Productionization

Dockerfile

@@ -0,0 +1,26 @@
+FROM node:10-alpine AS builder
+
+WORKDIR /app
+
+COPY ./package.json ./package-lock.json ./
+
+RUN npm i
+
+COPY ./angular.json ./tslint.json ./tsconfig.json ./
+COPY ./src/ ./src/
+
+RUN ./node_modules/.bin/ng build --prod
+
+FROM nginx:alpine
+
+RUN apk add -U gomplate && rm -rf /var/cache/apk/*
+
+COPY --from=builder /app/dist/grin-wallet /usr/share/nginx/html
+
+COPY ./etc/entrypoint.sh /
+COPY ./etc/nginx.conf.gotmpl /nginx.conf.gotmpl
+
+ENV WALLET_READONLY=true
+ENV WALLET_OWNER_API_URL=
+
+ENTRYPOINT ["/entrypoint.sh"]

etc/entrypoint.sh

@@ -0,0 +1,13 @@
+#!/bin/sh
+
+set -e
+
+if [ -f /nginx.conf.gotmpl ]; then
+  gomplate < /nginx.conf.gotmpl > /etc/nginx/conf.d/default.conf
+  rm /nginx.conf.gotmpl
+fi
+
+sed -i'' "s#WALLET_OWNER_API_URL:.*#WALLET_OWNER_API_URL: '$WALLET_OWNER_API_URL',#" /usr/share/nginx/html/assets/config.js
+[ ! -z "$WALLET_READONLY" ] && sed -i'' "s/WALLET_READONLY:.*/WALLET_READONLY: $WALLET_READONLY,/" /usr/share/nginx/html/assets/config.js
+
+nginx -g 'daemon off;'

etc/nginx.conf.gotmpl

@@ -0,0 +1,20 @@
+server {
+    listen       80;
+    server_name  localhost;
+
+    location / {
+        root   /usr/share/nginx/html;
+        gzip on;
+        index  index.html index.htm;
+        try_files $uri $uri/ /index.html;
+    }
+
+    {{if (getenv "WALLET_READONLY" | bool)}}
+    location ~* ^/v1/wallet/owner/(node_height|retrieve_summary_info|retrieve_txs|retrieve_outputs) {
+    {{else}}
+    location /v1/wallet/owner {
+    {{end}}
+      proxy_pass {{ .Env.OWNER_API_URL }};
+      proxy_set_header Authorization "Basic {{ print "grin:" .Env.OWNER_API_SECRET | base64.Encode }}";
+    }
+}