From a8bf3b69e231a257458382dd1aad1744a84ce651 Mon Sep 17 00:00:00 2001 From: Stephan D Date: Sat, 31 Jan 2026 11:43:27 +0100 Subject: [PATCH] tron build env updated --- ci/prod/.env.runtime | 27 +++++-- ci/prod/compose/tron_gateway.yml | 100 +++++++++++++++++++++++++ ci/prod/scripts/deploy/tron_gateway.sh | 5 +- 3 files changed, 126 insertions(+), 6 deletions(-) create mode 100644 ci/prod/compose/tron_gateway.yml diff --git a/ci/prod/.env.runtime b/ci/prod/.env.runtime index cd002757..626e3b0c 100644 --- a/ci/prod/.env.runtime +++ b/ci/prod/.env.runtime @@ -91,17 +91,20 @@ FEES_GRPC_PORT=50060 FEES_METRICS_PORT=9402 # Billing documents stack -DOCUMENTS_MONGO_HOST=sendico_db1 -DOCUMENTS_MONGO_PORT=27017 -DOCUMENTS_MONGO_DATABASE=billing_fees -DOCUMENTS_MONGO_AUTH_SOURCE=admin -DOCUMENTS_MONGO_REPLICA_SET=sendico-rs DOCUMENTS_DIR=billing_documents DOCUMENTS_COMPOSE_PROJECT=sendico-billing-documents DOCUMENTS_SERVICE_NAME=sendico_billing_documents DOCUMENTS_GRPC_PORT=50061 DOCUMENTS_METRICS_PORT=9409 +# Billing documents Mongo settings +DOCUMENTS_MONGO_HOST=sendico_db1 +DOCUMENTS_MONGO_PORT=27017 +DOCUMENTS_MONGO_DATABASE=billing_fees +DOCUMENTS_MONGO_AUTH_SOURCE=admin +DOCUMENTS_MONGO_REPLICA_SET=sendico-rs + + # Billing fees Mongo settings FEES_MONGO_HOST=sendico_db1 FEES_MONGO_PORT=27017 @@ -188,3 +191,17 @@ TGSETTLE_GATEWAY_MONGO_PORT=27017 TGSETTLE_GATEWAY_MONGO_DATABASE=tgsettle_gateway TGSETTLE_GATEWAY_MONGO_AUTH_SOURCE=admin TGSETTLE_GATEWAY_MONGO_REPLICA_SET=sendico-rs + +# Tron documents stack +TRON_GATEWAY_DIR=tron_gateway +TRON_GATEWAY_COMPOSE_PROJECT=sendico-tron-gateway +TRON_GATEWAY_SERVICE_NAME=sendico_tron_gateway +TRON_GATEWAY_GRPC_PORT=50071 +TRON_GATEWAY_METRICS_PORT=9407 + +# Tron documents Mongo settings +TRON_GATEWAY_MONGO_HOST=sendico_db1 +TRON_GATEWAY_MONGO_PORT=27017 +TRON_GATEWAY_MONGO_DATABASE=tron_gateway +TRON_GATEWAY_MONGO_AUTH_SOURCE=admin +TRON_GATEWAY_MONGO_REPLICA_SET=sendico-rs \ No newline at end of file diff --git a/ci/prod/compose/tron_gateway.yml b/ci/prod/compose/tron_gateway.yml new file mode 100644 index 00000000..f2db52b3 --- /dev/null +++ b/ci/prod/compose/tron_gateway.yml @@ -0,0 +1,100 @@ +# Compose v2 - Tron Gateway + +x-common-env: &common-env + env_file: + - ../env/.env.runtime + - ../env/.env.version + +volumes: + tron-gateway-vault-run: + driver: local + driver_opts: + type: tmpfs + device: tmpfs + o: size=8m,uid=0,gid=0,mode=0700 + +networks: + sendico-net: + external: true + name: sendico-net + +services: + sendico_tron_gateway: + <<: *common-env + container_name: sendico-tron-gateway + restart: unless-stopped + image: ${REGISTRY_URL}/gateway/tron:${APP_V} + pull_policy: always + environment: + TRON_GATEWAY_MONGO_HOST: ${TRON_GATEWAY_MONGO_HOST} + TRON_GATEWAY_MONGO_PORT: ${TRON_GATEWAY_MONGO_PORT} + TRON_GATEWAY_MONGO_DATABASE: ${TRON_GATEWAY_MONGO_DATABASE} + TRON_GATEWAY_MONGO_USER: ${TRON_GATEWAY_MONGO_USER} + TRON_GATEWAY_MONGO_PASSWORD: ${TRON_GATEWAY_MONGO_PASSWORD} + TRON_GATEWAY_MONGO_AUTH_SOURCE: ${TRON_GATEWAY_MONGO_AUTH_SOURCE} + TRON_GATEWAY_MONGO_REPLICA_SET: ${TRON_GATEWAY_MONGO_REPLICA_SET} + MONGO_HOSTS_0: ${MONGO_HOSTS_0} + MONGO_PORTS_0: ${MONGO_PORTS_0} + MONGO_HOSTS_1: ${MONGO_HOSTS_1} + MONGO_PORTS_1: ${MONGO_PORTS_1} + MONGO_HOSTS_2: ${MONGO_HOSTS_2} + MONGO_PORTS_2: ${MONGO_PORTS_2} + NATS_URL: ${NATS_URL} + NATS_HOST: ${NATS_HOST} + NATS_PORT: ${NATS_PORT} + NATS_USER: ${NATS_USER} + NATS_PASSWORD: ${NATS_PASSWORD} + TRON_GATEWAY_RPC_URL: ${TRON_GATEWAY_RPC_URL} + TRON_GATEWAY_GRPC_URL: ${TRON_GATEWAY_GRPC_URL} + TRON_GATEWAY_GRPC_TOKEN: ${TRON_GATEWAY_GRPC_TOKEN} + TRON_GATEWAY_SERVICE_WALLET_KEY: ${TRON_GATEWAY_SERVICE_WALLET_KEY} + TRON_GATEWAY_SERVICE_WALLET_ADDRESS: ${TRON_GATEWAY_SERVICE_WALLET_ADDRESS} + TRON_GATEWAY_GRPC_PORT: ${TRON_GATEWAY_GRPC_PORT} + TRON_GATEWAY_METRICS_PORT: ${TRON_GATEWAY_METRICS_PORT} + VAULT_TOKEN_FILE: /run/vault/token + command: ["--config.file", "/app/config.yml"] + ports: + - "0.0.0.0:${TRON_GATEWAY_GRPC_PORT}:50071" + - "0.0.0.0:${TRON_GATEWAY_METRICS_PORT}:9407" + volumes: + - tron-gateway-vault-run:/run/vault:ro + depends_on: + sendico_tron_gateway_vault_agent: + condition: service_healthy + healthcheck: + test: ["CMD-SHELL","wget -qO- http://localhost:9407/health | grep -q '\"status\":\"ok\"'"] + interval: 30s + timeout: 10s + retries: 3 + start_period: 60s + networks: + - sendico-net + + sendico_tron_gateway_vault_agent: + <<: *common-env + container_name: sendico-tron-gateway-vault-agent + restart: unless-stopped + image: hashicorp/vault:latest + pull_policy: always + cap_add: ["IPC_LOCK"] + environment: + VAULT_ADDR: ${VAULT_ADDR} + TRON_GATEWAY_VAULT_ROLE_ID: ${TRON_GATEWAY_VAULT_ROLE_ID} + TRON_GATEWAY_VAULT_SECRET_ID: ${TRON_GATEWAY_VAULT_SECRET_ID} + command: > + sh -lc 'set -euo pipefail; umask 077; + : "${TRON_GATEWAY_VAULT_ROLE_ID:?}"; : "${TRON_GATEWAY_VAULT_SECRET_ID:?