Remove path from repository
Some checks failed
CI - 4NK_node / Code Quality (push) Failing after 29s
CI - 4NK_node / Unit Tests (push) Failing after 30s
CI - 4NK_node / Integration Tests (push) Failing after 12s
CI - 4NK_node / Security Tests (push) Failing after 28s
CI - 4NK_node / Docker Build & Test (push) Failing after 13s
CI - 4NK_node / Documentation Tests (push) Failing after 3s
CI - 4NK_node / Security Audit (push) Successful in 5s
CI - 4NK_node / Release Guard (push) Has been skipped
CI - 4NK_node / Performance Tests (push) Successful in 27s
CI - 4NK_node / Notify (push) Failing after 1s
CI - 4NK_node / Publish Release (push) Has been skipped
Some checks failed
CI - 4NK_node / Code Quality (push) Failing after 29s
CI - 4NK_node / Unit Tests (push) Failing after 30s
CI - 4NK_node / Integration Tests (push) Failing after 12s
CI - 4NK_node / Security Tests (push) Failing after 28s
CI - 4NK_node / Docker Build & Test (push) Failing after 13s
CI - 4NK_node / Documentation Tests (push) Failing after 3s
CI - 4NK_node / Security Audit (push) Successful in 5s
CI - 4NK_node / Release Guard (push) Has been skipped
CI - 4NK_node / Performance Tests (push) Successful in 27s
CI - 4NK_node / Notify (push) Failing after 1s
CI - 4NK_node / Publish Release (push) Has been skipped
This commit is contained in:
parent
2763b18cce
commit
bd1b5af7b7
@ -1,54 +0,0 @@
|
||||
# Configuration Bitcoin Core Signet pour Docker 4NK_node
|
||||
|
||||
# Configuration globale
|
||||
datadir=/home/bitcoin/.bitcoin
|
||||
server=1
|
||||
txindex=1
|
||||
debug=1
|
||||
loglevel=debug
|
||||
logthreadnames=1
|
||||
signet=1
|
||||
onion=4nk-tor:9050
|
||||
listenonion=1
|
||||
proxy=4nk-tor:9050
|
||||
listen=1
|
||||
|
||||
# Paramètres RPC
|
||||
rpcuser=bitcoin
|
||||
rpcpassword=bitcoin
|
||||
rpcallowip=172.18.0.0/16
|
||||
rpcworkqueue=32
|
||||
rpcthreads=4
|
||||
rpcdoccheck=1
|
||||
|
||||
# Paramètres ZMQ
|
||||
zmqpubhashblock=tcp://0.0.0.0:29000
|
||||
zmqpubrawtx=tcp://0.0.0.0:29000
|
||||
|
||||
# Configuration spécifique du signet custom
|
||||
[signet]
|
||||
whitelist=download@127.0.0.1
|
||||
txindex=1
|
||||
proxy=4nk-tor:9050
|
||||
listenonion=1
|
||||
listen=1
|
||||
signetchallenge=0020341c43803863c252df326e73574a27d7e19322992061017b0dc893e2eab90821
|
||||
# Nœuds onion du réseau signet custom
|
||||
addnode=6xi33lwwslsx3yi3f7c56wnqtdx4v73vj2up3prrwebpwbz6qisnqbyd.onion:38333
|
||||
addnode=d6i546e2sjezhyy2eupyc2wqtbgjnkubcjd4prhqurtlmp7nsp6yxqyd.onion:38333
|
||||
# Ports Signet (P2P et RPC)
|
||||
port=38333
|
||||
rpcport=38332
|
||||
rpcbind=0.0.0.0
|
||||
rpcuser=bitcoin
|
||||
rpcpassword=bitcoin
|
||||
|
||||
fallbackfee=0.0001
|
||||
|
||||
zmqpubrawblock=tcp://0.0.0.0:29000
|
||||
zmqpubrawtx=tcp://0.0.0.0:29000
|
||||
#zmqpubhashtx=tcp://0.0.0.0:29000
|
||||
zmqpubhashblock=tcp://0.0.0.0:29000
|
||||
#zmqpubsequence=tcp://0.0.0.0:29000
|
||||
|
||||
blockfilterindex=1
|
@ -1,43 +0,0 @@
|
||||
# Configuration ihm_client - Module 4NK_node
|
||||
|
||||
