Merge branch 'rootstock' of https://github.com/DistributedCollective/…

…rootstock-transaction-service into rootstock

.github/workflows/ci-properties.json

@@ -0,0 +1,26 @@
+{
+  "app_name": "rootstock-transaction-service",
+  "aws_region": "us-east-2",
+  "k8s_cluster_name": "k8-mainnet",
+  "registry": "docker.io",
+  "image_name": "sovryn/rootstock-transaction-service",
+  "prod_branch": "rootstock",
+  "dev_branch": "rootstock-stg",
+  "dockerfile_path": "./docker/web",
+  "APP_ENV_VARS": {
+    "PYTHONPATH": "/app/",
+    "C_FORCE_ROOT": "true",
+    "DEBUG": "0",
+    "ETH_L2_NETWORK": "1",
+    "ETH_INTERNAL_NO_FILTER": "1",
+    "DJANGO_SU_NAME": "sovryn",
+    "DJANGO_SU_EMAIL": "[email protected]",
+    "DJANGO_SETTINGS_MODULE": "config.settings.production"
+  },
+  "DEV_ENV_VARS": {
+    "INGRESS_HOSTNAME": "safe-tx.test.sovryn.app"
+  },
+  "PROD_ENV_VARS": {
+    "INGRESS_HOSTNAME": "safe-tx.sovryn.app"
+  }
+}

.github/workflows/deployment.yml

@@ -0,0 +1,39 @@
+name: CI Template
+
+on:
+  push:
+    branches: [ rootstock, rootstock-stg ]
+  workflow_dispatch:
+
+jobs:
+  call-workflow-init:
+   uses: DistributedCollective/.github/.github/workflows/init.yml@master
+   with:
+     ref: ${{ github.ref }}
+     base_ref: ${{ github.base_ref }}
+  call-workflow-docker-build:
+    uses: DistributedCollective/.github/.github/workflows/docker.yml@master
+    needs: [call-workflow-init]
+    with:
+      KUBE_NAMESPACE: ${{ needs.call-workflow-init.outputs.KUBE_NAMESPACE }}
+      IMAGE_NAME: ${{ needs.call-workflow-init.outputs.image_name }}
+      event_name: ${{ github.event_name }}
+      registry: ${{ needs.call-workflow-init.outputs.registry }}
+      dockerfile_path:  ${{ needs.call-workflow-init.outputs.dockerfile_path }}
+    secrets:
+      DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
+      DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
+  call-workflow-k8s-deploy:
+    uses: DistributedCollective/.github/.github/workflows/deploy-k8s.yml@master
+    needs: [call-workflow-init, call-workflow-docker-build]
+    if: github.event_name != 'pull_request'
+    with:
+      KUBE_NAMESPACE: ${{ needs.call-workflow-init.outputs.KUBE_NAMESPACE }}
+      IMAGE_NAME: ${{ needs.call-workflow-init.outputs.image_name }}
+      ci_env: ${{ needs.call-workflow-init.outputs.ci_env }}
+      aws_region: ${{ needs.call-workflow-init.outputs.aws_region }}
+      k8s_cluster_name: ${{ needs.call-workflow-init.outputs.k8s_cluster_name }}
+      app_name: ${{ needs.call-workflow-init.outputs.app_name }}
+    secrets:
+      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}

config/settings/production.py

@@ -64,6 +64,7 @@
 # ------------------------------------------------------------------------------
 # Django Admin URL regex.
 ADMIN_URL = env("DJANGO_ADMIN_URL", default="admin/")
+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTOCOL", "https")
 
 # Gunicorn
 # ------------------------------------------------------------------------------