_CMD_BIN##*/}"
+SERVICE_PID_FILE="/run/init.d/$EXEC_CMD_NAME.pid"
+_resolved="$(type -P "$EXEC_CMD_BIN" 2>/dev/null)"
+[ -n "$_resolved" ] && EXEC_CMD_BIN="$_resolved"
+_resolved="$(type -P "$EXEC_PRE_SCRIPT" 2>/dev/null)"
+[ -n "$_resolved" ] && EXEC_PRE_SCRIPT="$_resolved"
+unset _resolved
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Only run check when explicitly requested
+if [ "$1" = "check" ] && __check_service "$1"; then
+  SERVICE_IS_RUNNING=yes
+elif [ "$1" = "check" ]; then
+  SERVICE_IS_RUNNING="no"
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# ensure needed directories exists
+if [ ! -d "$LOG_DIR" ]; then
+  mkdir -p "$LOG_DIR"
+fi
+if [ ! -d "$RUN_DIR" ]; then
+  mkdir -p "$RUN_DIR"
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# create auth directories
+if [ -n "$USER_FILE_PREFIX" ]; then
+  if [ ! -d "$USER_FILE_PREFIX" ]; then
+    mkdir -p "$USER_FILE_PREFIX"
+  fi
+fi
+if [ -n "$ROOT_FILE_PREFIX" ]; then
+  if [ ! -d "$ROOT_FILE_PREFIX" ]; then
+    mkdir -p "$ROOT_FILE_PREFIX"
+  fi
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+if [ -z "$RUNAS_USER" ]; then
+  RUNAS_USER="root"
+fi
+if [ -z "$SERVICE_USER" ]; then
+  SERVICE_USER="$RUNAS_USER"
+fi
+if [ -z "$SERVICE_GROUP" ]; then
+  SERVICE_GROUP="${SERVICE_USER:-$RUNAS_USER}"
+fi
+if [ "$IS_WEB_SERVER" = "yes" ]; then
+  RESET_ENV="yes"
+  __is_htdocs_mounted
+fi
+if [ "$IS_WEB_SERVER" = "yes" ] && [ -z "$SERVICE_PORT" ]; then
+  SERVICE_PORT="80"
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Database env
+if [ "$IS_DATABASE_SERVICE" = "yes" ] || [ "$USES_DATABASE_SERVICE" = "yes" ]; then
+  RESET_ENV="no"
+  DATABASE_CREATE="${ENV_DATABASE_CREATE:-$DATABASE_CREATE}"
+  DATABASE_USER_NORMAL="${ENV_DATABASE_USER:-${DATABASE_USER_NORMAL:-$user_name}}"
+  DATABASE_PASS_NORMAL="${ENV_DATABASE_PASSWORD:-${DATABASE_PASS_NORMAL:-$user_pass}}"
+  DATABASE_USER_ROOT="${ENV_DATABASE_ROOT_USER:-${DATABASE_USER_ROOT:-$root_user_name}}"
+  DATABASE_PASS_ROOT="${ENV_DATABASE_ROOT_PASSWORD:-${DATABASE_PASS_ROOT:-$root_user_pass}}"
+  if [ -n "$DATABASE_PASS_NORMAL" ]; then
+    if [ ! -f "${USER_FILE_PREFIX}/db_pass_user" ]; then
+      echo "$DATABASE_PASS_NORMAL" >"${USER_FILE_PREFIX}/db_pass_user"
+    fi
+  fi
+  if [ -n "$DATABASE_PASS_ROOT" ]; then
+    if [ ! -f "${ROOT_FILE_PREFIX}/db_pass_root" ]; then
+      echo "$DATABASE_PASS_ROOT" >"${ROOT_FILE_PREFIX}/db_pass_root"
+    fi
+  fi
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# [DATABASE_DIR_[SQLITE,REDIS,POSTGRES,MARIADB,COUCHDB,MONGODB,SUPABASE]]
+if [ "$DATABASE_SERVICE_TYPE" = "custom" ]; then
+  DATABASE_DIR="${DATABASE_DIR_CUSTOM:-/data/db/custom}"
+  DATABASE_BASE_DIR="${DATABASE_DIR_CUSTOM:-/data/db/custom}"
+  DATABASE_ADMIN_WWW_ROOT="${DATABASE_ADMIN_WWW_ROOT_CUSTOM:-/usr/local/share/httpd/admin/databases}"
+  if [ -d "$DATABASE_ADMIN_WWW_ROOT" ]; then
+    SERVER_ADMIN_URL="${SERVER_ADMIN_URL_CUSTOM:-/admin/dbadmin}"
+  fi
+elif [ "$SERVICE_NAME" = "redis" ] || [ "$DATABASE_SERVICE_TYPE" = "redis" ]; then
