#!/bin/sh
# diwall-watch — wrapper for the .deb distribution channel.
# watch.py journals through lib/journal.py, which resolves DIWALL_CONF —
# without this export, journal and preuves fall back outside the operator's
# encrypted secrets directory (audit 2026-08-05, D-04).
export DIWALL_CONF="${DIWALL_CONF:-/etc/diwall/diwall.conf}"
exec /opt/diwall/venv/bin/python3 /opt/diwall/watch.py "$@"
