[taler-deployment] branch master updated: misc FIXMEs

[gnunet]

This is an automated email from the git hooks/post-receive script.

grothoff pushed a commit to branch master
in repository deployment.

The following commit(s) were added to refs/heads/master by this push:
     new ac277e0  misc FIXMEs
ac277e0 is described below

commit ac277e06d543205dddc9f184b9bfc6bcc0fb44ce
Author: Christian Grothoff <christian@grothoff.org>
AuthorDate: Sat Mar 4 11:04:22 2023 +0100

    misc FIXMEs
---
 netzbon/config_nginx.sh   |  6 ++++++
 netzbon/main.sh           |  2 ++
 netzbon/setup-exchange.sh | 41 ++++++++++++++++++++++++++++-------------
 netzbon/setup-merchant.sh |  2 ++
 4 files changed, 38 insertions(+), 13 deletions(-)

diff --git a/netzbon/config_nginx.sh b/netzbon/config_nginx.sh
index e639fd6..db80331 100755
--- a/netzbon/config_nginx.sh
+++ b/netzbon/config_nginx.sh
@@ -3,6 +3,7 @@
 
 # Inputs: DOMAIN_NAME
 
+say "Configuring Nginx"
 systemctl stop nginx
 
 SITES_AVAILABLE_DIR=/etc/nginx/sites-available
@@ -13,6 +14,11 @@ sed -i 's/server_name localhost/server_name 
merchant.${DOMAIN_NAME}/g' ${SITES_A
 ln -s ${SITES_AVAILABLE_DIR}/taler-merchant 
${SITES_ENABLED_DIR}/taler-merchant.conf
 ln -s ${SITES_AVAILABLE_DIR}/taler-exchange 
${SITES_ENABLED_DIR}/taler-exchange.conf
 
+# FIXME: what about libeufin-sandbox?
+
+# FIXME: is this all we need for TLS!?
+say "Obtaining TLS certificates"
+
 letsencrypt certonly -d \
    backend.${DOMAIN_NAME} \
    bank.${DOMAIN_NAME} \
diff --git a/netzbon/main.sh b/netzbon/main.sh
index 3090a80..6e676c9 100755
--- a/netzbon/main.sh
+++ b/netzbon/main.sh
@@ -81,7 +81,9 @@ check_user
 # which should dump a configuration file!
 DATABASE_CONNECTION="jdbc:postgresql://localhost:5432/nexus?user=nexus"
 
+# FIXME: make this step idempotent!
 . config_launch_libeufin.sh
+
 . config_nginx.sh
 . setup-exchange.sh
 . setup-merchant.sh
diff --git a/netzbon/setup-exchange.sh b/netzbon/setup-exchange.sh
index e3f851d..748c2b3 100755
--- a/netzbon/setup-exchange.sh
+++ b/netzbon/setup-exchange.sh
@@ -1,15 +1,39 @@
 #!/bin/bash
 
-# Create master key
-
-su -c "mkdir -p ~/.local/share/taler/exchange/offline-keys" exchange
-su -c "gnunet-ecc -g1 ~/.local/share/taler/exchange/offline-keys/master.priv" 
exchange
+# Required inputs:
+#
+# - LIBEUFIN_NEXUS_USERNAME (exchange username for libeufin-nexus)
+# - LIBEUFIN_NEXUS_PASSWORD (exchange password for libeufin-nexus)
+# - LIBEUFIN_SANDBOX_EXCHANGE_IBAN (exchange account IBAN)
+
+if test -z ${LIBEUFIN_NEXUS_USERNAME:-}
+then
+    say "Failure: LIBEUFIN_NEXUS_USERNAME not set"
+    exit 1
+fi
+if test -z ${LIBEUFIN_NEXUS_PASSWORD:-}
+then
+    say "Failure: LIBEUFIN_NEXUS_PASSWORD not set"
+    exit 1
+fi
+if test -z ${LIBEUFIN_SANDBOX_EXCHANGE_IBAN:-}
+then
+    say "Failure: LIBEUFIN_SANDBOX_EXCHANGE_IBAN not set"
+    exit 1
+fi
+
+# Create master key as root
+
+mkdir -p ~/.local/share/taler/exchange/offline-keys
+gnunet-ecc -g1 ~/.local/share/taler/exchange/offline-keys/master.priv
 
 # Modify config/taler.conf
 
 # Then, modify the MASTER_PUBLIC_KEY option in taler.conf to contain
 # the public key. You can see the value to add using:
 
+# FIXME: Debian package not using /etc/taler.conf!?!?
+# FIXME: how is this supposed to work!?!?
 su -c "gnunet-ecc -p ~/.local/share/taler/exchange/offline-keys/master.priv" 
exchange > MASTER_PUBLIC_KEY
 echo ${MASTER_PUBLIC_KEY} >> config/taler-internal.conf
 
@@ -17,12 +41,3 @@ echo ${MASTER_PUBLIC_KEY} >> config/taler-internal.conf
 
 # Next, set a password for the Exchange account at the bank, using
 # the 'bank' user:
-
-read -p "Exchange account bank password: " EXCHANGE_PASSWORD
-echo ${EXCHANGE_PASSWORD} >> config/taler-internal.conf
-
-# Now setup the wire responses, database and online signing keys:
-
-# taler-exchange-wire
-# taler-exchange-dbinit
-# taler-exchange-keyup -o auditor.in
diff --git a/netzbon/setup-merchant.sh b/netzbon/setup-merchant.sh
index 28f0889..ca6f8c4 100755
--- a/netzbon/setup-merchant.sh
+++ b/netzbon/setup-merchant.sh
@@ -1,6 +1,8 @@
 #!/bin/bash
 
 # To initialize the merchant, simply run
+# FIXME: run as the correct user!?
+# FIXME: or was this done by the Debian package?!
 
 taler-merchant-dbinit
 

-- 
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.