Next 2025 08 07

.gitignore

@@ -1,6 +1,6 @@
 /*.cert
 /cloudFormation/
-/.direnv
+/.direnv*
 /.envrc.local
 /.gcroots
 /*.log

.sops.yaml

@@ -4,6 +4,7 @@ keys:
 
   # Misc
   - &misc1-metadata-a-1 age187hd0pffv549vfcmnw5u9yg3fck9e4psesz2xchrklqjqepccd7s6vlkcv
+  - &misc1-wg-a-1 age1ryvlcaajedpnkdyugnre6yysht5ahkn3yrwz48wvywpn2sxwfqtqrc8qmn
 
   # Preprod
   - &preprod1-bp-a-1 age1zhewzr3r8u4qmu9c5asw0vv9pw9qxvah9y60reu5uggrr8vrd95skhn3q3
@@ -18,25 +19,8 @@ keys:
   - &preview2-bp-b-1 age1jcfeznfkxx2rmeej9f4frvnjqkxdpd9kg56l57nmtamq53802fjq7x2y69
   - &preview3-bp-c-1 age13tc9mjgu7hwfxsa84hq0tcz7eeg9m6f0fmg8gzxwme30pfxf7g4sfk2y0k
 
-  # Private
-  - &private1-bp-a-1 age1pwmcf9nez82glwzk3mfcfyv0wnc4yev8pjhxk43fwgcr3m8yjsesjdfha0
-  - &private1-dbsync-a-1 age1q435aw99zpavtn5ce770jesh3th0ghne8jkt5mse8zscpp5r2ghsark64e
-  - &private1-faucet-a-1 age1lack6chc6czx8t9sc9ayc3wq0du82ne6l8m5h6lwz8zn6rxz5gqqtpz4z2
-  - &private2-bp-b-1 age1wewhhymvzljpgy7v9caud2zmgjt7dsdcluvpq8373ueuj5qv435qgn9xae
-  - &private3-bp-c-1 age1ay9e566ksavc46809vzjzcwlsu06dzr869fdv8qf9p9qu69qva4ssdv4af
-
   # Sanchonet
-  - &sanchonet1-bp-a-1 age1apa4g9hfjaq9kp95utg5jeqm9zmdhylcfsqmekrl0ptg4wjt53fsrfffy9
-  - &sanchonet1-dbsync-a-1 age1d5nc5w5th0qzagqa8xqltye2ttsuazury35pgwymyrnzrdk6zezqznv0ua
-  - &sanchonet1-faucet-a-1 age15cj5hg52ep6ccc4t5xm9ncuf94m2ds4k02lzzvmeykx2z4gc83es5ze452
-  - &sanchonet2-bp-b-1 age10ethn6sqe2fcx03pev0vddteg9jwe7azydq9glj9eyppdkqy855sxv40k9
-  - &sanchonet3-bp-c-1 age1hpyzunphtls4tfk5j4dc4rxg55essxd3ht7fweapumfzqe8h5suq0xa699
-
-  # Shelley-qa
-  - &shelley-qa1-bp-a-1 age1xxu6w2sftwxp5aef9yes20wegwv62pwhg7jzvt60q4ucwl6eyfaskjgqfu
-  - &shelley-qa1-faucet-a-1 age1pcg2a9pzfcl6jwkzchyhlg30nznfaaecjwnpy2am6mhq8kvgf9msudxt5a
-  - &shelley-qa2-bp-b-1 age1pzcdrzm9j4pxar6nx9wu7le95apw7gu4838s22u7evycydcunu3qw7eafy
-  - &shelley-qa3-bp-c-1 age19ulgvpe2wnvmu6tujae0ekn2stz46ntw0n03et4ctjk8nawa25eq6luw8f
+  - &sanchonet1-bp-a-1 age1sxhjqwnuf5duczjv5fwle492jpm7fhwunkwhp6agle6y75yqdeas586aaj
 