# URLs des services
|
||||
sdk_signer_url = "http://4nk-sdk-signer:9090"
|
||||
sdk_storage_url = "http://4nk-sdk-storage:8081"
|
||||
sdk_relay1_url = "http://4nk-sdk-relay1:8091"
|
||||
sdk_relay2_url = "http://4nk-sdk-relay2:8093"
|
||||
sdk_relay3_url = "http://4nk-sdk-relay3:8095"
|
||||
|
||||
# WebSocket URLs
|
||||
sdk_relay1_ws = "ws://4nk-sdk-relay1:8090"
|
||||
sdk_relay2_ws = "ws://4nk-sdk-relay2:8092"
|
||||
sdk_relay3_ws = "ws://4nk-sdk-relay3:8094"
|
||||
|
||||
# Configuration réseau
|
||||
network_type = "signet"
|
||||
bitcoin_rpc_url = "http://4nk-bitcoin:18443"
|
||||
|
||||
# Ports
|
||||
ui_port = 8080
|
||||
api_port = 8080
|
||||
|
||||
# Sécurité
|
||||
cors_enabled = true
|
||||
cors_origins = ["*"]
|
||||
rate_limit_enabled = true
|
||||
rate_limit_requests = 100
|
||||
rate_limit_window = 60
|
||||
session_timeout = 3600
|
||||
|
||||
# Timeouts
|
||||
request_timeout = 30
|
||||
connection_timeout = 10
|
||||
|
||||
# Logging
|
||||
log_level = "info"
|
||||
log_file = "/app/logs/ihm_client.log"
|
||||
log_max_size = "100MB"
|
||||
log_max_files = 5
|
||||
|
||||
# Mode développement
|
||||
dev_mode = true
|
||||
debug_enabled = true
|
@ -1,48 +0,0 @@
|
||||
# Configuration OVH
|
||||
OVH_APP_KEY=5ab0709bbb65ef26
|
||||
OVH_APP_SECRET=de1fac1779d707d263a611a557cd5766
|
||||
OVH_CONSUMER_KEY=5fe817829b8a9c780cfa2354f8312ece
|
||||
OVH_SMS_SERVICE_NAME=sms-tt802880-1
|
||||
|
||||
# Configuration SMS Factor
|
||||
SMS_FACTOR_TOKEN=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiI4NzgzNiIsImlhdCI6MTcwMTMzOTY1Mi45NDUzOH0.GNoqLb5MDBWuniNlQjbr1PKolwxGqBZe_tf4IMObvHw
|
||||
|
||||
#Configuration Mailchimp
|
||||
MAILCHIMP_API_KEY=md-VVfaml-ApIV4nsGgaJKl0A
|
||||
MAILCHIMP_KEY=3fa54304bc766dfd0b8043a827b28a3a-us17
|
||||
MAILCHIMP_LIST_ID=a48d9ad852
|
||||
|
||||
#Configuration Stripe
|
||||
STRIPE_SECRET_KEY=sk_test_51OwKmMP5xh1u9BqSeFpqw0Yr15hHtFsh0pvRGaE0VERhlYtvw33ND1qiGA6Dy1DPmmV61B6BqIimlhuv7bwElhjF00PLQwD60n
|
||||
STRIPE_WEBHOOK_SECRET=
|
||||
STRIPE_STANDARD_SUBSCRIPTION_PRICE_ID=price_1P66fuP5xh1u9BqSHj0O6Uy3
|
||||
STRIPE_STANDARD_ANNUAL_SUBSCRIPTION_PRICE_ID=price_1P9NsRP5xh1u9BqSFgkUDbQY
|
||||
STRIPE_UNLIMITED_SUBSCRIPTION_PRICE_ID=price_1P66RqP5xh1u9BqSuUzkQNac
|
||||
STRIPE_UNLIMITED_ANNUAL_SUBSCRIPTION_PRICE_ID=price_1P9NpKP5xh1u9BqSApFogvUB
|
||||
|
||||
# Configuration serveur
|
||||
APP_HOST=http://localhost
|
||||
PORT=8080
|
||||
|
||||
# Configuration front-end
|
||||
NEXT_PUBLIC_4NK_URL=https://dev3.4nkweb.com
|
||||
NEXT_PUBLIC_FRONT_APP_HOST=http://localhost:3000
|
||||
NEXT_PUBLIC_IDNOT_BASE_URL=https://qual-connexion.idnot.fr
|
||||
NEXT_PUBLIC_IDNOT_AUTHORIZE_ENDPOINT=/IdPOAuth2/authorize/idnot_idp_v1
|
||||
NEXT_PUBLIC_IDNOT_CLIENT_ID=4501646203F3EF67
|
||||
NEXT_PUBLIC_BACK_API_PROTOCOL=http
|
||||
NEXT_PUBLIC_BACK_API_HOST=localhost
|
||||
BACK_API_PORT=8080
|
||||
BACK_API_ROOT_URL=/api
|
||||
BACK_API_VERSION=/v1
|
||||
|
||||
# Configuration idnot
|
||||
IDNOT_ANNUARY_BASE_URL='https://qual-api.notaires.fr/annuaire'
