sandcastle-ng

commit 2e17e551da050b0f9994d7af6efcd4eab1596d32
parent e3b699b0763ca3156a7864e3212b1130dbffdd30
Author: Florian Dold <dold@taler.net>
Date:   Mon, 10 Aug 2026 19:01:58 +0200

Add FrOSCon sandcastle deployment

Diffstat:
M
README.md
 | 
3
+++
A
host/container-taler-sandcastle-froscon.service
 | 
34
++++++++++++++++++++++++++++++++++
M
host/sandcastle-up
 | 
3
+++
A
overrides/froscon.taler.net
 | 
9
+++++++++
M
scripts/demo/setup-sandcastle.sh
 | 
4
+++-

5 files changed, 52 insertions(+), 1 deletion(-)
diff --git a/README.md b/README.md
@@ -115,6 +115,9 @@ The following variables are typically adjusted in an override file:
   protects.  Defaults to `https://www.taler.net/`.  Note that this is an
   *external* server that the container proxies to, it is not served by the
   sandcastle itself.
+* ``ENABLE_KYC``: Set to `1` to enable KYC; it is disabled by default.
+* ``ENABLE_TURNSTILE``: Set to `0` to omit the Drupal Turnstile setup; it is
+  enabled by default.
 
 
 # Running the Deployment
diff --git a/host/container-taler-sandcastle-froscon.service b/host/container-taler-sandcastle-froscon.service
@@ -0,0 +1,34 @@
+# container-taler-sandcastle-froscon.service
+
+[Unit]
+Description=Podman container-taler-sandcastle-froscon.service
+Documentation=man:podman-generate-systemd(1)
+Wants=network-online.target
+After=network-online.target
+RequiresMountsFor=%t/containers
+
+[Service]
+Environment=SANDCASTLE_OVERRIDE_NAME=froscon.taler.net
+Environment=SANDCASTLE_PORT_MERCHANT=127.0.0.1:18000
+Environment=SANDCASTLE_PORT_EXCHANGE=127.0.0.1:18001
+Environment=SANDCASTLE_PORT_BLOG=127.0.0.1:18002
+Environment=SANDCASTLE_PORT_DONATIONS=127.0.0.1:18003
+Environment=SANDCASTLE_PORT_PROVISION=127.0.0.1:18004
+Environment=SANDCASTLE_PORT_LANDING=127.0.0.1:18005
+Environment=SANDCASTLE_PORT_LIBEUFIN_BANK=127.0.0.1:18007
+Environment=SANDCASTLE_PORT_BANK_SPA=127.0.0.1:18009
+Environment=SANDCASTLE_PORT_CHALLENGER=127.0.0.1:18010
+Environment=SANDCASTLE_PORT_AUDITOR=127.0.0.1:18011
+Environment=SANDCASTLE_PORT_DONAU=127.0.0.1:18012
+Environment=SANDCASTLE_PORT_DRUPAL=127.0.0.1:18013
+Environment=SANDCASTLE_PORT_PAIVANA=127.0.0.1:18014
+Restart=on-failure
+TimeoutStopSec=70
+ExecStart=%h/sandcastle-ng/sandcastle-run
+ExecStop=/usr/bin/podman stop \
+	taler-sandcastle
+Type=notify
+NotifyAccess=all
+
+[Install]
+WantedBy=default.target
diff --git a/host/sandcastle-up b/host/sandcastle-up
@@ -16,6 +16,9 @@ case $USER in
   taler-kyctest)
     unitfile=container-taler-sandcastle-kyctest.service
     ;;
+  froscon|taler-froscon)
+    unitfile=container-taler-sandcastle-froscon.service
+    ;;
   *)
     echo This script does not know how to update sandcastle for user $USER
     exit 1
diff --git a/overrides/froscon.taler.net b/overrides/froscon.taler.net
@@ -0,0 +1,9 @@
+# This is a shell script, sourced by the setup
+# script to customize the deployment.
+
+CURRENCY=KROETEN
+MYDOMAIN=froscon.taler.net
+
+# FrOSCon uses the unrestricted demo setup.
+ENABLE_KYC=0
+ENABLE_TURNSTILE=0
diff --git a/scripts/demo/setup-sandcastle.sh b/scripts/demo/setup-sandcastle.sh
@@ -1360,7 +1360,7 @@ systemctl enable --now taler-demo-blog
 systemctl enable --now taler-demo-donations
 
 # Turnstile (drupal/php)
-
+if [[ ${ENABLE_TURNSTILE:-1} = 1 ]]; then
 
 systemctl enable --now php8.4-fpm
 
@@ -1439,6 +1439,8 @@ composer exec -- drush php:eval "$snip"
 
 composer exec -- drush cr
 
+fi
+
 cd /
 
 # FIXME: Maybe do some taler-wallet-cli test?