   # Mainnet, non-prod testing machines
   - &mainnet1-rel-a-1 age16m0sd0pyme79ds8jd380ctuc23p570djl0rnrp6xt28tce5ltvyql4hdgn
@@ -120,107 +104,34 @@ creation_rules:
       - *sre
       - *preview3-bp-c-1
 
-  # Private specific
-  - path_regex: secrets/groups/private1/deploy/.*govtool-backend.*$
-    key_groups:
-    - age:
-      - *sre
-      - *private1-dbsync-a-1
-
-  - path_regex: secrets/groups/private1/deploy/.*faucet.*$
-    key_groups:
-    - age:
-      - *sre
-      - *private1-faucet-a-1
-
-  - path_regex: secrets/groups/private1/deploy/.*$
-    key_groups:
-    - age:
-      - *sre
-      - *private1-bp-a-1
-
-  - path_regex: secrets/groups/private2/deploy/.*$
-    key_groups:
-    - age:
-      - *sre
-      - *private2-bp-b-1
-
-  - path_regex: secrets/groups/private3/deploy/.*$
-    key_groups:
-    - age:
-      - *sre
-      - *private3-bp-c-1
-
   # Sanchonet specific
-  - path_regex: secrets/groups/sanchonet1/deploy/.*govtool-backend.*$
-    key_groups:
-    - age:
-      - *sre
-      - *sanchonet1-dbsync-a-1
-
-  - path_regex: secrets/groups/sanchonet1/deploy/.*faucet.*$
-    key_groups:
-    - age:
-      - *sre
-      - *sanchonet1-faucet-a-1
-
   - path_regex: secrets/groups/sanchonet1/deploy/.*$
     key_groups:
     - age:
       - *sre
       - *sanchonet1-bp-a-1
 
-  - path_regex: secrets/groups/sanchonet2/deploy/.*$
-    key_groups:
-    - age:
-      - *sre
-      - *sanchonet2-bp-b-1
-
-  - path_regex: secrets/groups/sanchonet3/deploy/.*$
-    key_groups:
-    - age:
-      - *sre
-      - *sanchonet3-bp-c-1
-
-  # Shelley-qa specific
-  - path_regex: secrets/groups/shelley-qa1/deploy/.*faucet.*$
-    key_groups:
-    - age:
-      - *sre
-      - *shelley-qa1-faucet-a-1
-
-  - path_regex: secrets/groups/shelley-qa1/deploy/.*$
-    key_groups:
-    - age:
-      - *sre
-      - *shelley-qa1-bp-a-1
-
-  - path_regex: secrets/groups/shelley-qa2/deploy/.*$
-    key_groups:
-    - age:
-      - *sre
-      - *shelley-qa2-bp-b-1
-
-  - path_regex: secrets/groups/shelley-qa3/deploy/.*$
-    key_groups:
-    - age:
-      - *sre
-      - *shelley-qa3-bp-c-1
-
   # Mainnet non-prod specific
   - path_regex: secrets/groups/mainnet1/deploy/.*$
     key_groups:
     - age:
       - *sre
       - *mainnet1-rel-a-1
 
-  # Miscellaneous group specific
+  # Miscellaneous group specific, metadata server
   - path_regex: secrets/groups/misc1/deploy/.*metadata.*$
     key_groups:
     - age:
       - *sre
       - *misc1-metadata-a-1
 
+  # Miscellaneous group specific, wireguard tunnel
+  - path_regex: secrets/groups/misc1/deploy/.*wg.*$
+    key_groups:
+    - age:
+      - *sre
+      - *misc1-wg-a-1
+
   # Temporary buildkite testing
   - path_regex: secrets/buildkite/.*$
     key_groups:

Justfile

@@ -112,6 +112,7 @@ checkSshConfig := '''
       | where ($it.machine | str ends-with ".ipv4")
       | rename machine pubIpv4
       | update machine { $in | str replace ".ipv4" "" }
+      | update pubIpv4 { $in | if $in == "unavailable.ipv4" { null } else { $in } }
       | sort-by machine
     )
 
