Web deploy prerequisites

.aws/.ebextensions/00_ssl_certificate.config

@@ -0,0 +1,7 @@
+container_commands:
+  copy_ssl_key:
+    command: cp .ebextensions/star.voyager.com.key /etc/nginx/conf.d/star.voyager.com.key
+  copy_ssl_crt:
+    command: cp .ebextensions/star.voyager.com.crt /etc/nginx/conf.d/star.voyager.com.crt
+  copy_ssl_dhparam:
+      command: cp .ebextensions/dhparam.pem /etc/nginx/conf.d/dhparam.pem

.aws/.ebextensions/01_nginx_custom.config

@@ -0,0 +1,60 @@
+files:
+    "/etc/nginx/conf.d/elasticbeanstalk-nginx-docker-proxy.conf":
+       mode: "000644"
+       owner: root
+       group: root
+       content: |
+         map $http_upgrade $connection_upgrade {
+             default        "upgrade";
+             ""            "";
+         }
+
+         server {
+             listen 80;
+             listen 443 ssl http2;
+
+             ssl_certificate /etc/nginx/conf.d/star.voyager.com.crt;
+             ssl_certificate_key /etc/nginx/conf.d/star.voyager.com.key;
+
+             ssl_prefer_server_ciphers on;
+             ssl_ciphers #ADDPROPER ONE#!MD5;
+
+             ssl_dhparam  /etc/nginx/conf.d/dhparam.pem;
+             ssl_session_cache shared:SSL:5m;
+             ssl_session_timeout 1h;
+
+             # add_header Strict-Transport-Security "max-age=15768000; includeSubDomains" always;
+
+
+             gzip on;
+             gzip_comp_level 4;
+             gzip_types text/html text/plain text/css application/json
+
+             if ($time_iso8601 ~ "^(\d{4})-(\d{2})-(\d{2})T(\d{2})") {
+                 set $year $1;
+                 set $month $2;
+                 set $day $3;
+                 set $hour $4;
+             }
+             access_log /var/log/nginx/healthd/application.log.$year-$month-$day-$hour healthd;
+
+             access_log    /var/log/nginx/access.log;
+
+             location / {
+                 proxy_pass            http://docker;
+                 proxy_http_version    1.1;
+
+                 proxy_set_header    Connection            $connection_upgrade;
+                 proxy_set_header    Upgrade                $http_upgrade;
+                 proxy_set_header    Host                $host;
+                 proxy_set_header    X-Real-IP            $remote_addr;
+                 proxy_set_header    X-Forwarded-For        $proxy_add_x_forwarded_for;
+             }
+         }
+
+container_commands:
+  # Remove the default nginx configuration generated by elastic beanstalk
+ removeconfig:
+    command: "rm -f /etc/nginx/sites-available/elasticbeanstalk-nginx-docker-proxy.conf /etc/nginx/sites-enabled/elasticbeanstalk-nginx-docker-proxy.conf"
+# nginx_restart:
+#    command: "service nginx restart"

.aws/.ebextensions/dhparam.pem

@@ -0,0 +1,2 @@
+-----BEGIN DH PARAMETERS-----
+-----END DH PARAMETERS-----

.aws/.ebextensions/https-instance-securitygroup.config

@@ -0,0 +1,9 @@
+Resources:
+  sslSecurityGroupIngress:
+    Type: AWS::EC2::SecurityGroupIngress
+    Properties:
+      GroupId: {"Fn::GetAtt" : ["AWSEBSecurityGroup", "GroupId"]}
+      IpProtocol: tcp
+      ToPort: 443
+      FromPort: 443
+      CidrIp: 0.0.0.0/0

.aws/Dockerrun.aws.tpl.json

@@ -0,0 +1,16 @@
+{
+  "AWSEBDockerrunVersion": "1",
+  "Image": {
+    "Name": "<DOCKER_REPO_URL>:<BUILD_NO>",
+    "Update": "true"
+  },
+  "Ports": [
+    {
+      "ContainerPort": "9070"
+    },
+    {
+      "RPCPort": "26657"
+    }
+  ],
+  "Logging": "/home/webadmin/logs/"
+}

