Program.cs

using System;
using System.IO;
using Microsoft.AspNetCore;
using Microsoft.AspNetCore.Hosting;

namespace PortLogistics
{
    public class Program
    {
        public static void Main(string[] args)
        {
            // Defensive check: when running in containerized environments, a host mount may
            // expose a path like /https/aspnetapp.pfx. If that path is not a regular file
            // (for example it's a directory) or is not readable from the container process,
            // Kestrel will throw UnauthorizedAccessException while attempting to load it.
            // Detect and remove the env var to fall back to HTTP-only behavior in development.
            try
            {
                var certPathEnv = Environment.GetEnvironmentVariable("ASPNETCORE_Kestrel__Certificates__Default__Path");
                if (!string.IsNullOrEmpty(certPathEnv))
                {
                    // Only keep the variable when it points to a readable regular file
                    if (Directory.Exists(certPathEnv) || !File.Exists(certPathEnv))
                    {
                        // Unset the environment variable so Kestrel won't attempt to load it
                        Environment.SetEnvironmentVariable("ASPNETCORE_Kestrel__Certificates__Default__Path", null);
                        // Also unset password to be safe
                        Environment.SetEnvironmentVariable("ASPNETCORE_Kestrel__Certificates__Default__Password", null);
                        Console.WriteLine($"[Startup] Removed invalid Kestrel certificate path: {certPathEnv}");
                    }
                    else
                    {
                        // Try opening the file once to detect permission errors early
                        try
                        {
                            using var stream = File.Open(certPathEnv, FileMode.Open, FileAccess.Read);
                        }
                        catch (Exception ex)
                        {
                            Environment.SetEnvironmentVariable("ASPNETCORE_Kestrel__Certificates__Default__Path", null);
                            Environment.SetEnvironmentVariable("ASPNETCORE_Kestrel__Certificates__Default__Password", null);
                            Console.WriteLine($"[Startup] Could not read Kestrel certificate at {certPathEnv}: {ex.Message}. Environment variables cleared to avoid crash.");
                        }
                    }
                }
            }
            catch (Exception ex)
            {
                // Don't prevent application from starting - only log diagnostic message
                Console.WriteLine($"[Startup] Error while validating Kestrel certificate env vars: {ex}");
            }

            CreateWebHostBuilder(args).Build().Run();
        }

        public static IWebHostBuilder CreateWebHostBuilder(string[] args) =>
            WebHost.CreateDefaultBuilder(args)
                .UseStartup<Startup>();
                //.UseUrls("http://0.0.0.0:5001");
    }
}