@@ -400,11 +401,11 @@ dedelegate-pools ENV *IDXS=null:
       --wallet-mnemonic <(just sops-decrypt-binary secrets/envs/{{ENV}}/utxo-keys/faucet.mnemonic) \
       --delegation-index "$i"
 
-    TXID=$(eval "$CARDANO_CLI" latest transaction txid --tx-file tx-deleg-account-$i-restore.txsigned)
+    TXID=$(eval "$CARDANO_CLI" latest transaction txid --tx-file tx-deleg-account-$i-restore.txsigned | jq -r .txhash)
     EXISTS="true"
 
     while [ "$EXISTS" = "true" ]; do
-      EXISTS=$(eval "$CARDANO_CLI" latest query tx-mempool tx-exists $TXID | jq -r .exists)
+      EXISTS=$(eval "$CARDANO_CLI" latest query tx-mempool tx-exists $TXID | jq -r .exists || true)
       if [ "$EXISTS" = "true" ]; then
         echo "Pool de-delegation index $i tx still exists in the mempool, sleeping 5s: $TXID"
       else

docs/environments-pre/preprod/alonzo-genesis.json

@@ -0,0 +1,196 @@
+{
+    "lovelacePerUTxOWord": 34482,
+    "executionPrices": {
+        "prSteps":
+	{
+	    "numerator" :   721,
+	    "denominator" : 10000000
+		},
+        "prMem":
+	{
+	    "numerator" :   577,
+	    "denominator" : 10000
+	}
+    },
+    "maxTxExUnits": {
+        "exUnitsMem":   10000000,
+        "exUnitsSteps": 10000000000
+    },
+    "maxBlockExUnits": {
+        "exUnitsMem":   50000000,
+        "exUnitsSteps": 40000000000
+    },
+    "maxValueSize": 5000,
+    "collateralPercentage": 150,
+    "maxCollateralInputs": 3,
+    "costModels": {
+        "PlutusV1": {
+            "sha2_256-memory-arguments": 4,
+            "equalsString-cpu-arguments-constant": 1000,
+            "cekDelayCost-exBudgetMemory": 100,
+            "lessThanEqualsByteString-cpu-arguments-intercept": 103599,
+            "divideInteger-memory-arguments-minimum": 1,
+            "appendByteString-cpu-arguments-slope": 621,
+            "blake2b-cpu-arguments-slope": 29175,
+            "iData-cpu-arguments": 150000,
+            "encodeUtf8-cpu-arguments-slope": 1000,
+            "unBData-cpu-arguments": 150000,
+            "multiplyInteger-cpu-arguments-intercept": 61516,
+            "cekConstCost-exBudgetMemory": 100,
+            "nullList-cpu-arguments": 150000,
+            "equalsString-cpu-arguments-intercept": 150000,
+            "trace-cpu-arguments": 150000,
+            "mkNilData-memory-arguments": 32,
+            "lengthOfByteString-cpu-arguments": 150000,
+            "cekBuiltinCost-exBudgetCPU": 29773,
+            "bData-cpu-arguments": 150000,
+            "subtractInteger-cpu-arguments-slope": 0,
+            "unIData-cpu-arguments": 150000,
+            "consByteString-memory-arguments-intercept": 0,
+            "divideInteger-memory-arguments-slope": 1,
+            "divideInteger-cpu-arguments-model-arguments-slope": 118,
+            "listData-cpu-arguments": 150000,
+            "headList-cpu-arguments": 150000,
+            "chooseData-memory-arguments": 32,
+            "equalsInteger-cpu-arguments-intercept": 136542,
+            "sha3_256-cpu-arguments-slope": 82363,
+            "sliceByteString-cpu-arguments-slope": 5000,
+            "unMapData-cpu-arguments": 150000,
+            "lessThanInteger-cpu-arguments-intercept": 179690,
+            "mkCons-cpu-arguments": 150000,
+            "appendString-memory-arguments-intercept": 0,
+            "modInteger-cpu-arguments-model-arguments-slope": 118,
+            "ifThenElse-cpu-arguments": 1,
+            "mkNilPairData-cpu-arguments": 150000,
+            "lessThanEqualsInteger-cpu-arguments-intercept": 145276,
