tech/sendico
2
0
Fork 0
Code Issues 30 Pull Requests Actions Packages Projects Releases Wiki Activity

tron build env updated #388

Merged
tech merged 1 commits from tron-388 into main 2026-01-31 10:43:51 +00:00
Conversation 0 Commits 1 Files Changed 3 +126 -6
3 changed files with 126 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
ci/prod/.env.runtime
View File

@@ -91,17 +91,20 @@ FEES_GRPC_PORT=50060
FEES_METRICS_PORT=9402
# Billing documents stack
DOCUMENTS_MONGO_HOST=sendico_db1
DOCUMENTS_MONGO_PORT=27017
DOCUMENTS_MONGO_DATABASE=billing_fees
DOCUMENTS_MONGO_AUTH_SOURCE=admin
DOCUMENTS_MONGO_REPLICA_SET=sendico-rs
DOCUMENTS_DIR=billing_documents
DOCUMENTS_COMPOSE_PROJECT=sendico-billing-documents
DOCUMENTS_SERVICE_NAME=sendico_billing_documents
DOCUMENTS_GRPC_PORT=50061
DOCUMENTS_METRICS_PORT=9409
# Billing documents Mongo settings
DOCUMENTS_MONGO_HOST=sendico_db1
DOCUMENTS_MONGO_PORT=27017
DOCUMENTS_MONGO_DATABASE=billing_fees
DOCUMENTS_MONGO_AUTH_SOURCE=admin
DOCUMENTS_MONGO_REPLICA_SET=sendico-rs
# Billing fees Mongo settings
FEES_MONGO_HOST=sendico_db1
FEES_MONGO_PORT=27017
@@ -188,3 +191,17 @@ TGSETTLE_GATEWAY_MONGO_PORT=27017
TGSETTLE_GATEWAY_MONGO_DATABASE=tgsettle_gateway
TGSETTLE_GATEWAY_MONGO_AUTH_SOURCE=admin
TGSETTLE_GATEWAY_MONGO_REPLICA_SET=sendico-rs
# Tron documents stack
TRON_GATEWAY_DIR=tron_gateway
TRON_GATEWAY_COMPOSE_PROJECT=sendico-tron-gateway
TRON_GATEWAY_SERVICE_NAME=sendico_tron_gateway
TRON_GATEWAY_GRPC_PORT=50071
TRON_GATEWAY_METRICS_PORT=9407
# Tron documents Mongo settings
TRON_GATEWAY_MONGO_HOST=sendico_db1
TRON_GATEWAY_MONGO_PORT=27017
TRON_GATEWAY_MONGO_DATABASE=tron_gateway
TRON_GATEWAY_MONGO_AUTH_SOURCE=admin
TRON_GATEWAY_MONGO_REPLICA_SET=sendico-rs

