Put env vars use can update into separate file that is built from a template.

start.sh

@@ -17,12 +17,6 @@ export DB_PORT=${CLOUDRON_POSTGRESQL_PORT}
 export DB_NAME=${CLOUDRON_POSTGRESQL_DATABASE}
 export DB_USER=${CLOUDRON_POSTGRESQL_USERNAME}
 export DB_PASSWD=${CLOUDRON_POSTGRESQL_PASSWORD}
-export ROMM_AUTH_SECRET_KEY=$(/usr/bin/openssl rand -hex 32)
-export IGDB_CLIENT_ID=
-export IGDB_CLIENT_SECRET=
-export MOBYGAMES_API_KEY=
-export STEAMGRIDDB_API_KEY=
-export OIDC_ENABLED=true
 export OIDC_PROVIDER=${CLOUDRON_OIDC_PROVIDER_NAME}
 export OIDC_CLIENT_ID=${CLOUDRON_OIDC_CLIENT_ID}
 export OIDC_CLIENT_SECRET=${CLOUDRON_OIDC_CLIENT_SECRET}
@@ -35,5 +29,26 @@ export XDG_CACHE_HOME=/tmp/cache
 export REDIS_HOST=${CLOUDRON_REDIS_HOST}
 export REDIS_PORT=${CLOUDRON_REDIS_PORT}
 
+TEMPLATE_FILE="/app/pkg/env.sh.template"
+ENV_FILE="/app/data/env.sh"
+
+# Check if env.sh exists in /app/data
+if [ -f "$ENV_FILE" ]; then
+    echo "env.sh already exists in $ENV_FILE"
+else
+    # Copy the template to the target location
+    echo "Copying $TEMPLATE_FILE to $ENV_FILE"
+    cp "$TEMPLATE_FILE" "$ENV_FILE"
+    chmod +x "$ENV_FILE"
+
+    # Generate a new secret key using openssl
+    SECRET_KEY=$(openssl rand -hex 32 2>/dev/null)
+    echo "export ROMM_AUTH_SECRET_KEY=$SECRET_KEY" >> "$ENV_FILE"
+
+    echo "Successfully created $ENV_FILE from template"
+fi
+
+source /app/data/env.sh
+
 echo "==> Starting supervisor"
 exec /usr/bin/supervisord --configuration /etc/supervisor/supervisord.conf --nodaemon -i Romm