wallet-api: a relay on our infra that holds the partner secrets #40

Open
opened 2026-09-15 12:40:33 +00:00 by grenade · 0 comments
Owner

Parent: #7

Scope

A wallet-api axum crate in this workspace (generic.md §3): proxies tokens, quote, deposit/submit and status to 1Click with the partner JWT attached, later signs ramp URLs (#8) and serves history (#23). Ships with its systemd unit, sysusers drop-in, firewalld service and nginx vhost in asset/, a deploy job in the workflow, and a /v1/health. The wallet talks to it over TLS from the edge proxy; the relay is stateless and custodies nothing.

Operator decision to record here before starting

The NEAR Intents partner registration (JWT, referral id) and which host runs the relay.

Acceptance

Deployed by CI; the wallet's quote goes through it and the 1Click explorer shows the referral. Killing the relay degrades the wallet to "swaps unavailable", nothing else.

Depends on

The 1Click client.

Parent: #7 ## Scope A `wallet-api` axum crate in this workspace (generic.md §3): proxies `tokens`, `quote`, `deposit/submit` and `status` to 1Click with the partner JWT attached, later signs ramp URLs (#8) and serves history (#23). Ships with its systemd unit, sysusers drop-in, firewalld service and nginx vhost in `asset/`, a deploy job in the workflow, and a `/v1/health`. The wallet talks to it over TLS from the edge proxy; the relay is stateless and custodies nothing. ## Operator decision to record here before starting The NEAR Intents partner registration (JWT, referral id) and which host runs the relay. ## Acceptance Deployed by CI; the wallet's quote goes through it and the 1Click explorer shows the referral. Killing the relay degrades the wallet to "swaps unavailable", nothing else. ## Depends on The 1Click client.
grenade added the child label 2026-09-15 12:41:50 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: blackbeard/wallet#40