.aws/first.sh

@@ -0,0 +1,50 @@
+#!/bin/bash
+
+PASSWORD=1234567890
+ACCOUNT=main_account
+PORT=26657
+API_PORT=8080
+NETWORK=testnet
+AMOUNT=100stake
+
+./gaiad init --home . --moniker ${ACCOUNT} --chain-id ${NETWORK}
+NODEID=$(./gaiad tendermint show-node-id --home .)
+echo ${PASSWORD} | ./gaiacli keys add ${ACCOUNT} --home . > main_node.log
+./gaiad add-genesis-account $(./gaiacli keys show ${ACCOUNT} --home . --address) 150000stake,100000photino,123cococoin --home .
+
+echo ${PASSWORD} | ./gaiad gentx --name ${ACCOUNT} --home . --home-client .
+./gaiad collect-gentxs --home .
+
+aws s3 cp config/genesis.json s3://cosmos-gaia/genesis.json
+
+# boot proper nodes in reachable detached sessions
+screen -dmS gaia ./gaiad start --home .
+screen -dmS rest ./gaiacli rest-server --laddr tcp://0.0.0.0:${API_PORT} --home . --node http://localhost:${PORT} --chain-id ${NETWORK} --trust-node true
+
+# get my address to use it as source of richness for others
+ADDRESS=$(./gaiacli keys show ${ACCOUNT} --home . --address)
+
+while true
+do
+    # Is anyone asking for money
+    LIST=$(aws s3 ls s3://cosmos-gaia/addresses/)
+    if [[ -n "${LIST}" ]];
+    then
+        PID=$(lsof -ti tcp:${API_PORT})
+        if [[ -n "${PID}" ]];
+        then
+            # we cannot use gaiacli while the rest server is running, it locks the resources
+            kill -9 ${PID}
+        fi
+
+        echo ${LIST} | while IFS= read -r row || [[ -n "$row" ]]; do
+            # for every file in the list pick the address and give money to it, then delete the file
+            DESTINATION=$(echo $row | awk '{print $4}')
+            echo ${PASSWORD} | ./gaiacli tx send --home . --from ${ADDRESS} --amount=${AMOUNT}  --to=${DESTINATION} --chain-id=${NETWORK}
+            aws s3 rm s3://cosmos-gaia/addresses/${DESTINATION}
+        done
+
+        #restore the server
+        screen -dmS rest ./gaiacli rest-server --laddr tcp://0.0.0.0:${API_PORT} --home . --node http://localhost:${PORT} --chain-id ${NETWORK} --trust-node true
+    fi
+done

.aws/others.sh

@@ -0,0 +1,40 @@
+#!/bin/bash
+
+PASSWORD=1234567890
+ACCOUNT=operator_account
+PORT=26656
+MAINNODEID=d08c69fa85969f3d0173f23aadc40268559d0f66
+MAINNODEIP=172.31.35.89
+MAINACCOUNT=main_account
+NETWORK=testnet
+VALIDATOR_AMOUNT=10stake
+
+./gaiad init --home . --moniker ${ACCOUNT} --chain-id ${NETWORK}
+
+# GET Genesis file into config/genesis.json
+NODEID=$(./gaiad tendermint show-node-id --home .)
+
+# boot referring to the remote node
+screen -dmS gaia ./gaiad start --home . --p2p.laddr=tcp://0.0.0.0:$((PORT)) --address=tcp://0.0.0.0:$((PORT+1)) --rpc.laddr=tcp://0.0.0.0:$((PORT+2)) --p2p.persistent_peers="$MAINNODEID@$MAINNODEIP:$((PORT))"
+
+# get the key to make my node validator
+PUBKEY=$(./gaiad tendermint show-validator --home .)
+echo ${PASSWORD} | ./gaiacli keys add ${ACCOUNT} --home . > secondary_node.log
+ADDRESS=$(./gaiacli keys show ${ACCOUNT} --home . --address)
+echo ${PUBKEY} > ./${ADDRESS}
+
+# ask money by declaring my node
+aws s3 cp ${ADDRESS} s3://cosmos-gaia/addresses/${ADDRESS}
+
+poor=true
+while ${poor}
+do
+    #
+    ACCOUNT_INFO=$(./gaiacli query account ${ADDRESS} --chain-id ${NETWORK} --trust-node --home .)
+    if [[ ${ACCOUNT_INFO} == *"auth/Account"* ]]; then
+        echo "Address funded, thanks main node!"
+        poor=false
+    fi
+done
+
+echo ${PASSWORD} | ./gaiacli tx staking create-validator --home . --from ${ACCOUNT} --amount=${VALIDATOR_AMOUNT} --pubkey=${PUBKEY} --address-delegator=${ADDRESS} --moniker=${ACCOUNT} --chain-id=${NETWORK} --commission-max-change-rate=0 --commission-max-rate=0 --commission-rate=0 --json

.circleci/config.yml

@@ -1,4 +1,11 @@
-version: 2
+version: 2.1
+
+aliases:
+  - &CWD ~/voyager
+  - &WORKSPACE /tmp/build_output
+  - &docker-node circleci/node:10.15
+
+commands:
 
 jobs:
   # Build Gaia from the SDK source code specified by tasks/build/Gaia/COMMIT.sh.
@@ -83,7 +90,7 @@ jobs:
           name: Audit
           command: |
             set +e
-
+            
             SUMMARY="$(yarn audit | grep Severity)"
             VULNERABILITIES=".*(High|Critical).*"
 
