Initial capay platform scaffold

infra/docker/btcpay/.env.example

@@ -0,0 +1,6 @@
+BTCPAY_HOST=btc.capay.hao.work
+LETSENCRYPT_EMAIL=ops@capay.hao.work
+BTCPAYGEN_EXCLUDE_FRAGMENTS=nginx-https
+BTCPAYGEN_ADDITIONAL_FRAGMENTS=opt-save-storage,bitcoin
+BTCPAYGEN_LIGHTNING=lnd
+NBITCOIN_NETWORK=mainnet

infra/docker/keagate/local.json

@@ -0,0 +1,26 @@
+{
+  "HOST": "https://doge.capay.hao.work",
+  "PORT": 8081,
+  "MONGO_CONNECTION_STRING": "mongodb://localhost:27017",
+  "MONGO_KEAGATE_DB": "keagate",
+
+  "IP_WHITELIST": ["127.0.0.1"],
+  "TRANSACTION_TIMEOUT": 1200000,
+  "TRANSACTION_MIN_REFRESH_TIME": 30000,
+  "TRANSACTION_SLIPPAGE_TOLERANCE": 0.02,
+
+  "SEED": "hex-128-bit-seed",
+  "KEAGATE_API_KEY": "replace-api-key",
+  "INVOICE_ENC_KEY": "hex-32-bytes",
+  "IPN_HMAC_SECRET": "replace-hmac-secret",
+
+  "DOGE": {
+    "ADMIN_PUBLIC_KEY": "DogePublicAddress",
+    "ADMIN_PRIVATE_KEY": null
+  },
+
+  "SOL": {
+    "ADMIN_PUBLIC_KEY": "SolPublicAddress",
+    "ADMIN_PRIVATE_KEY": null
+  }
+}

infra/nginx/sites-enabled/capay.conf

@@ -0,0 +1,80 @@
+server {
+  listen 80;
+  server_name capay.hao.work pay.capay.hao.work btc.capay.hao.work doge.capay.hao.work;
+  return 301 https://$host$request_uri;
+}
+
+server {
+  listen 443 ssl http2;
+  server_name capay.hao.work;
+
+  # ssl_certificate /etc/letsencrypt/live/capay.hao.work/fullchain.pem;
+  # ssl_certificate_key /etc/letsencrypt/live/capay.hao.work/privkey.pem;
+  # include /etc/letsencrypt/options-ssl-nginx.conf;
+  # ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+
+  location / {
+    proxy_pass http://127.0.0.1:3000;
+    proxy_set_header Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+  }
+}
+
+server {
+  listen 443 ssl http2;
+  server_name pay.capay.hao.work;
+
+  # ssl_certificate /etc/letsencrypt/live/pay.capay.hao.work/fullchain.pem;
+  # ssl_certificate_key /etc/letsencrypt/live/pay.capay.hao.work/privkey.pem;
+  # include /etc/letsencrypt/options-ssl-nginx.conf;
+  # ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+
+  location /verify {
+    proxy_pass http://127.0.0.1:4020/verify;
+    proxy_set_header Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+  }
+
+  location /settle {
+    proxy_pass http://127.0.0.1:4020/settle;
+    proxy_set_header Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+  }
+}
+
+server {
+  listen 443 ssl http2;
+  server_name btc.capay.hao.work;
+
+  # ssl_certificate /etc/letsencrypt/live/btc.capay.hao.work/fullchain.pem;
+  # ssl_certificate_key /etc/letsencrypt/live/btc.capay.hao.work/privkey.pem;
+  # include /etc/letsencrypt/options-ssl-nginx.conf;
+  # ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+
+  location / {
+    proxy_pass http://127.0.0.1:23000;
+    proxy_set_header Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+  }
+}
+
+server {
+  listen 443 ssl http2;
+  server_name doge.capay.hao.work;
+
+  # ssl_certificate /etc/letsencrypt/live/doge.capay.hao.work/fullchain.pem;
+  # ssl_certificate_key /etc/letsencrypt/live/doge.capay.hao.work/privkey.pem;
+  # include /etc/letsencrypt/options-ssl-nginx.conf;
+  # ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+
+  location / {
+    proxy_pass http://127.0.0.1:8081;
+    proxy_set_header Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+  }
+}