projects/GNUTaler: init

pkgs/by-name/taler-mailbox/example.conf

@@ -0,0 +1,17 @@
+[mailbox]
+production = false
+host = "https://taler-mailbox.gnunet.org"
+bind_to = "localhost:11000"
+message_fee = KUDOS:1
+default_doc_filetype = text/html
+default_doc_lang = en
+default_tos_path = terms/
+default_pp_path = privacy/
+supported_doc_filetypes = text/html application/pdf application/epub application/xml text/plain
+
+[mailbox-pq]
+host = "localhost"
+port = 5432
+user = "taler-mailbox"
+password = "secret"
+db_name = "taler-mailbox"

pkgs/by-name/taler-mailbox/package.nix

@@ -0,0 +1,41 @@
+{
+  lib,
+  buildGoModule,
+  fetchgit,
+}:
+buildGoModule {
+  pname = "taler-mailbox";
+  version = "0-unstable-2022-07-20";
+
+  src = fetchgit {
+    url = "https://git.taler.net/taler-mailbox.git";
+    rev = "ee5c19e9edf7e4e0959becc99e97606d9e6de041";
+    hash = "sha256-t5IE8CuAKT5qlCNIqG9m8Gw0zJHa7505wHNK2ENuRQU=";
+  };
+
+  vendorHash = "sha256-frrmhfCcbY5DpCxR2g6HeSfN7xuLxpAWRahQl140voI=";
+
+  postPatch = ''
+    # The mailbox has been previously declared globally so re-declaring it
+    # makes the program panic
+    substituteInPlace cmd/mailbox-server/main.go \
+      --replace-fail 'm := mailbox.Mailbox{}' 'm = mailbox.Mailbox{}'
+  '';
+
+  ldflags = [
+    "-s"
+    "-w"
+  ];
+
+  postInstall = ''
+    install -D ./configs/mailbox-example.conf -t $out/share/examples/taler-mailbox
+  '';
+
+  meta = {
+    description = "Service for asynchronous wallet-to-wallet payment messages";
+    homepage = "https://git.taler.net/taler-mailbox.git";
+    license = lib.licenses.agpl3Only;
+    maintainers = with lib.maintainers; [];
+    mainProgram = "mailbox-server";
+  };
+}

projects/GNUTaler/conf/bank-ebics-keys.json

@@ -0,0 +1 @@
+{"bank_encryption_public_key":"621028HG1M30JAM6923FE381040GA003G80GY01GG80GM0M2040G1EACATA11EF5SVKNBNBYF1S3WSKQ2A2R9VZ7RW2HRX00293JPZ7VQ780RFRVYTQKKDDNJAQGBH4659GT9QYBMJCG1RKZEH1WDJ0GAAY7B7NBMW6FWXCKFYRMZQME0WBGZ1AAMY2VBQ5XAFV8216EFNF2EPG6M5ZGHG9RG6EGED56TK9JESQ02Q7AAVBRAAARVBN9NHCN64KQ3SRRHYXB8RWRK4TSSC93XG8RWMQH4ZDJSBYDCEXFY6G3AWTZ0EZNCJJAYB98T4GNFWZMN81AVYCQHXT1APX81AXCAYNK7J9XETF5CN1J1WV0BVA2BYG4VAMAW123REPN67JF1TNWPTADBMHS17N2V1GFYT8JRWX4TGM2996NXTEPMA8C2CDDE0CRY2A6HT8C5H2D6C62YGRSCF820C0G008","bank_authentication_public_key":"621028HG1M30JAM6923FE381040GA003G80GY01GG80GM0M2040G1EACATA11EF5SVKNBNBYF1S3WSKQ2A2R9VZ7RW2HRX00293JPZ7VQ780RFRVYTQKKDDNJAQGBH4659GT9QYBMJCG1RKZEH1WDJ0GAAY7B7NBMW6FWXCKFYRMZQME0WBGZ1AAMY2VBQ5XAFV8216EFNF2EPG6M5ZGHG9RG6EGED56TK9JESQ02Q7AAVBRAAARVBN9NHCN64KQ3SRRHYXB8RWRK4TSSC93XG8RWMQH4ZDJSBYDCEXFY6G3AWTZ0EZNCJJAYB98T4GNFWZMN81AVYCQHXT1APX81AXCAYNK7J9XETF5CN1J1WV0BVA2BYG4VAMAW123REPN67JF1TNWPTADBMHS17N2V1GFYT8JRWX4TGM2996NXTEPMA8C2CDDE0CRY2A6HT8C5H2D6C62YGRSCF820C0G008","accepted":true}

projects/GNUTaler/conf/client-ebics-keys.json

@@ -0,0 +1 @@
+{"signature_private_key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encryption_private_key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authentication_private_key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submitted_ini":true,"submitted_hia":true}

