Add KYC

.envrc

@@ -62,4 +62,5 @@ export STATS_EXCLUDE_MEMBER_UIDS=
 export COOKIE_DOMAIN=localhost
 export USE_PRIVATE_KEY=true
 
+
 source_env_if_exists .envrc.local

.gitmodules

@@ -13,3 +13,6 @@
 [submodule "liza"]
 	path = liza
 	url = git@github.com:bitzlato/liza.git
+[submodule "kyc-service"]
+	path = kyc-service
+	url = git@github.com:bitzlato/kyc-service

Makefile

@@ -21,7 +21,7 @@ nvm:
 .envrc:
 	direnv allow
 
-configure_apps: app_baseapp app_barong app_peatio app_liza
+configure_apps: app_baseapp app_barong app_peatio app_liza app_kyc_service
 
 GeoLite2-Country.mmdb:
 ifeq ($(UNAME), Darwin)
@@ -94,6 +94,9 @@ start_rango:
 start_liza:
 	cd liza; bundle exec foreman start
 
+start_kyc_service:
+	cd kyc-service; bundle exec foreman start
+
 app_baseapp:
 	cd baseapp; yarn rebuild
 	rm -f baseapp/web/public/config/env.js; ln -s env.localdev.js baseapp/web/public/config/env.js
@@ -111,6 +114,10 @@ app_peatio:
 			bin/rake tmp:clear tmp:create; \
 			bin/rake db:reset
 
+app_kyc_service:
+	cd kyc-service; rbenv install -s; bundle; \
+	bundle exec rails db:setup; \
+
 app_liza:
 	cd liza; git submodule init; git submodule update; \
 		rbenv install -s; bundle; \
@@ -119,3 +126,11 @@ app_liza:
 
 secrets:
 	bundle exec peatio security keygen --path=secrets
+
+checkout_all_master:
+	cd kyc-service; git checkout main; git pull; bundle install; bundle exec rake db:setup; cd ..; \
+		cd barong; git checkout master;  git pull; bundle install; bundle exec rake db:setup;  cd ..; \
+		cd liza; git checkout master;  git pull; bundle install; bundle exec rake db:setup; cd ..; \
+		cd peatio; git checkout master;  git pull; bundle install; bundle exec rake db:migrate;  cd ..; \
+		cd rango; git checkout master;  git pull; cd ..; \
+		cd baseapp; git checkout master; git pull; yarn install; cd web; yarn install; cd ..\..;

README.md

@@ -58,6 +58,13 @@ make start_rango
 make start_liza
 ```
 
+**6th terminal session (kyc-service)**
+
+```bash
+make start_kyc_service
+```
+
+
 Open page http://localhost:8080/ in browser.
 
 ## Run main apps in light mode (only web, no daemons)

docker-compose.yml

@@ -51,6 +51,7 @@ services:
       BASEAPP_PORT: 3002
       RANGO_PORT: 8090
       LIZA_PORT: 3003
+      KYC_PORT: 3008
 
     # Good idea. But it does not work on macos because of https://docs.docker.com/docker-for-mac/networking/#there-is-no-docker0-bridge-on-macos
     # The better way it to set peatio.local and ws.local in /etc/hosts manualy
@@ -77,7 +78,7 @@ services:
     environment:
       SKIP_SETCAP: 1
       VAULT_TOKEN: ${VAULT_TOKEN}
-      VAULT_DEV_ROOT_TOKEN_ID: changeme
+      VAULT_DEV_ROOT_TOKEN_ID: ${VAULT_TOKEN}
       VAULT_ADDR: http://vault:8200
 
   tower:

templates/default.conf.template

@@ -35,6 +35,30 @@ server {
       proxy_pass http://${DOCKER_HOST_IP}:8091;
     }
 
+    location /api/v1/kyc/webhook/sumsub {
+      proxy_set_header Host $http_host;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+      proxy_set_header X-Forwarded-Proto $scheme;
+      error_page 401 =401 /error/401;
+      proxy_pass http://${DOCKER_HOST_IP}:${KYC_PORT}/api/webhook/sumsub;
+    }
+
+    location /api/v1/kyc {
+      proxy_set_header Host $http_host;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+      proxy_set_header X-Forwarded-Proto $scheme;
+      auth_request     /api/v2/auth/;
+      proxy_http_version 1.1;
+      auth_request_set $auth_header $upstream_http_authorization;
+      proxy_set_header Authorization $auth_header;
+      error_page 401 =401 /error/401;
+      proxy_set_header        X-Original-URI $request_uri;
+      proxy_pass http://${DOCKER_HOST_IP}:${KYC_PORT}/api/kyc;
+      proxy_cookie_path / "/; Secure";
+    }
+
     location /api/v2/barong {
       proxy_set_header Host $http_host;
       proxy_set_header X-Real-IP $remote_addr;