Web deploy prerequisites

.aws/.ebextensions/00_ssl_certificate.config

@@ -0,0 +1,7 @@
+container_commands:
+ copy_ssl_key:
+ command: cp .ebextensions/star.voyager.ninja.key /etc/nginx/conf.d/star.voyager.ninja.key
+ copy_ssl_crt:
+ command: cp .ebextensions/star.voyager.ninja.crt /etc/nginx/conf.d/star.voyager.ninja.crt
+ copy_ssl_dhparam:
+ command: cp .ebextensions/dhparam.pem /etc/nginx/conf.d/dhparam.pem

.aws/.ebextensions/01_nginx_custom.config

@@ -0,0 +1,60 @@
+files:
+ "/etc/nginx/conf.d/elasticbeanstalk-nginx-docker-proxy.conf":
+ mode: "000644"
+ owner: root
+ group: root
+ content: |
+ map $http_upgrade $connection_upgrade {
+ default "upgrade";
+ "" "";
+ }
+
+ server {
+ listen 80;
+ listen 443 ssl http2;
+
+ ssl_certificate /etc/nginx/conf.d/ninja.voyager.com.crt;
+ ssl_certificate_key /etc/nginx/conf.d/ninja.voyager.com.key;
+
+ ssl_prefer_server_ciphers on;
+ ssl_ciphers #ADDPROPER ONE#!MD5;
+
+ ssl_dhparam /etc/nginx/conf.d/dhparam.pem;
+ ssl_session_cache shared:SSL:5m;
+ ssl_session_timeout 1h;
+
+ # add_header Strict-Transport-Security "max-age=15768000; includeSubDomains" always;
+
+
+ gzip on;
+ gzip_comp_level 4;
+ gzip_types text/html text/plain text/css application/json
+
+ if ($time_iso8601 ~ "^(\d{4})-(\d{2})-(\d{2})T(\d{2})") {
+ set $year $1;
+ set $month $2;
+ set $day $3;
+ set $hour $4;
+ }
+ access_log /var/log/nginx/healthd/application.log.$year-$month-$day-$hour healthd;
+
+ access_log /var/log/nginx/access.log;
+
+ location / {
+ proxy_pass http://docker;
+ proxy_http_version 1.1;
+
+ proxy_set_header Connection $connection_upgrade;
+ proxy_set_header Upgrade $http_upgrade;
+ proxy_set_header Host $host;
+ proxy_set_header X-Real-IP $remote_addr;
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+ }
+ }
+
+container_commands:
+ # Remove the default nginx configuration generated by elastic beanstalk
+ removeconfig:
+ command: "rm -f /etc/nginx/sites-available/elasticbeanstalk-nginx-docker-proxy.conf /etc/nginx/sites-enabled/elasticbeanstalk-nginx-docker-proxy.conf"
+# nginx_restart:
+# command: "service nginx restart"

.aws/.ebextensions/dhparam.pem

@@ -0,0 +1,2 @@
+-----BEGIN DH PARAMETERS-----
+-----END DH PARAMETERS-----

.aws/.ebextensions/https-instance-securitygroup.config

@@ -0,0 +1,9 @@
+Resources:
+ sslSecurityGroupIngress:
+ Type: AWS::EC2::SecurityGroupIngress
+ Properties:
+ GroupId: {"Fn::GetAtt" : ["AWSEBSecurityGroup", "GroupId"]}
+ IpProtocol: tcp
+ ToPort: 443
+ FromPort: 443
+ CidrIp: 0.0.0.0/0

.aws/Dockerrun.aws.tpl.json

@@ -0,0 +1,16 @@
+{
+ "AWSEBDockerrunVersion": "1",
+ "Image": {
+ "Name": "<DOCKER_REPO_URL>:<BUILD_NO>",
+ "Update": "true"
+ },
+ "Ports": [
+ {
+ "ContainerPort": "9070"
+ },
+ {
+ "ContainerPort": "26657"
+ }
+ ],
+ "Logging": "/home/webadmin/logs/"
+}

