stakey/vspd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
vspd/docs/deployment.md
jholdstock 10258f9c29 Mention ssl in deployment docs.
2020-06-09 13:11:46 +00:00

3.6 KiB
Raw Blame History

Deployment Guide

This guide is deliberately written at a high level and with minimal details because it is assumed that VSP operators will already have a level of familiarity with Decred software and a level of sysadmin experience.

Prerequisites

Build from source

Compiled binaries are not provided for vspd - VSP operators are expected to build vspd from source.

Fee wallet

A wallet should be created to collect VSP fees. Ideally this would be a cold wallet which is not used for any other purpose, and it should be completely separate from the vspd infrastructure. The dcrwallet getmasterpubkey RPC should be used to export an extended public (xpub) key from one of the wallet accounts. This xpub key will be provided to vspd via config, and vspd will use it to derive a new addresses for receiving fee payments.

Voting Servers

A vspd deployment should have a minimum of three remote voting wallets. The servers hosting these wallets should ideally be in geographically seperate locations.

Each voting server should be running an instance of dcrd and dcrwallet. The wallet on these servers should be completely empty and not used of any other purpose. dcrwallet should be permenantly unlocked and have voting enabled (--enablevoting). vspd on the front-end server must be able to reach each instance of dcrwallet over RPC.

Front-end Server

The front-end server is where vspd will be running. A webserver (eg. nginx) should be configured with SSL and used to proxy requests from the internet to vspd.

  1. Start an instance of dcrd on this server with transaction index enabled (--txindex). dcrd is used for fishing ticket details out of the chain, for receiving blockconnected notifications, and for broadcasting and checking the status of fee transactions.

  2. Run vspd with no arguments to write a default config file. Modify the config file to set your dcrd and dcrwallet connection details, and any other required customization.

  3. A vspd database must be initialized before vpsd can be started. To do this, provide vspd with the xpub key it should use for collecting fees:

$ vspd --feexpub=tpubVppjaMjp8GEW...
  1. Once the database is initialized, vspd can be started for normal operation by running it without the --feexpub flag.

Deploying alongside dcrstakepool

It is possible to run vspd on the same infrastructure as an existing dcrstakepool deployment.

  • On the voting servers...

    • The existing dcrd instance requires no changes.
    • Create a new instance of dcrwallet listening for RPC connections on a different port. Ensure the new wallet is unlocked and voting is enabled (dcrstakepool wallet should still have voting disabled).

  • On the front-end server...

    • Run an instance of dcrd with txindex enabled.
    • Run the vspd binary
      • Configure webserver to proxy requests from the internet to vspd.
      • Configure vspd to use the newly created dcrwallet instances.

Monitoring

// TODO

Backup

The bbolt database file used by vspd is stored in the process home directory, at the path {homedir}/data/{network}/vspd.db. vspd keeps a file lock on this file, so it cannot be opened by any other processes while vspd is running.

To facilitate back-ups, vspd will periodically write a copy of the bbolt database to the path {homedir}/data/{network}/vspd.db-backup. A copy of the database file will also be written to this path when vspd shuts down.

Disaster Recovery

The database file contains everything needed to restore a vspd deployment - simply place the database file into the vspd data directory and start vspd as normal.