projects/GNUTaler/conf/exchange-account.json

@@ -0,0 +1,16 @@
+[
+  {
+    "operation": "exchange-enable-wire-0",
+    "arguments": {
+      "payto_uri": "payto://x-taler-bank/bank:8082/exchange?receiver-name=Exchange",
+      "debit_restrictions": [],
+      "credit_restrictions": [],
+      "priority": 0,
+      "validity_start": {
+        "t_s": 1725886541
+      },
+      "master_sig_add": "68WDT3JX1S5GQ9D3RZWXQVZK9AHFZ46YY5DA993720YA3SCBR4SW3X09NH5DECTXGWBKSN0MGKE1ANA9QZ95SKSNYPS9T9G46PCJC20",
+      "master_sig_wire": "39CEN9007DEXXMSDFZX1R2YYNANZYAFHX4EZC4ZX3C8DQEYT83JNVCVYMWYDGWEX6S891ZPXD6QHJE9J41YV9EN703Q0NM0MVE4FP18"
+    }
+  }
+]

projects/GNUTaler/conf/private.key

@@ -0,0 +1 @@
+��'IՂ�v&�������H{VW�r��Cj�>�

projects/GNUTaler/conf/taler-accounts.conf

@@ -0,0 +1,10 @@
+[exchange-account-test]
+PAYTO_URI = payto://x-taler-bank/bank:8082/exchange?receiver-name=Exchange
+ENABLE_DEBIT = YES
+ENABLE_CREDIT = YES
+
+[exchange-accountcredentials-test]
+WIRE_GATEWAY_URL = http://bank:8082/accounts/exchange/taler-wire-gateway/
+WIRE_GATEWAY_AUTH_METHOD = BASIC
+USERNAME = exchange
+PASSWORD = exchange

projects/GNUTaler/conf/taler-denominations.conf

@@ -0,0 +1,95 @@
+[COIN-KUDOS-n1-t1726827661]
+VALUE = KUDOS:0.1
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 6 years
+FEE_WITHDRAW = KUDOS:0
+FEE_DEPOSIT = KUDOS:0
+FEE_REFRESH = KUDOS:0
+FEE_REFUND = KUDOS:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[COIN-KUDOS-n2-t1726827661]
+VALUE = KUDOS:0.2
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 6 years
+FEE_WITHDRAW = KUDOS:0
+FEE_DEPOSIT = KUDOS:0
+FEE_REFRESH = KUDOS:0
+FEE_REFUND = KUDOS:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[COIN-KUDOS-n3-t1726827661]
+VALUE = KUDOS:0.4
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 6 years
+FEE_WITHDRAW = KUDOS:0
+FEE_DEPOSIT = KUDOS:0
+FEE_REFRESH = KUDOS:0
+FEE_REFUND = KUDOS:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[COIN-KUDOS-n4-t1726827661]
+VALUE = KUDOS:0.8
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 6 years
+FEE_WITHDRAW = KUDOS:0
+FEE_DEPOSIT = KUDOS:0
+FEE_REFRESH = KUDOS:0
+FEE_REFUND = KUDOS:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[COIN-KUDOS-n5-t1726827661]
+VALUE = KUDOS:1.6
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 6 years
+FEE_WITHDRAW = KUDOS:0
+FEE_DEPOSIT = KUDOS:0
+FEE_REFRESH = KUDOS:0
+FEE_REFUND = KUDOS:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[COIN-KUDOS-n6-t1726827661]
+VALUE = KUDOS:3.2
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 6 years
+FEE_WITHDRAW = KUDOS:0
+FEE_DEPOSIT = KUDOS:0
+FEE_REFRESH = KUDOS:0
+FEE_REFUND = KUDOS:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[COIN-KUDOS-n7-t1726827661]
+VALUE = KUDOS:6.4
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 6 years
+FEE_WITHDRAW = KUDOS:0
+FEE_DEPOSIT = KUDOS:0
+FEE_REFRESH = KUDOS:0
+FEE_REFUND = KUDOS:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA
+
+[COIN-KUDOS-n8-t1726827661]
+VALUE = KUDOS:12.8
+DURATION_WITHDRAW = 7 days
+DURATION_SPEND = 2 years
+DURATION_LEGAL = 6 years
+FEE_WITHDRAW = KUDOS:0
+FEE_DEPOSIT = KUDOS:0
+FEE_REFRESH = KUDOS:0
+FEE_REFUND = KUDOS:0
+RSA_KEYSIZE = 2048
+CIPHER = RSA

projects/GNUTaler/default.nix

@@ -0,0 +1,27 @@
+{
+  pkgs,
+  sources,
+  ...
+} @ args: {
+  packages = {
+    inherit
+      (pkgs)
+      libeufin
+      taler-exchange
+      taler-merchant
+      taler-wallet-core
+      ;
+  };
+  nixos = {
+    examples = {
+      base = {
+        path = ./example.nix;
+        description = "Basic configuration, mainly used for testing purposes.";
+      };
+    };
+    # TODO: enable when https://github.com/NixOS/nixpkgs/pull/332699 is merged
+    # tests = import "${sources.inputs.nixpkgs}/nixos/tests/taler" args;
+    # modules.services.taler = "${sources.inputs.nixpkgs}/nixos/modules/services/taler/module.nix";
+    # modules.services.libeufin = "${sources.inputs.nixpkgs}/nixos/modules/services/libeufin/module.nix";
+  };
+}