.aws/first.sh

@@ -0,0 +1,52 @@
+#!/bin/bash
+
+PASSWORD=1234567890
+ACCOUNT=main_account
+PORT=26657
+API_PORT=8080
+NETWORK=testnet
+AMOUNT=100stake
+
+./gaiad init --home . --moniker ${ACCOUNT} --chain-id ${NETWORK}
+NODEID=$(./gaiad tendermint show-node-id --home .)
+echo ${PASSWORD} | ./gaiacli keys add ${ACCOUNT} --home . > main_node.log
+./gaiad add-genesis-account $(./gaiacli keys show ${ACCOUNT} --home . --address) 150000stake,100000photino,123cococoin --home .
+
+echo ${PASSWORD} | ./gaiad gentx --name ${ACCOUNT} --home . --home-client .
+./gaiad collect-gentxs --home .
+
+aws s3 cp config/genesis.json s3://cosmos-gaia/genesis.json
+
+# boot proper nodes in reachable detached sessions
+screen -dmS gaia ./gaiad start --home .
+screen -dmS rest ./gaiacli rest-server --laddr tcp://0.0.0.0:${API_PORT} --home . --node http://localhost:${PORT} --chain-id ${NETWORK} --trust-node true
+
+# get my address to use it as source of richness for others
+ADDRESS=$(./gaiacli keys show ${ACCOUNT} --home . --address)
+
+while true
+do
+ # Is anyone asking for money
+ LIST=$(aws s3 ls s3://cosmos-gaia/addresses/)
+ if [[ -n "${LIST}" ]];
+ then
+ PID=$(lsof -ti tcp:${API_PORT})
+ if [[ -n "${PID}" ]];
+ then
+ # we cannot use gaiacli while the rest server is running, it locks the resources
+ kill -9 ${PID}
+ fi
+
+ echo ${LIST} | while IFS= read -r row || [[ -n "$row" ]]; do
+ # for every file in the list pick the address and give money to it, then delete the file
+ DESTINATION=$(echo $row | awk '{print $4}')
+ # Just in case we were running this command with rest-server switched on
+ ADDRESS=$(./gaiacli keys show ${ACCOUNT} --home . --address)
+ echo ${PASSWORD} | ./gaiacli tx send --home . --from ${ADDRESS} --amount=${AMOUNT} --to=${DESTINATION} --chain-id=${NETWORK}
+ aws s3 rm s3://cosmos-gaia/addresses/${DESTINATION}
+ done
+
+ #restore the server
+ screen -dmS rest ./gaiacli rest-server --laddr tcp://0.0.0.0:${API_PORT} --home . --node http://localhost:${PORT} --chain-id ${NETWORK} --trust-node true
+ fi
+done

.aws/others.sh

@@ -0,0 +1,40 @@
+#!/bin/bash
+
+PASSWORD=1234567890
+ACCOUNT=operator_account
+PORT=26656
+MAINNODEID=d08c69fa85969f3d0173f23aadc40268559d0f66
+MAINNODEIP=172.31.35.89
+MAINACCOUNT=main_account
+NETWORK=testnet
+VALIDATOR_AMOUNT=10stake
+
+./gaiad init --home . --moniker ${ACCOUNT} --chain-id ${NETWORK}
+
+# GET Genesis file into config/genesis.json
+NODEID=$(./gaiad tendermint show-node-id --home .)
+
+# boot referring to the remote node
+screen -dmS gaia ./gaiad start --home . --p2p.laddr=tcp://0.0.0.0:$((PORT)) --address=tcp://0.0.0.0:$((PORT+1)) --rpc.laddr=tcp://0.0.0.0:$((PORT+2)) --p2p.persistent_peers="$MAINNODEID@$MAINNODEIP:$((PORT))"
+
+# get the key to make my node validator
+PUBKEY=$(./gaiad tendermint show-validator --home .)
+echo ${PASSWORD} | ./gaiacli keys add ${ACCOUNT} --home . > secondary_node.log
+ADDRESS=$(./gaiacli keys show ${ACCOUNT} --home . --address)
+echo ${PUBKEY} > ./${ADDRESS}
+
+# ask money by declaring my node
+aws s3 cp ${ADDRESS} s3://cosmos-gaia/addresses/${ADDRESS}
+
+poor=true
+while ${poor}
+do
+ #
+ ACCOUNT_INFO=$(./gaiacli query account ${ADDRESS} --chain-id ${NETWORK} --trust-node --home .)
+ if [[ ${ACCOUNT_INFO} == *"auth/Account"* ]]; then
+ echo "Address funded, thanks main node!"
+ poor=false
+ fi
+done
+
+echo ${PASSWORD} | ./gaiacli tx staking create-validator --home . --from ${ACCOUNT} --amount=${VALIDATOR_AMOUNT} --pubkey=${PUBKEY} --address-delegator=${ADDRESS} --moniker=${ACCOUNT} --chain-id=${NETWORK} --commission-max-change-rate=0 --commission-max-rate=0 --commission-rate=0 --json