2022-03-09 12:49:00 +00:00
|
|
|
---
|
2022-07-11 13:51:15 +00:00
|
|
|
swap_file_size_mb: 2048
|
|
|
|
|
|
|
|
# Nim-Waku
|
2022-03-09 12:49:00 +00:00
|
|
|
nim_waku_cont_tag: 'deploy-status-{{ stage }}'
|
|
|
|
nim_waku_cont_name: 'nim-waku'
|
2022-10-18 10:47:09 +00:00
|
|
|
nim_waku_log_level: 'debug'
|
2022-03-09 12:49:00 +00:00
|
|
|
nim_waku_dns4_domain_name: '{{ dns_entry }}'
|
|
|
|
# Protocols
|
2023-10-13 13:24:48 +00:00
|
|
|
nim_waku_protocols_enabled: ['relay', 'filter', 'lightpush', 'store']
|
2022-03-11 17:32:35 +00:00
|
|
|
# Node Key
|
|
|
|
nim_waku_node_key: '{{lookup("bitwarden", "fleets/status/"+stage+"/nodekeys", field=hostname)}}'
|
2023-05-12 09:07:22 +00:00
|
|
|
# Topics
|
2023-08-02 08:49:01 +00:00
|
|
|
nim_waku_pubsub_topics: '{{ ["/waku/2/default-waku/proto"] if stage == "prod" else ["/waku/2/default-waku/proto", "/waku/2/status-signed-test-1"] }}'
|
2023-05-12 09:07:22 +00:00
|
|
|
nim_waku_protected_topics: '{{ [] if stage == "prod" else ["/waku/2/status-signed-test-1:04070335f90e017ec1d7cb9a8e53d084dcf2c937cccb4272ed902881641613c6e0d46cf5531eee7ff8076616a2b8ac3436f71568f7a7032478fba3cac04c90e4e6"] }}'
|
2022-03-09 12:49:00 +00:00
|
|
|
# Ports
|
|
|
|
nim_waku_p2p_tcp_port: 30303
|
|
|
|
nim_waku_p2p_udp_port: 30303
|
2022-08-22 14:11:52 +00:00
|
|
|
nim_waku_websock_port: 443
|
2022-03-09 12:49:00 +00:00
|
|
|
nim_waku_metrics_port: 8008
|
|
|
|
nim_waku_rpc_tcp_port: 8545
|
|
|
|
nim_waku_rpc_tcp_addr: 0.0.0.0
|
|
|
|
# Limits
|
2022-11-24 08:09:37 +00:00
|
|
|
nim_waku_p2p_max_connections: 200
|
2022-11-04 13:40:39 +00:00
|
|
|
# Store
|
2023-10-25 09:42:13 +00:00
|
|
|
nim_waku_store_message_retention_policy: '{{ (stage == "test") | ternary("size:15GB", "time:2592000") }}' # 14 or 30 days
|
|
|
|
nim_waku_store_vacuum: true
|
2022-09-15 12:43:31 +00:00
|
|
|
# DNS Discovery
|
|
|
|
nim_waku_dns_disc_enabled: true
|
2023-09-25 14:17:49 +00:00
|
|
|
nim_waku_dns_disc_url_map:
|
|
|
|
test: 'enrtree://AIO6LUM3IVWCU2KCPBBI6FEH2W42IGK3ASCZHZGG5TIXUR56OGQUO@test.status.nodes.status.im'
|
|
|
|
prod: 'enrtree://AL65EKLJAUXKKPG43HVTML5EFFWEZ7L4LOKTLZCLJASG4DSESQZEC@prod.status.nodes.status.im'
|
|
|
|
nim_waku_dns_disc_url: '{{ nim_waku_dns_disc_url_map[stage] }}'
|
2022-03-18 11:15:34 +00:00
|
|
|
# Discovery V5
|
|
|
|
nim_waku_disc_v5_enabled: true
|
|
|
|
nim_waku_disc_v5_enr_auto_update: true
|
|
|
|
nim_waku_disc_v5_port: 9000
|
2022-08-22 14:11:52 +00:00
|
|
|
# Websockets
|
|
|
|
nim_waku_websocket_enabled: true
|
|
|
|
nim_waku_websocket_secure_enabled: true
|
|
|
|
nim_waku_websocket_domain: '{{ dns_entry }}'
|
|
|
|
nim_waku_websocket_ssl_dir: '/etc/letsencrypt'
|
|
|
|
nim_waku_websocket_ssl_cert: '/etc/letsencrypt/live/{{ nim_waku_websocket_domain }}/fullchain.pem'
|
|
|
|
nim_waku_websocket_ssl_key: '/etc/letsencrypt/live/{{ nim_waku_websocket_domain }}/privkey.pem'
|
2022-05-24 19:20:17 +00:00
|
|
|
# Consul Service
|
|
|
|
nim_waku_consul_success_before_passing: '{{ (stage == "prod") | ternary(2, 4) }}'
|
2022-10-18 10:47:09 +00:00
|
|
|
nim_waku_consul_failures_before_warning: '{{ (stage == "prod") | ternary(2, 4) }}'
|
|
|
|
nim_waku_consul_failures_before_critical: '{{ (stage == "prod") | ternary(4, 8) }}'
|
2022-03-10 16:26:44 +00:00
|
|
|
|
2022-08-22 14:11:52 +00:00
|
|
|
# LetsEncrypt via Certbot
|
|
|
|
certbot_docker_enabled: true
|
|
|
|
certbot_admin_email: 'devops@status.im'
|
2022-08-29 15:37:19 +00:00
|
|
|
certbot_containers_to_stop: ['{{ nim_waku_cont_name }}']
|
2022-08-22 14:11:52 +00:00
|
|
|
certbot_certs:
|
|
|
|
- domains: [ '{{ nim_waku_websocket_domain }}' ]
|
|
|
|
|
2022-03-09 12:49:00 +00:00
|
|
|
# Open LibP2P Ports
|
|
|
|
open_ports_default_comment: '{{ nim_waku_cont_name }}'
|
|
|
|
open_ports_default_protocol: 'tcp'
|
|
|
|
open_ports_default_chain: 'SERVICES'
|
|
|
|
open_ports_list:
|
2022-08-22 14:11:52 +00:00
|
|
|
- { port: '80', comment: 'Certbot verification' }
|
2022-03-09 12:49:00 +00:00
|
|
|
- { port: '{{ nim_waku_p2p_tcp_port }}' }
|
|
|
|
- { port: '{{ nim_waku_p2p_udp_port }}', protocol: 'udp' }
|
2022-03-18 11:15:34 +00:00
|
|
|
- { port: '{{ nim_waku_disc_v5_port }}', protocol: 'udp' }
|
2022-08-22 14:11:52 +00:00
|
|
|
- { port: '{{ nim_waku_websock_port }}' }
|
2022-03-09 12:49:00 +00:00
|
|
|
- { port: '{{ nim_waku_metrics_port }}', chain: 'VPN', ipset: 'metrics.hq' }
|
|
|
|
- { port: '{{ nim_waku_rpc_tcp_port }}', chain: 'VPN', ipset: '{{ env }}.{{ stage }}' }
|