|
||||
IDNOT_API_KEY='ba557f84-0bf6-4dbf-844f-df2767555e3e'
|
||||
|
||||
# Configuration PostgreSQL
|
||||
DB_HOST=miniback-postgres
|
||||
DB_PORT=5432
|
||||
DB_NAME=miniback
|
||||
DB_USER=miniback
|
||||
DB_PASSWORD=minibackpassword
|
@ -1,17 +0,0 @@
|
||||
# Configuration IHM_client
|
||||
NEXT_PUBLIC_4NK_URL="http://localhost:3003"
|
||||
|
||||
# Configuration lecoffre-front
|
||||
NEXT_PUBLIC_FRONT_APP_HOST="http://localhost:3000"
|
||||
|
||||
# Configuration IDNOT
|
||||
NEXT_PUBLIC_IDNOT_BASE_URL="https://qual-connexion.idnot.fr"
|
||||
NEXT_PUBLIC_IDNOT_AUTHORIZE_ENDPOINT="/IdPOAuth2/authorize/idnot_idp_v1"
|
||||
NEXT_PUBLIC_IDNOT_CLIENT_ID="4501646203F3EF67"
|
||||
|
||||
# Configuration mini-back
|
||||
NEXT_PUBLIC_BACK_API_PROTOCOL=http://
|
||||
NEXT_PUBLIC_BACK_API_HOST=localhost
|
||||
NEXT_PUBLIC_BACK_API_PORT=8080
|
||||
NEXT_PUBLIC_BACK_API_ROOT_URL=/api
|
||||
NEXT_PUBLIC_BACK_API_VERSION=/v1
|
@ -1,55 +0,0 @@
|
||||
# Configuration OVH
|
||||
OVH_APP_KEY=5ab0709bbb65ef26
|
||||
OVH_APP_SECRET=de1fac1779d707d263a611a557cd5766
|
||||
OVH_CONSUMER_KEY=5fe817829b8a9c780cfa2354f8312ece
|
||||
OVH_SMS_SERVICE_NAME=sms-tt802880-1
|
||||
|
||||
# Configuration SMS Factor
|
||||
SMS_FACTOR_TOKEN=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiI4NzgzNiIsImlhdCI6MTcwMTMzOTY1Mi45NDUzOH0.GNoqLb5MDBWuniNlQjbr1PKolwxGqBZe_tf4IMObvHw
|
||||
|
||||
#Configuration Mailchimp
|
||||
MAILCHIMP_API_KEY=md-VVfaml-ApIV4nsGgaJKl0A
|
||||
MAILCHIMP_KEY=3fa54304bc766dfd0b8043a827b28a3a-us17
|
||||
MAILCHIMP_LIST_ID=a48d9ad852
|
||||
|
||||
#Configuration Stripe
|
||||
STRIPE_SECRET_KEY=sk_test_51OwKmMP5xh1u9BqSeFpqw0Yr15hHtFsh0pvRGaE0VERhlYtvw33ND1qiGA6Dy1DPmmV61B6BqIimlhuv7bwElhjF00PLQwD60n
|
||||
STRIPE_WEBHOOK_SECRET=
|
||||
STRIPE_STANDARD_SUBSCRIPTION_PRICE_ID=price_1P66fuP5xh1u9BqSHj0O6Uy3
|
||||
STRIPE_STANDARD_ANNUAL_SUBSCRIPTION_PRICE_ID=price_1P9NsRP5xh1u9BqSFgkUDbQY
|
||||
STRIPE_UNLIMITED_SUBSCRIPTION_PRICE_ID=price_1P66RqP5xh1u9BqSuUzkQNac
|
||||
STRIPE_UNLIMITED_ANNUAL_SUBSCRIPTION_PRICE_ID=price_1P9NpKP5xh1u9BqSApFogvUB
|
||||
|
||||
# Configuration serveur
|
||||
APP_HOST=http://localhost
|
||||
PORT=8080
|
||||
|
||||
# Configuration front-end
|
||||
# url locale IHM_client
|
||||
NEXT_PUBLIC_4NK_URL=https://dev3.4nkweb.com
|
||||
|
||||
# url locale lecoffre-front
|
||||
NEXT_PUBLIC_FRONT_APP_HOST=http://localhost:3000
|
||||
|
||||
# IDNOT
|
||||
NEXT_PUBLIC_IDNOT_BASE_URL=https://qual-connexion.idnot.fr
|
||||
NEXT_PUBLIC_IDNOT_AUTHORIZE_ENDPOINT=/IdPOAuth2/authorize/idnot_idp_v1
|
||||
NEXT_PUBLIC_IDNOT_CLIENT_ID=4501646203F3EF67
|
||||
NEXT_PUBLIC_BACK_API_PROTOCOL=http
|
||||
|
||||
# Configuration mini-back
|
||||
NEXT_PUBLIC_BACK_API_HOST=localhost
|
||||
BACK_API_PORT=8080
|
||||
BACK_API_ROOT_URL=/api
|
||||
BACK_API_VERSION=/v1
|
||||
|
||||
# Configuration idnot
|
||||
IDNOT_ANNUARY_BASE_URL='https://qual-api.notaires.fr/annuaire'
|
||||
IDNOT_API_KEY='ba557f84-0bf6-4dbf-844f-df2767555e3e'
|
||||
|
||||
# Configuration PostgreSQL
|
