#!/bin/bash
# Kubernetes / container gateway quickstart

set -euo pipefail

export TS_API_KEY_ID="${TS_API_KEY_ID:-your_api_key_id}"
export TS_API_KEY="${TS_API_KEY:-your_api_key}"

docker pull trustedsignatures/container-gateway:latest
docker run -d --name pdf-sealer -p 8080:8080 trustedsignatures/container-gateway:latest

curl http://localhost:8080/health

PDF_BASE64=$(base64 < document.pdf | tr -d '\n')

curl -X POST http://localhost:8080/seal \
  -H "Content-Type: application/json" \
  -d '{
    "pdfBuffer": "'"${PDF_BASE64}"'",
    "apiKey": "'"${TS_API_KEY}"'",
    "apiKeyId": "'"${TS_API_KEY_ID}"'",
    "tsaTimestamp": true,
    "includeLtv": true,
    "limitChanges": "no-changes"
  }' \
  --output sealed-response.json