set -euo pipefail
cd /opt/infisical
echo '== compose ps =='
docker compose -f docker-compose.prod.yml ps
echo '== backend recent logs sanitized =='
docker logs --tail 180 infisical-app 2>&1 | sed -E 's/(password|secret|token|key|AUTH_SECRET|ENCRYPTION_KEY)[^[:space:]]*/[REDACTED]/Ig' || true
echo '== retry health =='
for i in $(seq 1 20); do
  printf 'try=%s ' "$i"
  if curl -fsS --max-time 5 http://127.0.0.1:8088/api/status; then echo; exit 0; fi
  echo
  sleep 3
done
exit 1