||||
DB_HOST=miniback-postgres
|
||||
DB_PORT=5432
|
||||
DB_NAME=miniback
|
||||
DB_USER=miniback
|
||||
DB_PASSWORD=minibackpassword
|
320
conf/nginx.conf
320
conf/nginx.conf
@ -1,320 +0,0 @@
|
||||
# Configuration Nginx pour 4NK_node sur l'hôte Debian
|
||||
# Reverse proxy et équilibreur de charge pour tous les services Docker
|
||||
|
||||
# Configuration globale
|
||||
user www-data;
|
||||
worker_processes auto;
|
||||
error_log /var/log/nginx/4nk-node-error.log notice;
|
||||
pid /var/run/nginx.pid;
|
||||
|
||||
events {
|
||||
worker_connections 1024;
|
||||
use epoll;
|
||||
multi_accept on;
|
||||
}
|
||||
|
||||
http {
|
||||
include /etc/nginx/mime.types;
|
||||
default_type application/octet-stream;
|
||||
|
||||
# Logging spécifique à 4NK_node
|
||||
log_format 4nk_main '$remote_addr - $remote_user [$time_local] "$request" '
|
||||
'$status $body_bytes_sent "$http_referer" '
|
||||
'"$http_user_agent" "$http_x_forwarded_for" '
|
||||
'upstream: $upstream_addr';
|
||||
|
||||
access_log /var/log/nginx/4nk-node-access.log 4nk_main;
|
||||
|
||||
# Performance
|
||||
sendfile on;
|
||||
tcp_nopush on;
|
||||
tcp_nodelay on;
|
||||
keepalive_timeout 65;
|
||||
types_hash_max_size 2048;
|
||||
client_max_body_size 100M;
|
||||
|
||||
# Gzip compression
|
||||
gzip on;
|
||||
gzip_vary on;
|
||||
gzip_min_length 1024;
|
||||
gzip_proxied any;
|
||||
gzip_comp_level 6;
|
||||
gzip_types
|
||||
text/plain
|
||||
text/css
|
||||
text/xml
|
||||
text/javascript
|
||||
application/json
|
||||
application/javascript
|
||||
application/xml+rss
|
||||
application/atom+xml
|
||||
image/svg+xml;
|
||||
|
||||
# Rate limiting
|
||||
limit_req_zone $binary_remote_addr zone=4nk_api:10m rate=10r/s;
|
||||
limit_req_zone $binary_remote_addr zone=4nk_login:10m rate=1r/s;
|
||||
|
||||
# Upstream servers - ports Docker exposés sur l'hôte
|
||||
upstream bitcoin_rpc {
|
||||
server 127.0.0.1:38332;
|
||||
keepalive 32;
|
||||
}
|
||||
|
||||
upstream bitcoin_p2p {
|
||||
server 127.0.0.1:38333;
|
||||
keepalive 32;
|
||||
}
|
||||
|
||||
upstream blindbit_api {
|
||||
server 127.0.0.1:8000;
|
||||
keepalive 32;
|
||||
}
|
||||
|
||||
upstream sdk_storage_api {
|
||||
server 127.0.0.1:8081;
|
||||
keepalive 32;
|
||||
}
|
||||
|
||||
upstream sdk_relay1_api {
|
||||
server 127.0.0.1:8090;
|
||||
keepalive 32;
|
||||
}
|
||||
|
||||
upstream sdk_relay2_api {
|
||||
server 127.0.0.1:8092;
|
||||
keepalive 32;
|
||||
}
|
||||
|
||||
upstream sdk_relay3_api {
|
||||
server 127.0.0.1:8094;
|
||||
keepalive 32;
|
||||
}
|
||||
|
||||
upstream sdk_signer_api {
|
||||
server 127.0.0.1:9090;
|
||||
keepalive 32;
|
||||
}
|
||||
|
||||
upstream ihm_client_web {
|
||||
server 127.0.0.1:3003;
|
||||
keepalive 32;
|
||||
}
|
||||
|
||||
upstream ihm_client_http {
|
||||
server 127.0.0.1:8080;
|
||||
keepalive 32;
|
||||
}
|
||||
|
||||
upstream grafana_dashboard {
|
||||
server 127.0.0.1:3000;
|
||||
keepalive 32;
|
||||
}
|
||||
|
||||
upstream loki_api {
|
||||
