basti
14cc2c0eb0
Removes the bitcoind RPC config entirely, so lndhub only uses LND's transaction monitoring. The bitcoind integration is broken as is.
117 lines
2.9 KiB
Ruby
117 lines
2.9 KiB
Ruby
#
|
|
# Cookbook:: kosmos-bitcoin
|
|
# Recipe:: lndhub
|
|
#
|
|
|
|
include_recipe 'redisio::default'
|
|
include_recipe 'redisio::enable'
|
|
|
|
app_name = "lndhub"
|
|
app_dir = "/opt/#{app_name}"
|
|
lnd_dir = node['lnd']['lnd_dir']
|
|
bitcoin_user = node['bitcoin']['username']
|
|
bitcoin_group = node['bitcoin']['usergroup']
|
|
|
|
application app_dir do
|
|
owner bitcoin_user
|
|
group bitcoin_group
|
|
|
|
git do
|
|
user bitcoin_user
|
|
group bitcoin_group
|
|
repository node['lndhub']['repo']
|
|
revision node['lndhub']['revision']
|
|
notifies :restart, "systemd_unit[lndhub.service]", :delayed
|
|
end
|
|
|
|
npm_install do
|
|
user bitcoin_user
|
|
end
|
|
|
|
link "#{app_dir}/admin.macaroon" do
|
|
to "#{lnd_dir}/data/chain/bitcoin/mainnet/admin.macaroon"
|
|
owner bitcoin_user
|
|
group bitcoin_group
|
|
end
|
|
|
|
link "#{app_dir}/tls.cert" do
|
|
to "#{lnd_dir}/tls.cert"
|
|
owner bitcoin_user
|
|
group bitcoin_group
|
|
end
|
|
|
|
template "#{app_dir}/config.js" do
|
|
source "lndhub.config.js.erb"
|
|
owner bitcoin_user
|
|
group bitcoin_group
|
|
mode '0600'
|
|
variables lnd_rpc_host: '127.0.0.1:10009'
|
|
notifies :restart, "systemd_unit[lndhub.service]", :delayed
|
|
end
|
|
|
|
systemd_unit 'lndhub.service' do
|
|
content({
|
|
Unit: {
|
|
Description: 'LND Hub',
|
|
Documentation: ['https://github.com/BlueWallet/LndHub'],
|
|
Requires: 'lnd.service',
|
|
After: 'lnd.service'
|
|
},
|
|
Service: {
|
|
User: bitcoin_user,
|
|
Group: bitcoin_group,
|
|
Type: 'simple',
|
|
Environment: "PORT=#{node['lndhub']['port']}",
|
|
WorkingDirectory: app_dir,
|
|
ExecStart: "/usr/bin/npm start",
|
|
Restart: 'always',
|
|
RestartSec: '30',
|
|
TimeoutSec: '120',
|
|
PrivateTmp: true,
|
|
ProtectSystem: 'full',
|
|
NoNewPrivileges: true,
|
|
PrivateDevices: true,
|
|
},
|
|
Install: {
|
|
WantedBy: 'multi-user.target'
|
|
}
|
|
})
|
|
verify false
|
|
triggers_reload true
|
|
action [:create, :enable, :start]
|
|
end
|
|
end
|
|
|
|
include_recipe 'firewall'
|
|
firewall_rule 'lndhub_private' do
|
|
port node['lndhub']['port'].to_i
|
|
source "10.1.1.0/24"
|
|
protocol :tcp
|
|
command :allow
|
|
end
|
|
|
|
unless node.chef_environment == "development"
|
|
include_recipe "kosmos-base::letsencrypt"
|
|
include_recipe "kosmos-nginx"
|
|
|
|
nginx_certbot_site node[app_name]['domain']
|
|
|
|
template "#{node['nginx']['dir']}/sites-available/#{node[app_name]['domain']}" do
|
|
source 'nginx_conf_lndhub.erb'
|
|
owner node["nginx"]["user"]
|
|
mode 0640
|
|
variables port: node[app_name]['port'],
|
|
server_name: node[app_name]['domain'],
|
|
ssl_cert: "/etc/letsencrypt/live/#{node[app_name]['domain']}/fullchain.pem",
|
|
ssl_key: "/etc/letsencrypt/live/#{node[app_name]['domain']}/privkey.pem"
|
|
notifies :reload, 'service[nginx]', :delayed
|
|
end
|
|
|
|
nginx_site node[app_name]['domain'] do
|
|
action :enable
|
|
end
|
|
|
|
node.override["backup"]["archives"]["lndhub"] = ["/var/lib/redis/dump-6379.rdb"]
|
|
include_recipe "backup"
|
|
end
|