+            "addInteger-memory-arguments-slope": 1,
+            "chooseList-memory-arguments": 32,
+            "constrData-memory-arguments": 32,
+            "decodeUtf8-cpu-arguments-intercept": 150000,
+            "equalsData-memory-arguments": 1,
+            "subtractInteger-memory-arguments-slope": 1,
+            "appendByteString-memory-arguments-intercept": 0,
+            "lengthOfByteString-memory-arguments": 4,
+            "headList-memory-arguments": 32,
+            "listData-memory-arguments": 32,
+            "consByteString-cpu-arguments-intercept": 150000,
+            "unIData-memory-arguments": 32,
+            "remainderInteger-memory-arguments-minimum": 1,
+            "bData-memory-arguments": 32,
+            "lessThanByteString-cpu-arguments-slope": 248,
+            "encodeUtf8-memory-arguments-intercept": 0,
+            "cekStartupCost-exBudgetCPU": 100,
+            "multiplyInteger-memory-arguments-intercept": 0,
+            "unListData-memory-arguments": 32,
+            "remainderInteger-cpu-arguments-model-arguments-slope": 118,
+            "cekVarCost-exBudgetCPU": 29773,
+            "remainderInteger-memory-arguments-slope": 1,
+            "cekForceCost-exBudgetCPU": 29773,
+            "sha2_256-cpu-arguments-slope": 29175,
+            "equalsInteger-memory-arguments": 1,
+            "indexByteString-memory-arguments": 1,
+            "addInteger-memory-arguments-intercept": 1,
+            "chooseUnit-cpu-arguments": 150000,
+            "sndPair-cpu-arguments": 150000,
+            "cekLamCost-exBudgetCPU": 29773,
+            "fstPair-cpu-arguments": 150000,
+            "quotientInteger-memory-arguments-minimum": 1,
+            "decodeUtf8-cpu-arguments-slope": 1000,
+            "lessThanInteger-memory-arguments": 1,
+            "lessThanEqualsInteger-cpu-arguments-slope": 1366,
+            "fstPair-memory-arguments": 32,
+            "modInteger-memory-arguments-intercept": 0,
+            "unConstrData-cpu-arguments": 150000,
+            "lessThanEqualsInteger-memory-arguments": 1,
+            "chooseUnit-memory-arguments": 32,
+            "sndPair-memory-arguments": 32,
+            "addInteger-cpu-arguments-intercept": 197209,
+            "decodeUtf8-memory-arguments-slope": 8,
+            "equalsData-cpu-arguments-intercept": 150000,
+            "mapData-cpu-arguments": 150000,
+            "mkPairData-cpu-arguments": 150000,
+            "quotientInteger-cpu-arguments-constant": 148000,
+            "consByteString-memory-arguments-slope": 1,
+            "cekVarCost-exBudgetMemory": 100,
+            "indexByteString-cpu-arguments": 150000,
+            "unListData-cpu-arguments": 150000,
+            "equalsInteger-cpu-arguments-slope": 1326,
+            "cekStartupCost-exBudgetMemory": 100,
+            "subtractInteger-cpu-arguments-intercept": 197209,
+            "divideInteger-cpu-arguments-model-arguments-intercept": 425507,
+            "divideInteger-memory-arguments-intercept": 0,
+            "cekForceCost-exBudgetMemory": 100,
+            "blake2b-cpu-arguments-intercept": 2477736,
+            "remainderInteger-cpu-arguments-constant": 148000,
+            "tailList-cpu-arguments": 150000,
+            "encodeUtf8-cpu-arguments-intercept": 150000,
+            "equalsString-cpu-arguments-slope": 1000,
+            "lessThanByteString-memory-arguments": 1,
+            "multiplyInteger-cpu-arguments-slope": 11218,
+            "appendByteString-cpu-arguments-intercept": 396231,