server 127.0.0.1:3100;
|
||||
keepalive 32;
|
||||
}
|
||||
|
||||
# Le coffre services (backend/frontend)
|
||||
upstream coffre_backend {
|
||||
server 127.0.0.1:8082;
|
||||
keepalive 32;
|
||||
}
|
||||
upstream coffre_front {
|
||||
server 127.0.0.1:8083;
|
||||
keepalive 32;
|
||||
}
|
||||
|
||||
# Main server block
|
||||
server {
|
||||
listen 80;
|
||||
server_name 4nk-node.local localhost;
|
||||
|
||||
# Security headers
|
||||
add_header X-Frame-Options "SAMEORIGIN" always;
|
||||
add_header X-XSS-Protection "1; mode=block" always;
|
||||
add_header X-Content-Type-Options "nosniff" always;
|
||||
add_header Referrer-Policy "no-referrer-when-downgrade" always;
|
||||
add_header Content-Security-Policy "default-src 'self' http: https: data: blob: 'unsafe-inline'" always;
|
||||
|
||||
# Health check endpoint
|
||||
location /health {
|
||||
access_log off;
|
||||
return 200 "4NK Node healthy\n";
|
||||
add_header Content-Type text/plain;
|
||||
}
|
||||
|
||||
# Bitcoin RPC (JSON-RPC)
|
||||
location /bitcoin/rpc/ {
|
||||
limit_req zone=4nk_api burst=20 nodelay;
|
||||
|
||||
proxy_pass http://bitcoin_rpc/;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
|
||||
# Bitcoin RPC specific
|
||||
proxy_connect_timeout 30s;
|
||||
proxy_send_timeout 30s;
|
||||
proxy_read_timeout 30s;
|
||||
}
|
||||
|
||||
# Bitcoin P2P (port 38333)
|
||||
location /bitcoin/p2p/ {
|
||||
proxy_pass http://bitcoin_p2p/;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
}
|
||||
|
||||
# BlindBit API
|
||||
location /blindbit/ {
|
||||
limit_req zone=4nk_api burst=20 nodelay;
|
||||
|
||||
proxy_pass http://blindbit_api/;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
|
||||
proxy_connect_timeout 30s;
|
||||
proxy_send_timeout 30s;
|
||||
proxy_read_timeout 30s;
|
||||
}
|
||||
|
||||
# SDK Storage API
|
||||
location /storage/ {
|
||||
limit_req zone=4nk_api burst=20 nodelay;
|
||||
|
||||
proxy_pass http://sdk_storage_api/;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
}
|
||||
|
||||
# SDK Relay APIs
|
||||
location /relay1/ {
|
||||
limit_req zone=4nk_api burst=20 nodelay;
|
||||
proxy_pass http://sdk_relay1_api/;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
}
|
||||
|
||||
location /relay2/ {
|
||||
limit_req zone=4nk_api burst=20 nodelay;
|
||||
proxy_pass http://sdk_relay2_api/;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
}
|
||||
|
||||
location /relay3/ {
|
||||
limit_req zone=4nk_api burst=20 nodelay;
|
||||
proxy_pass http://sdk_relay3_api/;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
}
|
||||
|
||||
# SDK Signer API
|
||||
location /signer/ {
|
||||
limit_req zone=4nk_api burst=20 nodelay;
|
||||
proxy_pass http://sdk_signer_api/;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
}
|
||||
|
||||
# IHM Client Web (React)
|
||||
location /ihm/ {
|
||||
proxy_pass http://ihm_client_web/;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
|
||||
# WebSocket support
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
}