}"; + printf "%s" "$TRON_GATEWAY_VAULT_ROLE_ID" > /run/vault/role_id; + printf "%s" "$TRON_GATEWAY_VAULT_SECRET_ID" > /run/vault/secret_id; + unset TRON_GATEWAY_VAULT_ROLE_ID TRON_GATEWAY_VAULT_SECRET_ID; + exec vault agent -config=/etc/vault/agent/tron-gateway.hcl' + volumes: + - ./vault-agent/tron-gateway.hcl:/etc/vault/agent/tron-gateway.hcl:ro + - tron-gateway-vault-run:/run/vault + healthcheck: + test: ["CMD","test","-s","/run/vault/token"] + interval: 10s + timeout: 5s + retries: 6 + networks: + - sendico-net diff --git a/ci/prod/scripts/deploy/tron_gateway.sh b/ci/prod/scripts/deploy/tron_gateway.sh index 48bc6230..65de2f3b 100755 --- a/ci/prod/scripts/deploy/tron_gateway.sh +++ b/ci/prod/scripts/deploy/tron_gateway.sh @@ -48,6 +48,7 @@ TRON_GATEWAY_MONGO_USER_B64="$(b64enc "${TRON_GATEWAY_MONGO_USER}")" TRON_GATEWAY_MONGO_PASSWORD_B64="$(b64enc "${TRON_GATEWAY_MONGO_PASSWORD}")" TRON_GATEWAY_RPC_URL_B64="$(b64enc "${TRON_GATEWAY_RPC_URL}")" TRON_GATEWAY_GRPC_URL_B64="$(b64enc "${TRON_GATEWAY_GRPC_URL:-}")" +TRON_GATEWAY_GRPC_TOKEN_B64="$(b64enc "${TRON_GATEWAY_GRPC_TOKEN:-}")" TRON_GATEWAY_SERVICE_WALLET_KEY_B64="$(b64enc "${TRON_GATEWAY_SERVICE_WALLET_KEY}")" TRON_GATEWAY_SERVICE_WALLET_ADDRESS_B64="$(b64enc "${TRON_GATEWAY_SERVICE_WALLET_ADDRESS}")" TRON_GATEWAY_VAULT_ROLE_ID_B64="$(b64enc "${TRON_GATEWAY_VAULT_ROLE_ID}")" @@ -87,6 +88,7 @@ ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" \ TRON_GATEWAY_MONGO_PASSWORD_B64="$TRON_GATEWAY_MONGO_PASSWORD_B64" \ TRON_GATEWAY_RPC_URL_B64="$TRON_GATEWAY_RPC_URL_B64" \ TRON_GATEWAY_GRPC_URL_B64="$TRON_GATEWAY_GRPC_URL_B64" \ + TRON_GATEWAY_GRPC_TOKEN_B64="$TRON_GATEWAY_GRPC_TOKEN_B64" \ TRON_GATEWAY_SERVICE_WALLET_KEY_B64="$TRON_GATEWAY_SERVICE_WALLET_KEY_B64" \ TRON_GATEWAY_SERVICE_WALLET_ADDRESS_B64="$TRON_GATEWAY_SERVICE_WALLET_ADDRESS_B64" \ TRON_GATEWAY_VAULT_ROLE_ID_B64="$TRON_GATEWAY_VAULT_ROLE_ID_B64" \ @@ -139,6 +141,7 @@ TRON_GATEWAY_MONGO_USER="$(decode_b64 "$TRON_GATEWAY_MONGO_USER_B64")" TRON_GATEWAY_MONGO_PASSWORD="$(decode_b64 "$TRON_GATEWAY_MONGO_PASSWORD_B64")" TRON_GATEWAY_RPC_URL="$(decode_b64 "$TRON_GATEWAY_RPC_URL_B64")" TRON_GATEWAY_GRPC_URL="$(decode_b64 "$TRON_GATEWAY_GRPC_URL_B64")" +TRON_GATEWAY_GRPC_TOKEN="$(decode_b64 "$TRON_GATEWAY_GRPC_TOKEN_B64")" TRON_GATEWAY_SERVICE_WALLET_KEY="$(decode_b64 "$TRON_GATEWAY_SERVICE_WALLET_KEY_B64")" TRON_GATEWAY_SERVICE_WALLET_ADDRESS="$(decode_b64 "$TRON_GATEWAY_SERVICE_WALLET_ADDRESS_B64")" TRON_GATEWAY_VAULT_ROLE_ID="$(decode_b64 "$TRON_GATEWAY_VAULT_ROLE_ID_B64")" @@ -148,7 +151,7 @@ NATS_PASSWORD="$(decode_b64 "$NATS_PASSWORD_B64")" NATS_URL="$(decode_b64 "$NATS_URL_B64")" export TRON_GATEWAY_MONGO_USER TRON_GATEWAY_MONGO_PASSWORD -export TRON_GATEWAY_RPC_URL TRON_GATEWAY_GRPC_URL +export TRON_GATEWAY_RPC_URL TRON_GATEWAY_GRPC_URL TRON_GATEWAY_GRPC_TOKEN export TRON_GATEWAY_SERVICE_WALLET_KEY TRON_GATEWAY_SERVICE_WALLET_ADDRESS export TRON_GATEWAY_VAULT_ROLE_ID TRON_GATEWAY_VAULT_SECRET_ID export NATS_USER NATS_PASSWORD NATS_URL