ChangeLog (2736B)
1 Thu Sep 3 2026 2 Added a guarded conversion test mode, a two-host sample inventory, and 3 an operator runbook for simulated cash-in and cash-out testing with a 4 command-line wallet and LibEuFin Nexus testing commands. 5 Use the regional currency for IBAN wire fees, as required by the 6 exchange even when the account receives a fiat conversion payment. 7 Install the LibEuFin conversion database link that turns Nexus fiat 8 incoming payments into regional-currency exchange credits. 9 10 Added a guarded playbook that completely resets and reprovisions an 11 exchange on testing deployments. 12 13 Wed Sep 2 2026 14 Added an optional, default-enabled landing page on the deployment's 15 main domain with links to the bank, merchant backend, and exchange. 16 17 Updated the regional-currency role for the current trixie-testing 18 LibEuFin WebUI settings and packaged exchange legal documents. 19 20 Extended fresh-exchange readiness checks for initial RSA key 21 generation, configured the merchant report generator base URL, and 22 cleaned disabled Nexus worker failure states. 23 24 Require Ansible privilege escalation so service-user tasks also work 25 when the SSH connection itself uses root, and report administrator 26 password setup failures without exposing the password. 27 28 Tue Aug 25 2026 29 Replaced the root shell installer with an operator-run Ansible 30 playbook and an inventory-only configuration wizard. Removed the 31 custom encrypted configuration format in favor of optional 32 ansible-vault usage. 33 34 Made repeated wizard runs create or update a separate inventory file 35 for each target while preserving its existing variables. 36 37 Configure the GNU Taler package source in Deb822 format with Ansible's 38 built-in deb822_repository module and the distribution-specific URL. 39 40 Upgrade managed packages with services stopped, guard immutable 41 deployment identity, and generate one-month withdrawal denominations 42 only during fresh exchange setup. 43 44 Add daily online exchange signing and annual fee maintenance. Document 45 the deliberate online-master-key tradeoff for this deployment. 46 47 Gate Nexus startup on completed EBICS enrollment, bind LibEuFin to 48 loopback, disable compatibility password authentication, add proxy 49 rate limits and forwarded headers, and make inventory writes atomic. 50 51 Remove the obsolete server-side upgrade and migration scripts. 52 53 Sun Mar 10 12:15:15 PM CET 2024 54 Changed the scripts to enable (!) taler-merchant.target 55 instead of just the taler-merchant-httpd service. 56 57 Added automatically setting the wire-fee for IBAN. 58 59 Added code to automatically run taler-exchange-offline daily (#8623).