coingate

deploy/catcrafts-server.service

@@ -35,8 +35,7 @@ WorkingDirectory=/srv/catcrafts-app
 ExecStart=/srv/catcrafts-app/catcrafts-server --serve 8081 \
     --content=/srv/catcrafts-app/content \
     --webroot=/srv/catcrafts.net \
-    --orders=/var/lib/catcrafts/orders.jsonl \
-    --bunq-state=/var/lib/catcrafts/bunq-state.json
+    --orders=/var/lib/catcrafts/orders.jsonl
 
 Restart=always
 RestartSec=2s
@@ -76,17 +75,17 @@ ReadOnlyPaths=/srv/catcrafts-app /srv/catcrafts.net
 # Secrets arrive from OUTSIDE the deployed tree — the web root is public and
 # rsync-wiped, and /srv/catcrafts-app is CI-writable; neither may ever hold a
 # credential. /etc/catcrafts/payments.env (root:root 0600) carries:
-#   MOLLIE_API_KEY=live_...   (or test_... while verifying) — the rail
-#   SENDCLOUD_PUBLIC_KEY / SENDCLOUD_SECRET_KEY / SENDCLOUD_METHOD  — optional,
-#                             live shipping rates; zone table without them
+#   MOLLIE_API_KEY=live_...   (or test_... while verifying) — the BANK rail
+#   COINGATE_API_KEY=...      the CRYPTO rail; omit and checkout offers only
+#   COINGATE_SANDBOX=1        bank. Sandbox tokens are not live tokens.
+#   SENDCLOUD_PUBLIC_KEY / SENDCLOUD_SECRET_KEY / SENDCLOUD_METHOD  — REQUIRED
+#                             to sell: no rate table means checkout refuses
 #   INVOICE_GPG_KEY=...       invoice signing (see deploy/README.md)
 #   MAIL_COMMAND=msmtp -t     order confirmation email (see deploy/README.md,
 #   MAIL_FROM=...             "Order email"); unset = no email is sent
-#   BUNQ_API_KEY=...          legacy: only used when no Mollie key is set
 # The '-' prefix makes the file optional: without it the server starts with
 # payments off and the shop renders but refuses checkout — degraded, not down.
 EnvironmentFile=-/etc/catcrafts/payments.env
-EnvironmentFile=-/etc/catcrafts/bunq.env
 # Invoice signing keyring (see deploy/README.md, "Invoice signing").
 Environment=GNUPGHOME=/var/lib/catcrafts/gnupg