100
ci/prod/compose/tron_gateway.yml Normal file
View File

@@ -0,0 +1,100 @@
# Compose v2 - Tron Gateway
x-common-env: &common-env
env_file:
- ../env/.env.runtime
- ../env/.env.version
volumes:
tron-gateway-vault-run:
driver: local
driver_opts:
type: tmpfs
device: tmpfs
o: size=8m,uid=0,gid=0,mode=0700
networks:
sendico-net:
external: true
name: sendico-net
services:
sendico_tron_gateway:
<<: *common-env
container_name: sendico-tron-gateway
restart: unless-stopped
image: ${REGISTRY_URL}/gateway/tron:${APP_V}
pull_policy: always
environment:
TRON_GATEWAY_MONGO_HOST: ${TRON_GATEWAY_MONGO_HOST}
TRON_GATEWAY_MONGO_PORT: ${TRON_GATEWAY_MONGO_PORT}
TRON_GATEWAY_MONGO_DATABASE: ${TRON_GATEWAY_MONGO_DATABASE}
TRON_GATEWAY_MONGO_USER: ${TRON_GATEWAY_MONGO_USER}
TRON_GATEWAY_MONGO_PASSWORD: ${TRON_GATEWAY_MONGO_PASSWORD}
TRON_GATEWAY_MONGO_AUTH_SOURCE: ${TRON_GATEWAY_MONGO_AUTH_SOURCE}
TRON_GATEWAY_MONGO_REPLICA_SET: ${TRON_GATEWAY_MONGO_REPLICA_SET}
MONGO_HOSTS_0: ${MONGO_HOSTS_0}
MONGO_PORTS_0: ${MONGO_PORTS_0}
MONGO_HOSTS_1: ${MONGO_HOSTS_1}
MONGO_PORTS_1: ${MONGO_PORTS_1}
MONGO_HOSTS_2: ${MONGO_HOSTS_2}
MONGO_PORTS_2: ${MONGO_PORTS_2}
NATS_URL: ${NATS_URL}
NATS_HOST: ${NATS_HOST}
NATS_PORT: ${NATS_PORT}
NATS_USER: ${NATS_USER}
NATS_PASSWORD: ${NATS_PASSWORD}
TRON_GATEWAY_RPC_URL: ${TRON_GATEWAY_RPC_URL}
TRON_GATEWAY_GRPC_URL: ${TRON_GATEWAY_GRPC_URL}
TRON_GATEWAY_GRPC_TOKEN: ${TRON_GATEWAY_GRPC_TOKEN}
TRON_GATEWAY_SERVICE_WALLET_KEY: ${TRON_GATEWAY_SERVICE_WALLET_KEY}
TRON_GATEWAY_SERVICE_WALLET_ADDRESS: ${TRON_GATEWAY_SERVICE_WALLET_ADDRESS}
TRON_GATEWAY_GRPC_PORT: ${TRON_GATEWAY_GRPC_PORT}
TRON_GATEWAY_METRICS_PORT: ${TRON_GATEWAY_METRICS_PORT}
VAULT_TOKEN_FILE: /run/vault/token
command: ["--config.file", "/app/config.yml"]
ports:
- "0.0.0.0:${TRON_GATEWAY_GRPC_PORT}:50071"
- "0.0.0.0:${TRON_GATEWAY_METRICS_PORT}:9407"
volumes:
- tron-gateway-vault-run:/run/vault:ro
depends_on:
sendico_tron_gateway_vault_agent:
condition: service_healthy
healthcheck:
test: ["CMD-SHELL","wget -qO- http://localhost:9407/health | grep -q '\"status\":\"ok\"'"]
interval: 30s
timeout: 10s
retries: 3
start_period: 60s
networks:
- sendico-net
sendico_tron_gateway_vault_agent:
<<: *common-env
container_name: sendico-tron-gateway-vault-agent
restart: unless-stopped
image: hashicorp/vault:latest
pull_policy: always
cap_add: ["IPC_LOCK"]
environment:
VAULT_ADDR: ${VAULT_ADDR}
TRON_GATEWAY_VAULT_ROLE_ID: ${TRON_GATEWAY_VAULT_ROLE_ID}
TRON_GATEWAY_VAULT_SECRET_ID: ${TRON_GATEWAY_VAULT_SECRET_ID}
command: >
sh -lc 'set -euo pipefail; umask 077;
: "${TRON_GATEWAY_VAULT_ROLE_ID:?}"; : "${TRON_GATEWAY_VAULT_SECRET_ID:?}";
printf "%s" "$TRON_GATEWAY_VAULT_ROLE_ID" > /run/vault/role_id;
printf "%s" "$TRON_GATEWAY_VAULT_SECRET_ID" > /run/vault/secret_id;
unset TRON_GATEWAY_VAULT_ROLE_ID TRON_GATEWAY_VAULT_SECRET_ID;
exec vault agent -config=/etc/vault/agent/tron-gateway.hcl'
volumes:
- ./vault-agent/tron-gateway.hcl:/etc/vault/agent/tron-gateway.hcl:ro
- tron-gateway-vault-run:/run/vault
healthcheck:
test: ["CMD","test","-s","/run/vault/token"]
interval: 10s
timeout: 5s
retries: 6
networks:
- sendico-net