projects/GNUTaler/example.nix

@@ -0,0 +1,133 @@
+{
+  lib,
+  pkgs,
+  ...
+}: let
+  CURRENCY = "KUDOS";
+  FIAT_CURRENCY = "CHF";
+
+  testExchange = {
+    MASTER_PUBLIC_KEY = "2TQSTPFZBC2MC4E52NHPA050YXYG02VC3AB50QESM6JX1QJEYVQ0";
+    BASE_URL = "http://localhost:8081/";
+  };
+in {
+  services.taler = {
+    # Import exchange account into Taler's main config
+    # https://docs.taler.net/taler-exchange-manual.html#exchange-bank-account-configuration
+    includes = [./conf/taler-accounts.conf];
+
+    settings = {
+      taler.CURRENCY = CURRENCY;
+    };
+
+    exchange = {
+      enable = true;
+      debug = true;
+      openFirewall = true; # default 8081
+      # Generated with `taler-harness deployment gen-coin-config`
+      # See https://docs.taler.net/taler-exchange-manual.html#coins-denomination-keys
+      denominationConfig = lib.readFile ./conf/taler-denominations.conf;
+      settings = {
+        exchange = testExchange;
+        exchange-offline = {
+          # WARN: This file will be world-readable. You should either point to
+          # a location outside the Nix store or set up secret management.
+          # See https://wiki.nixos.org/wiki/Comparison_of_secret_managing_schemes
+          MASTER_PRIV_FILE = "${./conf/private.key}";
+        };
+      };
+    };
+
+    merchant = {
+      enable = true;
+      debug = true;
+      openFirewall = true; # default 8083
+      settings = {
+        # Add exchange to the list of trusted payment service providers
+        # See https://docs.taler.net/taler-merchant-manual.html#exchange
+        merchant-exchange-test = {
+          EXCHANGE_BASE_URL = testExchange.BASE_URL;
+          MASTER_KEY = testExchange.MASTER_PUBLIC_KEY;
+          inherit CURRENCY;
+        };
+      };
+    };
+  };
+
+  services.libeufin = {
+    bank = {
+      enable = true;
+      debug = true;
+      openFirewall = true; # default 8082
+      # Needed for currency conversion to work
+      initialAccounts = [
+        {
+          username = "exchange";
+          password = "exchange";
+          name = "Exchange";
+        }
+      ];
+
+      settings = {
+        libeufin-bank = {
+          WIRE_TYPE = "x-taler-bank";
+          # WIRE_TYPE = "iban";
+          X_TALER_BANK_PAYTO_HOSTNAME = "localhost:8082";
+          # IBAN_PAYTO_BIC = "SANDBOXX";
+          BASE_URL = "localhost:8082";
+
+          SUGGESTED_WITHDRAWAL_EXCHANGE = testExchange.BASE_URL;
+
+          ALLOW_REGISTRATION = "yes";
+
+          REGISTRATION_BONUS_ENABLED = "yes";
+          REGISTRATION_BONUS = "${CURRENCY}:100";
+          DEFAULT_DEBT_LIMIT = "${CURRENCY}:500";
+
+          # NOTE: For conversion to work, the exchange's bank account must be
+          # registered before the bank is started.
+          # The `services.libeufin.bank.initialAccounts` option can be used to do this.
+          ALLOW_CONVERSION = "yes";
+          ALLOW_EDIT_CASHOUT_PAYTO_URI = "yes";
+
+          inherit CURRENCY FIAT_CURRENCY;
+        };
+      };
+    };
+
+    nexus = {
+      enable = true;
+      debug = true;
+      openFirewall = true; # default 8084
+      settings = {
+        # https://docs.taler.net/libeufin/nexus-manual.html#setting-up-the-ebics-subscriber
+        # https://docs.taler.net/libeufin/setup-ebics-at-postfinance.html
+        nexus-ebics = {
+          # == Mandatory ==
+          CURRENCY = FIAT_CURRENCY;
+          # Bank
+          HOST_BASE_URL = "https://isotest.postfinance.ch/ebicsweb/ebicsweb";
+          BANK_DIALECT = "postfinance";
+          # EBICS IDs
+          HOST_ID = "PFEBICS";
+          USER_ID = "PFC00639";
+          PARTNER_ID = "PFC00639";
+          # Account information
+          IBAN = "CH4740123RW4167362694";
+          BIC = "BIC";
+          NAME = "nixosTest nixosTest";
+
+          # == Optional ==
+          # WARN: This file will be world-readable. You should either point to
+          # a location outside the Nix store or set up secret management.
+          # See https://wiki.nixos.org/wiki/Comparison_of_secret_managing_schemes
+          CLIENT_PRIVATE_KEYS_FILE = "${./conf/client-ebics-keys.json}";
+          BANK_PUBLIC_KEYS_FILE = "${./conf/bank-ebics-keys.json}";
+        };
+      };
+    };
+  };
+
+  # Install CLI wallet
+  environment.systemPackages = [pkgs.taler-wallet-core];
+}