merchant: start/health + certbot_renew (container nginx TLS :8081, ACME :8082)

configs/taler-merchant/merchant-overrides.conf

@@ -0,0 +1,71 @@
+# Site overrides for taler.hacktivism.ch (container taler-hacktivism).
+# Multi-currency: CHF (taler-ops) + GOA (local exchange).
+# Do not edit overrides.conf (tooling).
+
+[taler]
+CURRENCY = CHF
+
+### Disable package demonstrator KUDOS only
+[merchant-exchange-kudos]
+DISABLED = YES
+
+[currency-KUDOS]
+ENABLED = NO
+
+[merchant]
+CURRENCY = CHF
+DATABASE = postgres
+# Dual-currency short notice (GOA explorational + CHF real).
+# Install: scripts/taler-merchant/install_dual_terms.sh (inside container).
+# Bump etag when text changes so wallets/browsers drop long-lived /terms cache.
+TERMS_ETAG = merchant-tos-dual-v2
+TERMS_DIR = ${TALER_DATA_HOME}terms/
+# Swiss FADP privacy (install: scripts/taler-merchant/install_swiss_privacy.sh)
+PRIVACY_ETAG = merchant-pp-swiss-v0
+PRIVACY_DIR = ${TALER_DATA_HOME}terms/
+
+UNIXPATH = /var/run/taler-merchant/httpd/merchant-http.sock
+UNIXPATH_MODE = 660
+SERVE = unix
+
+DEFAULT_PERSONA = point-of-sale
+
+# Demo short deadlines (package: pay 1d, refund 15d, wire 1w).
+# Wire happens after refund deadline; refund/pay windows also kept short.
+DEFAULT_PAY_DELAY = 1 minute
+DEFAULT_REFUND_DELAY = 30 s
+DEFAULT_WIRE_TRANSFER_DELAY = 30 s
+
+ENABLE_SELF_PROVISIONING = YES
+# No mandatory TAN (SMS auth off)
+MANDATORY_TAN_CHANNELS =
+HELPER_EMAIL = /usr/local/bin/taler-hacktivism-email-helper.sh
+# HELPER_SMS = /usr/local/bin/taler-hacktivism-sms-helper-wrapper.sh
+
+[merchantdb-postgres]
+CONFIG = postgres:///taler-merchant
+
+### CHF — package default in /usr/share/taler-merchant/config.d/tops.conf
+### section [merchant-exchange-chf] → https://exchange.taler-ops.ch/
+### Do NOT redeclare the same EXCHANGE_BASE_URL under another section name
+### (exchangekeyupdate: "configured in multiple sections").
+### Ensure package CHF stays enabled (only disable KUDOS above).
+
+### GOA — local exchange.hacktivism.ch (x-taler-bank / bank.hacktivism.ch)
+[merchant-exchange-goa]
+EXCHANGE_BASE_URL = https://exchange.hacktivism.ch/
+MASTER_KEY = TW6K5FXF81VYCAH0YWYX0SX98KBBSJ42VX27WAX01FTFH400QG10
+CURRENCY = GOA
+
+[currency-goa]
+ENABLED = YES
+name = "GOA exploration currency"
+code = GOA
+fractional_input_digits = 8
+fractional_normal_digits = 0
+fractional_trailing_zero_digits = 0
+# Keep in sync with exchange-overrides [currency-goa] (wallet compares unit maps).
+# Scale keys only in [-8, 24] (exchange rejects outside that range).
+alt_unit_names_are_symbols = NO
+alt_unit_names = {"24":"Yotta-GOA","21":"Zetta-GOA","18":"Exa-GOA","15":"Peta-GOA","12":"Tera-GOA","9":"Giga-GOA","6":"Mega-GOA","3":"Kilo-GOA","0":"GOA","-1":"Deci-GOA","-2":"Centi-GOA","-3":"Milli-GOA","-6":"Micro-GOA","-7":"Deci-Micro-GOA","-8":"Atomic-GOA"}
+common_amounts = "GOA:10 GOA:20 GOA:50 GOA:100 GOA:200 GOA:1000"