zaragoza444
37e280f372
Some checks failed
CI/CD Pipeline / Solidity Contracts (push) Failing after 1m15s
CI/CD Pipeline / Security Scanning (push) Successful in 2m28s
CI/CD Pipeline / Lint and Format (push) Failing after 52s
CI/CD Pipeline / Terraform Validation (push) Failing after 25s
CI/CD Pipeline / Kubernetes Validation (push) Successful in 26s
Deploy ChainID 138 / Deploy ChainID 138 (push) Failing after 43s
HYBX OMNL TypeScript & anchor / token-aggregation build + reconcile artifact (push) Failing after 31s
Validation / validate-genesis (push) Successful in 30s
Validation / validate-terraform (push) Failing after 28s
Validation / validate-kubernetes (push) Failing after 12s
Validation / validate-smart-contracts (push) Failing after 12s
Validation / validate-security (push) Failing after 1m19s
Validation / validate-documentation (push) Failing after 20s
Verify Deployment / Verify Deployment (push) Has been cancelled
Add FORGE_CANONICAL_REGISTRY, ALI_GITEA_TWO_REPO_WORKFLOW, and sync-ali-omnl-banking-portal-lxcs.sh for banking LXCs 5820-5828. Co-authored-by: Cursor <cursoragent@cursor.com>
67 lines
2.7 KiB
Markdown
67 lines
2.7 KiB
Markdown
# Forge canonical registry — Gitea `d-bis`
|
||
|
||
Single source of truth for which repositories Ali and operators use. **Do not** treat GitHub mirrors or ad-hoc “banking portal” repos as canonical.
|
||
|
||
## Canonical repositories
|
||
|
||
| Repo | Gitea remote | Path on `dev-bis-ali` | Role |
|
||
|------|--------------|------------------------|------|
|
||
| **`proxmox`** | `https://gitea.d-bis.org/d-bis/proxmox.git` | `/srv/projects/proxmox` | Operator / orchestration — manifests, LXC map, NPM, deploy orchestration |
|
||
| **`smom-dbis-138`** | `https://gitea.d-bis.org/d-bis/smom-dbis-138.git` | `~/smom-dbis-138` | **Banking app source of truth** — all OMNL portal code |
|
||
|
||
Optional: `proxmox` may vendor `smom-dbis-138` as a git submodule at `proxmox/smom-dbis-138`. Pick **one** primary workspace for app edits (`~/smom-dbis-138` recommended) and stay consistent.
|
||
|
||
## Branch policy
|
||
|
||
| Repo | Branch | Notes |
|
||
|------|--------|-------|
|
||
| `smom-dbis-138` | `main` | Production banking stack (commit `33e9316`+ verified on dev) |
|
||
| `proxmox` | `main` | Operator scripts, LXC sync, infra docs |
|
||
|
||
## What lives where
|
||
|
||
### `smom-dbis-138` (banking app monorepo)
|
||
|
||
```
|
||
smom-dbis-138/
|
||
├── frontend-dapp/ # Vite SPA → :3002 (dev) / :3000 (LXC edge)
|
||
├── services/
|
||
│ ├── settlement-middleware/ # /settlement/* → :3011
|
||
│ ├── dbis-exchange/ # /exchange/* → :3012
|
||
│ └── token-aggregation/ # /api/v1/* → :3000
|
||
├── packages/
|
||
│ ├── integration-foundation/
|
||
│ └── settlement-core/
|
||
├── config/ # omnl-*.json, production configs
|
||
├── deploy/nginx/ # omnl-domains.conf (dev nginx)
|
||
└── scripts/deployment/
|
||
├── deploy-omnl-bank-production.sh
|
||
├── deploy-omnl-domains.sh
|
||
├── deploy-omnl-banking-portal-pct.sh
|
||
├── sync-ali-omnl-banking-portal-lxcs.sh
|
||
└── start-omnl-banking-portal.sh
|
||
```
|
||
|
||
### `proxmox` (ops)
|
||
|
||
- LXC CTID map (5820–5828)
|
||
- NPMplus proxy hosts (9 public FQDNs → LAN)
|
||
- Cloudflare / DNS runbooks
|
||
- `pnpm ali:hospitallers:handoff`, `pnpm ali:hospitallers:verify-external`
|
||
|
||
## Public surface
|
||
|
||
Nine FQDNs (see `config/omnl-production-domains.v1.json`) — **one stack**, deployed to each banking LXC at `/srv/ali-portal`. No per-FQDN git repos.
|
||
|
||
## Credentials
|
||
|
||
- Gitea user: **`ali`** — `ali-gitea-credentials.env` (handoff bundle)
|
||
- Env split:
|
||
- `proxmox/.env` — Proxmox, NPM, Cloudflare, Gitea tokens
|
||
- `smom-dbis-138/.env` — `PRIVATE_KEY`, `RPC_URL_138`, OMNL API keys
|
||
|
||
## Related docs
|
||
|
||
- [ALI_ZARDASHT_REMOTE_OPERATOR_ONBOARDING.md](./ALI_ZARDASHT_REMOTE_OPERATOR_ONBOARDING.md)
|
||
- [ALI_GITEA_TWO_REPO_WORKFLOW.md](./ALI_GITEA_TWO_REPO_WORKFLOW.md)
|