+            "lessThanEqualsByteString-cpu-arguments-slope": 248,
+            "modInteger-memory-arguments-slope": 1,
+            "addInteger-cpu-arguments-slope": 0,
+            "equalsData-cpu-arguments-slope": 10000,
+            "decodeUtf8-memory-arguments-intercept": 0,
+            "chooseList-cpu-arguments": 150000,
+            "constrData-cpu-arguments": 150000,
+            "equalsByteString-memory-arguments": 1,
+            "cekApplyCost-exBudgetCPU": 29773,
+            "quotientInteger-memory-arguments-slope": 1,
+            "verifySignature-cpu-arguments-intercept": 3345831,
+            "unMapData-memory-arguments": 32,
+            "mkCons-memory-arguments": 32,
+            "sliceByteString-memory-arguments-slope": 1,
+            "sha3_256-memory-arguments": 4,
+            "ifThenElse-memory-arguments": 1,
+            "mkNilPairData-memory-arguments": 32,
+            "equalsByteString-cpu-arguments-slope": 247,
+            "appendString-cpu-arguments-intercept": 150000,
+            "quotientInteger-cpu-arguments-model-arguments-slope": 118,
+            "cekApplyCost-exBudgetMemory": 100,
+            "equalsString-memory-arguments": 1,
+            "multiplyInteger-memory-arguments-slope": 1,
+            "cekBuiltinCost-exBudgetMemory": 100,
+            "remainderInteger-memory-arguments-intercept": 0,
+            "sha2_256-cpu-arguments-intercept": 2477736,
+            "remainderInteger-cpu-arguments-model-arguments-intercept": 425507,
+            "lessThanEqualsByteString-memory-arguments": 1,
+            "tailList-memory-arguments": 32,
+            "mkNilData-cpu-arguments": 150000,
+            "chooseData-cpu-arguments": 150000,
+            "unBData-memory-arguments": 32,
+            "blake2b-memory-arguments": 4,
+            "iData-memory-arguments": 32,
+            "nullList-memory-arguments": 32,
+            "cekDelayCost-exBudgetCPU": 29773,
+            "subtractInteger-memory-arguments-intercept": 1,
+            "lessThanByteString-cpu-arguments-intercept": 103599,
+            "consByteString-cpu-arguments-slope": 1000,
+            "appendByteString-memory-arguments-slope": 1,
+            "trace-memory-arguments": 32,
+            "divideInteger-cpu-arguments-constant": 148000,
+            "cekConstCost-exBudgetCPU": 29773,
+            "encodeUtf8-memory-arguments-slope": 8,
+            "quotientInteger-cpu-arguments-model-arguments-intercept": 425507,
+            "mapData-memory-arguments": 32,
+            "appendString-cpu-arguments-slope": 1000,
+            "modInteger-cpu-arguments-constant": 148000,
+            "verifySignature-cpu-arguments-slope": 1,
+            "unConstrData-memory-arguments": 32,
+            "quotientInteger-memory-arguments-intercept": 0,
+            "equalsByteString-cpu-arguments-constant": 150000,
+            "sliceByteString-memory-arguments-intercept": 0,
+            "mkPairData-memory-arguments": 32,
+            "equalsByteString-cpu-arguments-intercept": 112536,
+            "appendString-memory-arguments-slope": 1,
+            "lessThanInteger-cpu-arguments-slope": 497,
+            "modInteger-cpu-arguments-model-arguments-intercept": 425507,
+            "modInteger-memory-arguments-minimum": 1,
+            "sha3_256-cpu-arguments-intercept": 0,
+            "verifySignature-memory-arguments": 1,
+            "cekLamCost-exBudgetMemory": 100,
+            "sliceByteString-cpu-arguments-intercept": 150000
+        }
+    }
+}