From ada583884a0f6719c919544f7102caa653adcef1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Hern=C3=A2ni=20Marques?= <hernani+magikoopa@vecirex.net>
Date: Fri, 10 Jul 2026 20:10:22 +0200
Subject: [PATCH] bank: install script for demo-withdraw API and auto-confirm
 loop

---
 .../taler-bank/install-demo-withdraw-api.sh   | 65 +++++++++++++++++++
 1 file changed, 65 insertions(+)
 create mode 100755 scripts/taler-bank/install-demo-withdraw-api.sh

diff --git a/scripts/taler-bank/install-demo-withdraw-api.sh b/scripts/taler-bank/install-demo-withdraw-api.sh
new file mode 100755
index 0000000..8d34a50
--- /dev/null
+++ b/scripts/taler-bank/install-demo-withdraw-api.sh
@@ -0,0 +1,65 @@
+#!/bin/bash
+# Install + start demo-withdraw API + auto-confirm loop inside bank container.
+# Host:
+#   ./scripts/taler-bank/install-demo-withdraw-api.sh
+set -euo pipefail
+ROOT=$(cd "$(dirname "$0")" && pwd)
+CTR="${BANK_CONTAINER:-taler-hacktivism-bank}"
+
+podman cp "$ROOT/demo-withdraw-api.py" "$CTR:/usr/local/bin/demo-withdraw-api.py"
+podman cp "$ROOT/auto-confirm-withdrawals.sh" "$CTR:/usr/local/bin/auto-confirm-withdrawals.sh"
+podman cp "$ROOT/refresh-demo-withdraw.sh" "$CTR:/usr/local/bin/refresh-demo-withdraw.sh"
+podman exec -u root "$CTR" chmod 755 \
+  /usr/local/bin/demo-withdraw-api.py \
+  /usr/local/bin/auto-confirm-withdrawals.sh \
+  /usr/local/bin/refresh-demo-withdraw.sh
+
+# nginx: proxy demo-withdraw.json
+NGX=/etc/nginx/sites-available/bank-landing
+podman exec -u root "$CTR" bash -lc '
+set -e
+f=/etc/nginx/sites-available/bank-landing
+if ! grep -q demo-withdraw.json "$f"; then
+  # insert before location /intro/
+  python3 - <<PY
+from pathlib import Path
+p=Path("/etc/nginx/sites-available/bank-landing")
+t=p.read_text()
+block="""    location = /intro/demo-withdraw.json {
+        proxy_pass http://127.0.0.1:19096/demo-withdraw.json;
+        proxy_http_version 1.1;
+        proxy_set_header Host \$host;
+        add_header Cache-Control "no-store" always;
+        add_header Access-Control-Allow-Origin * always;
+    }
+"""
+if "demo-withdraw.json" not in t:
+    t=t.replace("    location /intro/ {", block+"    location /intro/ {", 1)
+    p.write_text(t)
+    print("nginx location added")
+else:
+    print("nginx already has demo-withdraw")
+PY
+  nginx -t && nginx -s reload || true
+else
+  echo "nginx already configured"
+fi
+'
+
+# start/restart API
+podman exec -u root "$CTR" bash -lc '
+pkill -f "demo-withdraw-api.py" 2>/dev/null || true
+nohup python3 /usr/local/bin/demo-withdraw-api.py \
+  >>/var/log/demo-withdraw-api.log 2>&1 </dev/null &
+echo "api pid $!"
+# auto-confirm loop
+pkill -f "auto-confirm-withdrawals.sh --loop" 2>/dev/null || true
+nohup /usr/local/bin/auto-confirm-withdrawals.sh --loop 4 \
+  >>/var/log/auto-confirm-withdrawals.log 2>&1 </dev/null &
+echo "auto-confirm pid $!"
+sleep 1
+curl -sS -m 8 http://127.0.0.1:19096/demo-withdraw.json | head -c 300; echo
+'
+
+echo "OK: demo-withdraw API + auto-confirm in $CTR"
+echo "Public: https://bank.hacktivism.ch/intro/demo-withdraw.json"