|
||||
|
||||
# IHM Client HTTP
|
||||
location /ihm-http/ {
|
||||
proxy_pass http://ihm_client_http/;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
}
|
||||
|
||||
# Grafana Dashboard
|
||||
location /grafana/ {
|
||||
proxy_pass http://grafana_dashboard/;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
|
||||
# Grafana specific
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
}
|
||||
|
||||
# Loki API (logs)
|
||||
location /loki/ {
|
||||
limit_req zone=4nk_api burst=20 nodelay;
|
||||
proxy_pass http://loki_api/;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
}
|
||||
|
||||
# Default route - IHM Client
|
||||
location / {
|
||||
proxy_pass http://ihm_client_web/;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
|
||||
# WebSocket support
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
}
|
||||
|
||||
# Error pages
|
||||
error_page 404 /404.html;
|
||||
error_page 500 502 503 504 /50x.html;
|
||||
|
||||
location = /50x.html {
|
||||
root /usr/share/nginx/html;
|
||||
}
|
||||
}
|
||||
|
||||
# HTTPS server (commented out - uncomment and configure SSL for production)
|
||||
# server {
|
||||
# listen 443 ssl http2;
|
||||
# server_name 4nk-node.local;
|
||||
#
|
||||
# ssl_certificate /etc/ssl/certs/4nk-node.crt;
|
||||
# ssl_certificate_key /etc/ssl/private/4nk-node.key;
|
||||
# ssl_protocols TLSv1.2 TLSv1.3;
|
||||
# ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384;
|
||||
# ssl_prefer_server_ciphers off;
|
||||
#
|
||||
# # Same location blocks as HTTP server
|
||||
# # ... (copy from above)
|
||||
# }
|
||||
}
|
@ -1,22 +0,0 @@
|
||||
# Configuration sdk_relay pour Docker
|
||||
# Services connectés via réseau Docker
|
||||
|
||||
# Bitcoin Core RPC (sans cookie, autorisé par rpcallowip)
|
||||
core_url=http://4nk-bitcoin:38332
|
||||
rpc_user=bitcoin
|
||||
rpc_password=bitcoin
|
||||
# core_wallet=relay_wallet
|
||||
ws_url=0.0.0.0:8090
|
||||
http_url=0.0.0.0:8091
|
||||
wallet_name=relay_wallet.json
|
||||
network=signet
|
||||
blindbit_url=http://blindbit:8000
|
||||
zmq_url=tcp://4nk-bitcoin:29000
|
||||
data_dir=.4nk
|
||||
# cookie non utilisé
|
||||
|
||||
# Mode développement
|
||||
dev_mode=true
|
||||
standalone=true
|
||||
blindbit_enabled=true
|
||||
relay_id=relay-1
|
@ -1,22 +0,0 @@
|
||||
# Configuration sdk_relay pour Docker
|
||||
# Services connectés via réseau Docker
|
||||
|
||||
# Bitcoin Core RPC (sans cookie, autorisé par rpcallowip)
|
||||
core_url=http://4nk-bitcoin:38332
|
||||
rpc_user=bitcoin
|
||||
rpc_password=bitcoin
|
||||
core_wallet=relay_wallet
|
||||
ws_url=0.0.0.0:8090
|
||||
http_url=0.0.0.0:8091
|
||||
wallet_name=relay_wallet.json
|
||||
network=signet
|
||||
blindbit_url=http://blindbit:8000
|
||||
zmq_url=tcp://4nk-bitcoin:29000
|
||||
data_dir=.4nk
|
||||
# cookie non utilisé
|
||||
|
||||
# Mode développement
|
||||
dev_mode=true
|
||||
standalone=true
|
||||
blindbit_enabled=true
|
||||
relay_id=relay-2
|
@ -1,22 +0,0 @@
|
||||
# Configuration sdk_relay pour Docker
|