5
ci/prod/scripts/deploy/tron_gateway.sh
View File

@@ -48,6 +48,7 @@ TRON_GATEWAY_MONGO_USER_B64="$(b64enc "${TRON_GATEWAY_MONGO_USER}")"
TRON_GATEWAY_MONGO_PASSWORD_B64="$(b64enc "${TRON_GATEWAY_MONGO_PASSWORD}")"
TRON_GATEWAY_RPC_URL_B64="$(b64enc "${TRON_GATEWAY_RPC_URL}")"
TRON_GATEWAY_GRPC_URL_B64="$(b64enc "${TRON_GATEWAY_GRPC_URL:-}")"
TRON_GATEWAY_GRPC_TOKEN_B64="$(b64enc "${TRON_GATEWAY_GRPC_TOKEN:-}")"
TRON_GATEWAY_SERVICE_WALLET_KEY_B64="$(b64enc "${TRON_GATEWAY_SERVICE_WALLET_KEY}")"
TRON_GATEWAY_SERVICE_WALLET_ADDRESS_B64="$(b64enc "${TRON_GATEWAY_SERVICE_WALLET_ADDRESS}")"
TRON_GATEWAY_VAULT_ROLE_ID_B64="$(b64enc "${TRON_GATEWAY_VAULT_ROLE_ID}")"
@@ -87,6 +88,7 @@ ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" \
TRON_GATEWAY_MONGO_PASSWORD_B64="$TRON_GATEWAY_MONGO_PASSWORD_B64" \
TRON_GATEWAY_RPC_URL_B64="$TRON_GATEWAY_RPC_URL_B64" \
TRON_GATEWAY_GRPC_URL_B64="$TRON_GATEWAY_GRPC_URL_B64" \
TRON_GATEWAY_GRPC_TOKEN_B64="$TRON_GATEWAY_GRPC_TOKEN_B64" \
TRON_GATEWAY_SERVICE_WALLET_KEY_B64="$TRON_GATEWAY_SERVICE_WALLET_KEY_B64" \
TRON_GATEWAY_SERVICE_WALLET_ADDRESS_B64="$TRON_GATEWAY_SERVICE_WALLET_ADDRESS_B64" \
TRON_GATEWAY_VAULT_ROLE_ID_B64="$TRON_GATEWAY_VAULT_ROLE_ID_B64" \
@@ -139,6 +141,7 @@ TRON_GATEWAY_MONGO_USER="$(decode_b64 "$TRON_GATEWAY_MONGO_USER_B64")"
TRON_GATEWAY_MONGO_PASSWORD="$(decode_b64 "$TRON_GATEWAY_MONGO_PASSWORD_B64")"
TRON_GATEWAY_RPC_URL="$(decode_b64 "$TRON_GATEWAY_RPC_URL_B64")"
TRON_GATEWAY_GRPC_URL="$(decode_b64 "$TRON_GATEWAY_GRPC_URL_B64")"
TRON_GATEWAY_GRPC_TOKEN="$(decode_b64 "$TRON_GATEWAY_GRPC_TOKEN_B64")"
TRON_GATEWAY_SERVICE_WALLET_KEY="$(decode_b64 "$TRON_GATEWAY_SERVICE_WALLET_KEY_B64")"
TRON_GATEWAY_SERVICE_WALLET_ADDRESS="$(decode_b64 "$TRON_GATEWAY_SERVICE_WALLET_ADDRESS_B64")"
TRON_GATEWAY_VAULT_ROLE_ID="$(decode_b64 "$TRON_GATEWAY_VAULT_ROLE_ID_B64")"
@@ -148,7 +151,7 @@ NATS_PASSWORD="$(decode_b64 "$NATS_PASSWORD_B64")"
NATS_URL="$(decode_b64 "$NATS_URL_B64")"
export TRON_GATEWAY_MONGO_USER TRON_GATEWAY_MONGO_PASSWORD
export TRON_GATEWAY_RPC_URL TRON_GATEWAY_GRPC_URL
export TRON_GATEWAY_RPC_URL TRON_GATEWAY_GRPC_URL TRON_GATEWAY_GRPC_TOKEN
export TRON_GATEWAY_SERVICE_WALLET_KEY TRON_GATEWAY_SERVICE_WALLET_ADDRESS
export TRON_GATEWAY_VAULT_ROLE_ID TRON_GATEWAY_VAULT_SECRET_ID
export NATS_USER NATS_PASSWORD NATS_URL