hernani/koopa-admin-log
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ops: taler-bank auto-confirm + systemd units + README

Browse source
This commit is contained in:
Hernâni Marques 2026-09-18 13:05:31 +02:00
parent 281873a955
commit 7691ac3065
No known key found for this signature in database
GPG key ID: CB5738652768F7E9
4 changed files with 89 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

10
scripts/taler-bank/README.md
View file

@ -1,6 +1,6 @@
# taler-bank scripts
Container: **`taler-hacktivism-bank`** (libeufin-bank, GOA, **no IBAN**).
Container: **`goa-regio-ng`** (libeufin-bank, GOA, **no IBAN**; legacy name `taler-hacktivism-bank`).
| File | Container path | User |
|------|----------------|------|
@ -84,20 +84,24 @@ via `./install-demo-withdraw-api.sh` first.
### Auto-confirm (explorer only)
```bash
# loop inside container — refuses non-explorer unless ALLOW_NON_EXPLORER=1
# preferred: systemd inside CTR (Restart=always)
systemctl status goa-auto-confirm-withdrawals.service
# manual loop — refuses non-explorer unless ALLOW_NON_EXPLORER=1
auto-confirm-withdrawals.sh --loop 2
```
Only confirms withdrawals owned by **`explorer`** when status is `selected`
(community demo path). Does not confirm arbitrary customer withdraws.
Skips amounts above explorer debt headroom (otherwise libeufin returns HTTP 409).
**Stable ops (via `koopa-external` if LAN `koopa` is down):**
- Unit: `goa-auto-confirm-withdrawals.service` (install script enables it)
- One process only (`flock` on `/var/run/auto-confirm-withdrawals.lock`)
- `QUIET=1` + summary `tick checked=… selected=…` each loop
- Watch list capped (`WATCH_MAX=80`, prune of bloated `withdraw-watch.ids`)
- Status via `taler-integration/withdrawal-operation/{id}`
- Reinstall: `./install-demo-withdraw-api.sh` on host with podman access to `taler-hacktivism-bank`
- Reinstall: `BANK_CONTAINER=goa-regio-ng ./install-demo-withdraw-api.sh`
## Config