@@ -126,10 +133,36 @@ jobs:
           command: yarn run test:e2e
           no_output_timeout: 120
 
+      - store_artifacts:
+          path: dist/
+          destination: voyager/
+      - persist_to_workspace:
+          root: *CWD
+          paths:
+            - dist
+            - circle.run_deploy.sh
+
       - store_artifacts:
           path: testArtifacts
           when: on_fail
 
+  deployment-frontend:
+    working_directory: /tmp/build_output
+    machine: true
+    environment:
+      CIRCLE_ARTIFACTS: /tmp/build_output
+    steps:
+      - attach_workspace:
+          at: /tmp/build_output/
+      - run: /tmp/build_output/circle.run_deploy.sh
+      - when:
+        condition: << parameters.deploy >>
+        steps:
+          - run:
+              name: Deploy the latest docker Image
+              command: |
+                bash ./circle.ebs_deploy.sh
+
   # Create release.
   release:
     docker:

app/src/renderer/connectors/node.js

@@ -1,9 +1,7 @@
 "use strict"
 
 const RestClient = require(`./lcdClient.js`)
-const mockedRestClient = require(`./lcdClientMock.js`)
 const RpcWrapper = require(`./rpcWrapper.js`)
-const MockedRpcWrapper = require(`./rpcWrapperMock.js`)
 
 module.exports = function(axios, remoteLcdURL, mocked = false) {
   let connector = {
@@ -12,21 +10,15 @@ module.exports = function(axios, remoteLcdURL, mocked = false) {
     // activate or deactivate the mocked lcdClient
     setup: mocked => {
       console.log(`Setting connector to state:` + (mocked ? `mocked` : `live`))
-      let newRestClient = mocked
-        ? mockedRestClient
-        : new RestClient(axios, remoteLcdURL)
-      let newRpcClient = mocked
-        ? MockedRpcWrapper(connector)
-        : RpcWrapper(connector)
+      let newRestClient = new RestClient(axios, remoteLcdURL)
+      let newRpcClient = RpcWrapper(connector)
       Object.assign(connector, newRestClient, newRpcClient)
       // we can't assign class functions to an object so we need to iterate over the prototype
-      if (!mocked) {
-        Object.getOwnPropertyNames(
-          Object.getPrototypeOf(newRestClient)
-        ).forEach(prop => {
+      Object.getOwnPropertyNames(Object.getPrototypeOf(newRestClient)).forEach(
+        prop => {
           connector[prop] = newRestClient[prop]
-        })
-      }
+        }
+      )
     }
   }
   // TODO: eventually, get all data from light-client connection instead of RPC

app/src/renderer/main.js

@@ -16,7 +16,7 @@ import _Node from "./connectors/node"
 import _Store from "./vuex/store"
 import axios from "axios"
 
-const _config = require(`../../src/config.json`)
+const _config = require(`../config.json`)
 
 // exporting this for testing
 let store
@@ -62,7 +62,7 @@ export async function main(
 ) {
   console.log(`Expecting lcd-server at ` + config.node_lcd)
 
-  node = Node(axios, config.node_lcd, config.mocked)
+  node = Node(axios, config.node_lcd)
 
   store = Store({ node })
 

app/src/renderer/vuex/modules/transactions.js

@@ -1,4 +1,3 @@
-import fp from "lodash/fp"
 import { uniqBy } from "lodash"
 import * as Sentry from "@sentry/browser"
 import Vue from "vue"
@@ -104,7 +103,7 @@ export default ({ node }) => {
         default:
           throw new Error(`Unknown transaction type`)
       }
-      const transactionsPlusType = response.map(fp.set(`type`, type))
+      const transactionsPlusType = response.map(t => ({ ...t, type }))
       return response ? uniqBy(transactionsPlusType, `hash`) : []
     },
     async enrichTransactions({ dispatch }, { transactions }) {

app/src/renderer/vuex/store.js

@@ -6,7 +6,7 @@
 
 import Vue from "vue"
 import Vuex from "vuex"
-import _ from "lodash"
+import { merge } from "lodash"
 import * as getters from "./getters"
 import modules from "./modules"
 
@@ -138,7 +138,7 @@ export function loadPersistedState({ state, commit }) {
   }
   if (cachedState) {
     // Replace the state object with the stored state
-    _.merge(state, cachedState, {
+    merge(state, cachedState, {
       // set loading indicators to false
       transactions: {
         loaded: true,

cicle.run_deploy.sh

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+set -xeuo pipefail
+
+# TODO: region should be ENV determined
+aws s3 sync ${CIRCLE_ARTIFACTS}/dist/ ${AWS_S3_BUCKET_VOYAGER} --delete --region eu-central-1 > /dev/null
+
+# aws cloudfront create-invalidation --distribution-id ${AWS_DISTRIBUTION_ID_VOYAGER} --paths '/*'