Merge pull request #20 from anwalker293/feat/launch-ACAPy-securely

feat: launch ACA-Py securely with API Key
openwallet-foundation · Dec 11, 2023 · e21608e · e21608e
2 parents e4915e0 + 3bfc69e
commit e21608e
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 5 deletions.
diff --git a/docker-compose.demo.yml b/docker-compose.demo.yml
@@ -51,6 +51,8 @@ services:
       - "8150:8150"
       - "8151:8151"
     environment:
+      ACAPY_ADMIN_API_KEY: ""
+      ACAPY_ADMIN_INSECURE_MODE: true
       ACAPY_WALLET_STORAGE_CONFIG: '{"url":"issuer-db:5432","max_connections":5}'
       ACAPY_GENESIS_URL: ${ACAPY_GENESIS_URL}
       ACAPY_WALLET_STORAGE_CREDS: '{"account":"test","password":"test","admin_account":"test","admin_password":"test"}'

diff --git a/instance-configs/acapy-agent/configs/issuer.yml b/instance-configs/acapy-agent/configs/issuer.yml
@@ -11,9 +11,6 @@ outbound-transport: http
 
 emit-new-didcomm-prefix: true
 
-# Admin
-admin-insecure-mode: true
-
 # Connections
 debug-connections: true
 debug-credentials: true

diff --git a/instance-configs/acapy-agent/docker-compose.yml b/instance-configs/acapy-agent/docker-compose.yml
@@ -12,18 +12,20 @@ services:
       - "8150:8150"
       - "8151:8151"
     environment:
+      ACAPY_ADMIN_API_KEY: ${ACAPY_ADMIN_API_KEY}
+      ACAPY_ADMIN_INSECURE_MODE: false
       ACAPY_WALLET_STORAGE_CONFIG: '{"url":"${DATABASE}:5432","max_connections":5}'
       ACAPY_GENESIS_URL: ${ACAPY_GENESIS_URL}
       ACAPY_WALLET_STORAGE_CREDS: '{"account":"${ACCOUNT}","password":"${PASSWORD}","admin_account":"${ADMIN_ACCOUNT}","admin_password":"${ADMIN_PASSWORD}"}'
     #entrypoint: python -m cProfile -m aries_cloudagent
     command: >
       start
-        --arg-file ./configs/issuer.yml -o redis_cache.connection="redis://${DATABASE}:6379/0" -o redis_cache.max_connections=90
+        --arg-file ./configs/issuer.yml
         --endpoint http://${ISSUER}:${EXPOSED_PORT}
         --genesis-url ${ACAPY_GENESIS_URL}
         --tails-server-base-url http://tails:6543
         --log-level debug
-        --plugin-config-value redis_cache.connection="redis://redis-host:6379/0"
+        --plugin-config-value redis_cache.connection="redis://${DATABASE:-redis-host}:6379/0"
         --plugin-config-value redis_cache.max_connections=90
     healthcheck:
       test: curl -s -o /dev/null -w '%{http_code}' "http://localhost:8151/status/live" | grep "200" > /dev/null

diff --git a/instance-configs/acapy-agent/sample.env b/instance-configs/acapy-agent/sample.env
@@ -1,5 +1,6 @@
 ISSUER= # transport port load balancer (external)
 DATABASE= # internal IP
+ACAPY_ADMIN_API_KEY="insertAPIKeyHere"
 EXPOSED_PORT=8151 # 80 for clustering 
 ACAPY_GENESIS_URL=https://raw.githubusercontent.com/Indicio-tech/indicio-network/main/genesis_files/pool_transactions_testnet_genesis
 ACCOUNT="insertStringHere"