+  DATABASE_DIR="${DATABASE_DIR_REDIS:-/data/db/redis}"
+  DATABASE_BASE_DIR="${DATABASE_DIR_REDIS:-/data/db/redis}"
+  DATABASE_ADMIN_WWW_ROOT="${DATABASE_ADMIN_WWW_ROOT_REDIS:-/usr/local/share/httpd/admin/redis}"
+  if [ -d "$DATABASE_ADMIN_WWW_ROOT" ]; then
+    SERVER_ADMIN_URL="${SERVER_ADMIN_URL_REDIS:-/admin/redis}"
+  fi
+elif [ "$SERVICE_NAME" = "postgres" ] || [ "$DATABASE_SERVICE_TYPE" = "postgres" ]; then
+  DATABASE_DIR="${DATABASE_DIR_POSTGRES:-/data/db/postgres}"
+  DATABASE_BASE_DIR="${DATABASE_DIR_POSTGRES:-/data/db/postgres}"
+  DATABASE_ADMIN_WWW_ROOT="${DATABASE_ADMIN_WWW_ROOT_POSTGRES:-/usr/local/share/httpd/admin/postgres}"
+  if [ -d "$DATABASE_ADMIN_WWW_ROOT" ]; then
+    SERVER_ADMIN_URL="${SERVER_ADMIN_URL_POSTGRES:-/admin/postgres}"
+  fi
+elif [ "$SERVICE_NAME" = "mariadb" ] || [ "$DATABASE_SERVICE_TYPE" = "mariadb" ]; then
+  DATABASE_DIR="${DATABASE_DIR_MARIADB:-/data/db/mariadb}"
+  DATABASE_BASE_DIR="${DATABASE_DIR_MARIADB:-/data/db/mariadb}"
+  DATABASE_ADMIN_WWW_ROOT="${DATABASE_ADMIN_WWW_ROOT_MARIADB:-/usr/local/share/httpd/admin/mysql}"
+  if [ -d "$DATABASE_ADMIN_WWW_ROOT" ]; then
+    SERVER_ADMIN_URL="${SERVER_ADMIN_URL_MARIADB:-/admin/mysql}"
+  fi
+elif [ "$SERVICE_NAME" = "mysql" ] || [ "$DATABASE_SERVICE_TYPE" = "mysql" ]; then
+  DATABASE_DIR="${DATABASE_DIR_MYSQL:-/data/db/mysql}"
+  DATABASE_BASE_DIR="${DATABASE_DIR_MYSQL:-/data/db/mysql}"
+  DATABASE_ADMIN_WWW_ROOT="${DATABASE_ADMIN_WWW_ROOT_MYSQL:-/usr/local/share/httpd/admin/mysql}"
+  if [ -d "$DATABASE_ADMIN_WWW_ROOT" ]; then
+    SERVER_ADMIN_URL="${SERVER_ADMIN_URL_MYSQL:-/admin/mysql}"
+  fi
+elif [ "$SERVICE_NAME" = "couchdb" ] || [ "$DATABASE_SERVICE_TYPE" = "couchdb" ]; then
+  DATABASE_DIR="${DATABASE_DIR_COUCHDB:-/data/db/couchdb}"
+  DATABASE_BASE_DIR="${DATABASE_DIR_COUCHDB:-/data/db/couchdb}"
+  DATABASE_ADMIN_WWW_ROOT="${DATABASE_ADMIN_WWW_ROOT_COUCHDB:-/usr/local/share/httpd/admin/couchdb}"
+  if [ -d "$DATABASE_ADMIN_WWW_ROOT" ]; then
+    SERVER_ADMIN_URL="${SERVER_ADMIN_URL_COUCHDB:-/admin/couchdb}"
+  fi
+elif [ "$SERVICE_NAME" = "mongodb" ] || [ "$DATABASE_SERVICE_TYPE" = "mongodb" ]; then
+  DATABASE_DIR="${DATABASE_DIR_MONGODB:-/data/db/mongodb}"
+  DATABASE_BASE_DIR="${DATABASE_DIR_MONGODB:-/data/db/mongodb}"
+  DATABASE_ADMIN_WWW_ROOT="${DATABASE_ADMIN_WWW_ROOT_MONGODB:-/usr/local/share/httpd/admin/mongodb}"
+  if [ -d "$DATABASE_ADMIN_WWW_ROOT" ]; then
+    SERVER_ADMIN_URL="${SERVER_ADMIN_URL_MONGODB:-/admin/mongodb}"
+  fi
+elif [ "$SERVICE_NAME" = "supabase" ] || [ "$DATABASE_SERVICE_TYPE" = "supabase" ]; then
+  DATABASE_DIR="${DATABASE_DIR_SUPABASE:-/data/db/supabase}"
+  DATABASE_BASE_DIR="${DATABASE_DIR_SUPABASE:-/data/db/supabase}"
+  DATABASE_ADMIN_WWW_ROOT="${DATABASE_ADMIN_WWW_ROOT_SUPABASE:-/usr/local/share/httpd/admin/supabase}"
+  if [ -d "$DATABASE_ADMIN_WWW_ROOT" ]; then
+    SERVER_ADMIN_URL="${SERVER_ADMIN_URL_SUPBASE:-/admin/supabase}"
+  fi