||||
# Services connectés via réseau Docker
|
||||
|
||||
# Bitcoin Core RPC (sans cookie, autorisé par rpcallowip)
|
||||
core_url=http://4nk-bitcoin:38332
|
||||
rpc_user=bitcoin
|
||||
rpc_password=bitcoin
|
||||
core_wallet=relay_wallet
|
||||
ws_url=0.0.0.0:8090
|
||||
http_url=0.0.0.0:8091
|
||||
wallet_name=relay_wallet.json
|
||||
network=signet
|
||||
blindbit_url=http://blindbit:8000
|
||||
zmq_url=tcp://4nk-bitcoin:29000
|
||||
data_dir=.4nk
|
||||
# cookie non utilisé
|
||||
|
||||
# Mode développement
|
||||
dev_mode=true
|
||||
standalone=true
|
||||
blindbit_enabled=true
|
||||
relay_id=relay-3
|
@ -1,31 +0,0 @@
|
||||
# Configuration sdk_signer - Module 4NK_node
|
||||
|
||||
# Ports
|
||||
ws_port = 9090
|
||||
http_port = 9092
|
||||
|
||||
# URLs des services
|
||||
relay_urls = ["http://4nk-sdk-relay1:8091", "http://4nk-sdk-relay2:8093", "http://4nk-sdk-relay3:8095"]
|
||||
storage_url = "http://4nk-sdk-storage:8081"
|
||||
blindbit_url = "http://4nk-blindbit:8000"
|
||||
bitcoin_rpc_url = "http://4nk-bitcoin:38332"
|
||||
|
||||
# Authentification Bitcoin
|
||||
bitcoin_rpc_user = "bitcoin"
|
||||
bitcoin_rpc_password = "bitcoin"
|
||||
|
||||
# Mode développement
|
||||
dev_mode = true
|
||||
debug_level = "info"
|
||||
|
||||
# Limites de connexions
|
||||
max_connections = 100
|
||||
timeout = 30
|
||||
|
||||
# Logging
|
||||
log_level = "info"
|
||||
log_file = "/home/bitcoin/logs/sdk_signer.log"
|
||||
|
||||
# Sécurité
|
||||
enable_tls = false
|
||||
enable_auth = false
|
@ -1,33 +0,0 @@
|
||||
# Configuration sdk_storage - Module 4NK_node
|
||||
|
||||
# Port d'écoute
|
||||
http_port = 8081
|
||||
|
||||
# Base de données
|
||||
db_path = "/home/bitcoin/.4nk/storage.db"
|
||||
|
||||
# URLs des services
|
||||
relay_urls = ["http://4nk-sdk-relay1:8091", "http://4nk-sdk-relay2:8093", "http://4nk-sdk-relay3:8095"]
|
||||
bitcoin_rpc_url = "http://4nk-bitcoin:38332"
|
||||
bitcoin_rpc_user = "bitcoin"
|
||||
bitcoin_rpc_password = "bitcoin"
|
||||
|
||||
# Mode développement
|
||||
dev_mode = true
|
||||
debug_level = "info"
|
||||
|
||||
# Limites de connexions
|
||||
max_connections = 100
|
||||
timeout = 30
|
||||
|
||||
# Logging
|
||||
log_level = "info"
|
||||
log_file = "/home/bitcoin/logs/sdk_storage.log"
|
||||
|
||||
# Stockage de fichiers
|
||||
file_storage_path = "/home/bitcoin/.4nk/files"
|
||||
max_file_size = "100MB"
|
||||
|
||||
# Sécurité
|
||||
enable_tls = false
|
||||
enable_auth = false
|
@ -1,15 +0,0 @@
|
||||
# Configuration Tor simple pour 4NK_node
|
||||
# Écoute sur toutes les interfaces pour permettre la connexion depuis d'autres conteneurs
|
||||
|
||||
# Ports SOCKS et contrôle
|
||||
SocksPort 0.0.0.0:9050
|
||||
ControlPort 0.0.0.0:9051
|
||||
|
||||
# Répertoire de données
|
||||
DataDirectory /var/lib/tor
|
||||
|
||||
# Logs sur stdout pour Docker
|
||||
Log notice stdout
|
||||
|
||||
# Désactiver le mode daemon pour Docker
|
||||
RunAsDaemon 0
|
Loading…
x
Reference in New Issue
Block a user