#!/bin/sh
set -eu

# Docker creates a fresh named volume as root. Prepare only the mutable live
# cache before dropping privileges; the imported offline snapshot stays read-only.
if [ -d "${MAP_CACHE_DIR:-}" ]; then
  mkdir -p "$MAP_CACHE_DIR"
  chown -R node:node "$MAP_CACHE_DIR"
fi

exec su-exec node "$@"