+elif [ "$SERVICE_NAME" = "sqlite" ] || [ "$DATABASE_SERVICE_TYPE" = "sqlite" ]; then
+  DATABASE_DIR="${DATABASE_DIR_SQLITE:-/data/db/sqlite}/$SERVER_NAME"
+  DATABASE_BASE_DIR="${DATABASE_DIR_SQLITE:-/data/db/sqlite}/$SERVER_NAME"
+  DATABASE_ADMIN_WWW_ROOT="${DATABASE_ADMIN_WWW_ROOT_SQLITE:-/usr/local/share/httpd/admin/sqlite}"
+  if [ -d "$DATABASE_ADMIN_WWW_ROOT" ]; then
+    SERVER_ADMIN_URL="${SERVER_ADMIN_URL_SQLITE:-/admin/sqlite}"
+  fi
+  if [ ! -d "$DATABASE_DIR" ]; then
+    mkdir -p "$DATABASE_DIR"
+  fi
+  chmod 777 "$DATABASE_DIR"
+fi
+if [ -n "$DATABASE_ADMIN_WWW_ROOT" ]; then
+  if [ ! -d "$DATABASE_ADMIN_WWW_ROOT" ]; then
+    mkdir -p "${DATABASE_ADMIN_WWW_ROOT}"
+  fi
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Allow variables via imports - Overwrite existing
+if [ -f "/config/env/${SERVICE_NAME:-$SCRIPT_NAME}.sh" ]; then
+  . "/config/env/${SERVICE_NAME:-$SCRIPT_NAME}.sh"
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# set password to random if variable is random
+if [ "$user_pass" = "random" ]; then
+  user_pass="$(__random_password ${RANDOM_PASS_USER:-16})"
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+if [ "$root_user_pass" = "random" ]; then
+  root_user_pass="$(__random_password ${RANDOM_PASS_ROOT:-16})"
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Allow setting initial users and passwords via environment and save to file
+if [ -n "$user_name" ]; then
+  echo "$user_name" >"${USER_FILE_PREFIX}/${SERVICE_NAME}_name"
+fi
+if [ -n "$user_pass" ]; then
+  echo "$user_pass" >"${USER_FILE_PREFIX}/${SERVICE_NAME}_pass"
+fi
+if [ -n "$root_user_name" ]; then
+  echo "$root_user_name" >"${ROOT_FILE_PREFIX}/${SERVICE_NAME}_name"
+fi
+if [ -n "$root_user_pass" ]; then
+  echo "$root_user_pass" >"${ROOT_FILE_PREFIX}/${SERVICE_NAME}_pass"
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Allow per init script usernames and passwords
+if __file_exists_with_content "${USER_FILE_PREFIX}/${SERVICE_NAME}_name"; then
+  user_name="$(<"${USER_FILE_PREFIX}/${SERVICE_NAME}_name")"
+fi
+if __file_exists_with_content "${USER_FILE_PREFIX}/${SERVICE_NAME}_pass"; then
+  user_pass="$(<"${USER_FILE_PREFIX}/${SERVICE_NAME}_pass")"
+fi
+if __file_exists_with_content "${ROOT_FILE_PREFIX}/${SERVICE_NAME}_name"; then
+  root_user_name="$(<"${ROOT_FILE_PREFIX}/${SERVICE_NAME}_name")"
+fi
+if __file_exists_with_content "${ROOT_FILE_PREFIX}/${SERVICE_NAME}_pass"; then
+  root_user_pass="$(<"${ROOT_FILE_PREFIX}/${SERVICE_NAME}_pass")"
+fi
+if __file_exists_with_content "${USER_FILE_PREFIX}/db_pass_user"; then
+  DATABASE_PASS_NORMAL="$(<"${USER_FILE_PREFIX}/db_pass_user")"
+fi
+if __file_exists_with_content "${ROOT_FILE_PREFIX}/db_pass_root"; then
+  DATABASE_PASS_ROOT="$(<"${ROOT_FILE_PREFIX}/db_pass_root")"
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# set hostname for script
+sysname="${SERVER_NAME:-${FULL_DOMAIN_NAME:-$HOSTNAME}}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__create_service_env
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Setup /config directories
