taler-deployment

Deployment scripts and configuration files
Log | Files | Refs | README

commit 311fc2e4b2de28bb65a8c8cb637c59c36d89a770
parent b70fb900da350631bac8d21821d9a506128a65f4
Author: Christian Grothoff <christian@grothoff.org>
Date:   Tue,  7 Mar 2023 22:10:56 +0100

fixes

Diffstat:
Mnetzbon/config_launch_libeufin.sh | 4++--
Mnetzbon/setup-exchange.sh | 35++++++++++++++++++++---------------
2 files changed, 22 insertions(+), 17 deletions(-)

diff --git a/netzbon/config_launch_libeufin.sh b/netzbon/config_launch_libeufin.sh @@ -30,7 +30,7 @@ source functions.sh source config/user.conf source config/internal.conf -if test -z ${BANK_NAME:-} +if test -z "${BANK_NAME:-}" then say "Error: config/user.conf does not specify BANK_NAME" exit 1 @@ -40,7 +40,7 @@ then say "Error: config/user.conf does not specify DOMAIN_NAME" exit 1 fi -if test -z ${SANDBOX_ADMIN_PASSWORD:-} +if test -z "${SANDBOX_ADMIN_PASSWORD:-}" then say "Error: config/user.conf does not specify SANDBOX_ADMIN_PASSWORD" exit 1 diff --git a/netzbon/setup-exchange.sh b/netzbon/setup-exchange.sh @@ -6,6 +6,8 @@ source functions.sh source config/user.conf source config/internal.conf +say "Beginning Exchange setup" + # Required inputs: # # - LIBEUFIN_NEXUS_USERNAME (exchange username for libeufin-nexus) @@ -62,6 +64,8 @@ then DO_OFFLINE=y echo "DO_OFFLINE=y" >> config/user.conf fi +else + say "Master public key is $MASTER_PUBLIC_KEY" fi export MASTER_PUBLIC_KEY @@ -76,21 +80,6 @@ sudo -i -u postgres createuser taler-exchange-closer || true sudo -i -u postgres createuser taler-exchange-aggregator || true sudo -i -u postgres createdb -O taler-exchange-httpd $EXCHANGE_DB || true -echo "GRANT USAGE ON SCHEMA exchange TO \"taler-exchange-wire\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} -echo "GRANT SELECT,INSERT,UPDATE,DELETE ON ALL TABLES IN SCHEMA exchange TO \"taler-exchange-wire\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} -echo "GRANT USAGE ON SCHEMA _v TO \"taler-exchange-wire\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} -echo "GRANT SELECT ON ALL TABLES IN SCHEMA _v TO \"taler-exchange-wire\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} - -echo "GRANT USAGE ON SCHEMA exchange TO \"taler-exchange-closer\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} -echo "GRANT SELECT,INSERT,UPDATE,DELETE ON ALL TABLES IN SCHEMA exchange TO \"taler-exchange-closer\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} -echo "GRANT USAGE ON SCHEMA _v TO \"taler-exchange-closer\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} -echo "GRANT SELECT ON ALL TABLES IN SCHEMA _v TO \"taler-exchange-closer\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} - -echo "GRANT USAGE ON SCHEMA exchange TO \"taler-exchange-aggregator\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} -echo "GRANT SELECT,INSERT,UPDATE,DELETE ON ALL TABLES IN SCHEMA exchange TO \"taler-exchange-aggregator\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} -echo "GRANT USAGE ON SCHEMA _v TO \"taler-exchange-aggregator\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} -echo "GRANT SELECT ON ALL TABLES IN SCHEMA _v TO \"taler-exchange-aggregator\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} - say "Configuring exchange" if test ${ENABLE_TLS} = "y" @@ -153,6 +142,22 @@ done say "Initializing exchange database" sudo -u taler-exchange-httpd taler-exchange-dbinit -c /etc/taler/taler.conf +echo "GRANT USAGE ON SCHEMA exchange TO \"taler-exchange-wire\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} +echo "GRANT SELECT,INSERT,UPDATE,DELETE ON ALL TABLES IN SCHEMA exchange TO \"taler-exchange-wire\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} +echo "GRANT USAGE ON SCHEMA _v TO \"taler-exchange-wire\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} +echo "GRANT SELECT ON ALL TABLES IN SCHEMA _v TO \"taler-exchange-wire\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} + +echo "GRANT USAGE ON SCHEMA exchange TO \"taler-exchange-closer\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} +echo "GRANT SELECT,INSERT,UPDATE,DELETE ON ALL TABLES IN SCHEMA exchange TO \"taler-exchange-closer\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} +echo "GRANT USAGE ON SCHEMA _v TO \"taler-exchange-closer\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} +echo "GRANT SELECT ON ALL TABLES IN SCHEMA _v TO \"taler-exchange-closer\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} + +echo "GRANT USAGE ON SCHEMA exchange TO \"taler-exchange-aggregator\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} +echo "GRANT SELECT,INSERT,UPDATE,DELETE ON ALL TABLES IN SCHEMA exchange TO \"taler-exchange-aggregator\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} +echo "GRANT USAGE ON SCHEMA _v TO \"taler-exchange-aggregator\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} +echo "GRANT SELECT ON ALL TABLES IN SCHEMA _v TO \"taler-exchange-aggregator\";" | sudo -i -u postgres psql -f - ${EXCHANGE_DB} + + say "Launching exchange" systemctl enable --now taler-exchange.target