Skip to content

fix(cloud): temporarily relax PAYMENT_REQUIRE_NATIVE to restore service #255

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Svaag merged 1 commit into from
Jun 16, 2026
Merged

fix(cloud): temporarily relax PAYMENT_REQUIRE_NATIVE to restore service #255

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 5 additions & 1 deletion ansible/roles/vault_agent/templates/hyrule-cloud.env.ctmpl.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,11 @@ PAYMENT_RECEIVER_ADDRESS={{ .Data.data.payment_wallet }}
PAYMENT_FACILITATOR_URL=https://x402.org/facilitator
PAYMENT_NETWORK=eip155:8453
PAYMENT_ASSET=USDC
PAYMENT_REQUIRE_NATIVE=true
# TEMPORARY: set to false to restore service while the Monero wallet-rpc
# bootstrap is broken (invalid wallet password + ringdb permission denied on
# /home/hyrule/.shared-ringdb). XMR native payment is unavailable until then;
# BTC + x402 USDC still work. Restore to true once monero-wallet-rpc is healthy.
PAYMENT_REQUIRE_NATIVE=false

@chatgpt-codex-connector chatgpt-codex-connector Bot Jun 16, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Disable Monero service startup for the mitigation

With the production api inventory still setting hyrule_cloud_monero_wallet_rpc_enabled: true (ansible/inventory/host_vars/api.yml:5), this env-only relaxation does not remove the apply-time dependency on the failed wallet RPC. The cloud apply imports vault.yml before health.yml, and vault.yml still runs state: started for monero-wallet-rpc.service when that flag is true (ansible/roles/hyrule_cloud/tasks/vault.yml:148-154), so in the exact incident described here (invalid wallet password/ringdb permission causing the service not to start) the production apply can fail before the post-deploy health check rather than completing the restore; also disable/bypass that service or make it non-blocking while PAYMENT_REQUIRE_NATIVE=false.

Useful? React with 👍 / 👎.

PAYMENT_BTC_XPUB={{ .Data.data.btc_xpub }}
PAYMENT_XMR_VIEWKEY={{ .Data.data.xmr_viewkey }}
PAYMENT_XMR_RPC_URL={{ or .Data.data.xmr_rpc_url "http://127.0.0.1:18088/json_rpc" }}
Expand Down
Loading