+__init_config_etc
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# pre-run function
+__execute_prerun
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# create user if needed
+__create_service_user "$SERVICE_USER" "$SERVICE_GROUP" "${WORK_DIR:-/home/$SERVICE_USER}" "${SERVICE_UID:-}" "${SERVICE_GID:-}"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Modify user if needed
+__set_user_group_id $SERVICE_USER ${SERVICE_UID:-} ${SERVICE_GID:-}
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Create base directories
+__setup_directories
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# set switch user command
+__switch_to_user
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Initialize the home/working dir
+__init_working_dir
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# show init message
+__pre_message
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+#
+__initialize_db_users
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Initialize ssl
+__update_ssl_conf
+__update_ssl_certs
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set permissions in ${USER_FILE_PREFIX} and ${ROOT_FILE_PREFIX}
+__run_secure_function
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__run_precopy
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Copy /config to /etc
+for config_2_etc in $CONF_DIR $ADDITIONAL_CONFIG_DIRS; do
+  __initialize_system_etc "$config_2_etc" 2>/dev/stderr | tee -p -a "/data/logs/init.txt"
+done
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Replace variables
+__initialize_replace_variables "$ETC_DIR" "$CONF_DIR" "$ADDITIONAL_CONFIG_DIRS" "$WWW_ROOT_DIR"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+#
+__initialize_database
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Updating config files
+__update_conf_files
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# run the pre execute commands
+__pre_execute
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# Set permissions
+__fix_permissions "$SERVICE_USER" "$SERVICE_GROUP"
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+#
+__run_pre_execute_checks 2>/dev/stderr | tee -a -p "/data/logs/entrypoint.log" "/data/logs/init.txt" || return 20
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__run_start_script 2>>/dev/stderr | tee -p -a "/data/logs/entrypoint.log"
+errorCode=${PIPESTATUS[0]}
+if [ -n "$EXEC_CMD_BIN" ]; then
+  if [ "$errorCode" -eq 0 ]; then
+    SERVICE_EXIT_CODE=0
+    SERVICE_IS_RUNNING="yes"
+  else
+    SERVICE_EXIT_CODE=$errorCode
+    SERVICE_IS_RUNNING="${SERVICE_IS_RUNNING:-no}"
+    if [ ! -s "$SERVICE_PID_FILE" ]; then
+      rm -Rf "$SERVICE_PID_FILE"
+    fi
+  fi
+fi
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+# start the post execute function in background
+__post_execute 2>"/dev/stderr" | tee -p -a "/data/logs/init.txt" &
+# - - - - - - - - - - - - - - - - - - - - - - - - -
+__script_exit $SERVICE_EXIT_CODE
+# vim: set ft=sh ts=4 sw=4 st=4 et :