Deployment notes
================

- 2023-06-19

  ZKAPAuthorizer's Tahoe-LAFS plugin name changed from "privatestorageio-zkapauthz-v1" to "privatestorageio-zkapauthz-v2".
  This causes Tahoe-LAFS to use a different filename to persist the plugin's Foolscap fURL.
  To preserve the original fURL value (required) each storage node needs this command run before the deployment::

    cp /var/db/tahoe-lafs/storage/private/storage-plugin.privatestorageio-zkapauthz-v{1,2}.furl

- 2023-04-19

  The team switched from Slack to Zulip.
  For the monitoring notifications to reach Zulip, a webhook bot has to be created in Zulip and a secret URL has to be constructed as described in `https://zulip.com/integrations/doc/grafana`_ and added to the ``private_keys`` directory (See ``grid/local/private-keys/grafana-zulip-url`` for an example).
  Find the secret URL for production at `https://my.1password.com/vaults/7flqasy5hhhmlbtp5qozd3j4ga/allitems/rb22ipb6gvokohzq2d2hhv6t6u`_.

- 2021-12-20

  `https://whetstone.private.storage/privatestorage/privatestorageops/-/issues/399`_ requires moving the PaymentServer database on the ``payments`` host onto a new dedicated filesystem.

  Follow these steps *before* deploying this version of PrivateStorageio:

  0. Deploy the `PrivateStorageOps change <https://whetstone.private.storage/privatestorage/privatestorageops/-/merge_requests/169>`_ that creates a new dedicated volume.

  1. Put a disk label on the new dedicated volume ::

     nix-shell -p parted --run 'parted /dev/nvme1n1 mklabel msdos'

  2. Put a properly aligned partition in the new disk label ::

     nix-shell -p parted --run 'parted /dev/nvme1n1 mkpart primary ext2 4096s 4G'

  3. Create a labeled filesystem on the partition ::

     mkfs.ext4 -L zkapissuer-data /dev/nvme1n1p1

  4. Deploy the PrivateStorageio update.

  5. Move the database file to the new location ::

     mv -iv /var/lib/zkapissuer/vouchers.sqlite3 /var/lib/zkapissuer-v2

  6. Clean up the old state directory ::

     rm -ir /var/lib/zkapissuer

  7. Start the PaymentServer service (not running because its path assertions were not met earlier) ::

     systemctl start zkapissuer

- 2021-10-12 The secret in ``private-keys/grafana-slack-url`` needs to be changed to remove the ``SLACKURL=`` prefix.

- 2021-09-30 `Enable alerting <https://whetstone.private.storage/privatestorage/PrivateStorageio/-/merge_requests/185>`_ needs a secret in ``private-keys/grafana-slack-url`` looking like the template in ``morph/grid/local/private-keys/grafana-slack-url`` and pointing to the secret API endpoint URL saved in `this 1Password entry <https://privatestorage.1password.com/vaults/7flqasy5hhhmlbtp5qozd3j4ga/allitems/cgznskz2oix2tyx5xyntwaos5i>`_ (or create a new secret URL at https://www.slack.com/apps/A0F7XDUAZ).

- 2021-09-07 `Manage access to payment metrics <https://whetstone.private.storage/privatestorage/PrivateStorageio/-/merge_requests/146>`_ requires moving and chown'ing the PaymentServer database on the ``payments`` host::

   mkdir /var/lib/zkapissuer

   mv /var/db/vouchers.sqlite3 /var/lib/zkapissuer/vouchers.sqlite3

   chown -R zkapissuer:zkapissuer /var/lib/zkapissuer

   chmod 750 /var/lib/zkapissuer
   chmod 640 /var/lib/zkapissuer/vouchers.sqlite3