add generate new tls host cert

entrypoint.sh

@@ -0,0 +1,37 @@
+#!/bin/sh
+set -e
+
+mkdir -p /root/.gnupg
+chmod 700 /root/.gnupg
+
+# Initialize pass store if missing
+if [ ! -d "/root/.password-store" ]; then
+  echo "Initializing password store..."
+
+  # Generate GPG key
+  gpg --batch --gen-key /protonmail/gpgparams
+
+  # Extract fingerprint
+  KEY=$(gpg --list-secret-keys --with-colons | awk -F: '/^sec:/ {print $5; exit}')
+
+  # Initialize pass
+  pass init "$KEY"
+fi
+
+# Initialize
+if [[ "$1" == "init" ]]; then
+  # Kill the other instance as only one can be running at a time.
+  # This allows users to run entrypoint init inside a running conainter
+  # which is useful in a k8s environment.
+  # || true to make sure this would not fail in case there is no running instance.
+  pkill protonmail-bridge || true
+
+  # Run any ProtonMail Bridge Command - Login
+  proton-bridge --cli "$@"
+else
+  # Start ProtonMail Bridge
+  # Fake a terminal, so it does not quit because of EOF...
+  rm -f faketty
+  mkfifo faketty
+  cat faketty | proton-bridge --cli "$@"
+fi