cryptorugmunch
e13bd4d774
Adds missing standard artifacts: - README.md (if missing) - AGENTS.md (AI agent contract) - PLAN.md (current sprint) - STATUS.md (where we are) - DEVELOPMENT.md (dev workflow) - DEPLOYMENT.md (deploy procedure) - TESTING.md (test strategy) - DECISIONS.md (ADR index + templates) - .github/CODEOWNERS - .github/workflows/ci.yml Preserves all existing artifacts. Refs: RugMunchMedia/fleet-template
2.3 KiB
Fixes walletpress backend deployment blockers
The walletpress backend was unable to start due to 4 issues. This PR fixes all of them.
#1 — requirements.lock incomplete
Problem: requirements.lock was missing deps. The Dockerfile used requirements.lock for pip install, so the runtime couldn't import python-multipart (FastAPI Form data), mcp (MCP SDK), and various chain-specific deps.
Fix: Switched Dockerfile to use requirements.txt (which has all loose pins) instead of the incomplete lock. Also added python-multipart>=0.0.9 and mcp>=1.25.0 to requirements.txt.
#2 — main.py wrong import name (AuditTrail)
Problem: from core.audit import AuditTrail — class doesn't exist; only AuditLog does.
Fix: Changed import and usage to AuditLog.
#3 — main.py wrong import path (PersistentStore)
Problem: from routers.chain_vault import _PersistentStore — neither _PersistentStore nor _persistent_store exists in chain_vault.py. The actual class is PersistentStore (no underscore prefix) in routers/_persistent_store.py.
Fix: Changed import to from routers._persistent_store import PersistentStore.
#4 — DB volume permissions
Problem: /data/walletpress/walletpress.db couldn't be opened (unable to open database file). The mounted volume had wrong ownership and the previous Dockerfile chown'd /data to walletpress user, but only at build time — the runtime mount overwrote this.
Fix: Added entrypoint.sh that runs as root on container start, ensures /data exists, chowns to walletpress:walletpress, then execs the CMD. Also fixed Dockerfile ordering (COPY entrypoint + chmod must happen before USER directive).
Verification
After all fixes:
{"status":"ok","version":"1.1.0","service":"walletpress","checks":{"vault":"ok","key_store":"ok","proof":"ok","webhooks":"ok"}}
- Container:
walletpress-backendUp (healthy) - API: 112 endpoints exposed at
/backend/*via nginx - Tailscale access works (no auth)
- Direct IP requires basic auth (401 without)
Test plan
# Tailnet
curl https://walletpress.rugmunch.io/backend/health
curl https://walletpress.rugmunch.io/backend/docs
# Direct IP (needs creds)
curl -u crmuncher:<password> https://152.53.80.39/backend/health
Closes the 4 blockers documented in fleet-infra/ADMIN-ACCESS.md.