bitborg/bitborg-infra

Bevaka

Avgrena 0

Payments: deploy the billing service #496

Nytt ärende

Öppen

öppnade 2026-09-24 13:03:35 +00:00 av supernaut · 2 kommentarer

supernaut kommenterad

2026-09-24 13:03:35 +00:00

Ägare

Problem

The billing service has no deployment. Paid checkout needs it running before launch.

Scope

A Quadlet container for the service, pulled from the org registry, with the same image-update path as the portal.
Its own Postgres database and role, least privilege.
Secrets in Ansible Vault: the payment provider API key and webhook secret.
A Kanidm service account that may only change membership of the paid tier group (ADR 0017: tier changes flow through Kanidm and the reconciler, never straight into Forgejo).
A Caddy route for the provider's webhook, reachable from the internet, everything else internal only.
Backups of the new database included in the existing backup and drill.
Runbook section: deploy, rotate secrets, roll back.

Done when

The service runs in production against the provider's test mode, a test payment grants the paid tier end to end, and the backup drill restores its database.

Blocked on the service having an HTTP entry point.

Epic: bitborg/bitborg-docs#5

## Problem The billing service has no deployment. Paid checkout needs it running before launch. ## Scope - A Quadlet container for the service, pulled from the org registry, with the same image-update path as the portal. - Its own Postgres database and role, least privilege. - Secrets in Ansible Vault: the payment provider API key and webhook secret. - A Kanidm service account that may only change membership of the paid tier group (ADR 0017: tier changes flow through Kanidm and the reconciler, never straight into Forgejo). - A Caddy route for the provider's webhook, reachable from the internet, everything else internal only. - Backups of the new database included in the existing backup and drill. - Runbook section: deploy, rotate secrets, roll back. ## Done when The service runs in production against the provider's test mode, a test payment grants the paid tier end to end, and the backup drill restores its database. Blocked on the service having an HTTP entry point. Epic: bitborg/bitborg-docs#5

supernaut lade till etiketterna

2026-09-24 13:03:55 +00:00

supernaut lade till detta till projektet Bitborg Infrastructure

2026-09-24 13:03:56 +00:00

supernaut refererade till detta ärende från bitborg/bitborg-docs

2026-09-24 13:05:35 +00:00

Public portal — payments #5

supernaut lade till

ready-for-implementation

och tog bort

blocked

etiketter

2026-09-30 18:44:11 +00:00

supernaut refererade till detta ärende

2026-09-30 19:24:18 +00:00

feat(billing): deploy the billing service, inert until enabled #507

supernaut refererade till detta ärende från en incheckning

2026-09-30 21:03:49 +00:00

feat(billing): deploy the billing service, inert until enabled (#507)

supernaut refererade till detta ärende

2026-10-01 06:46:53 +00:00

chore(billing): pin the first published billing image, v0.2.1 #508

supernaut refererade till detta ärende från en incheckning

2026-10-01 07:48:08 +00:00

chore(billing): pin the first published billing image, v0.2.1 (#508)

supernaut refererade till detta ärende från bitborg/bitborg-docs

2026-10-01 15:10:00 +00:00

Public portal — payments #5

supernaut kommenterad

2026-10-01 15:11:04 +00:00

Upphovsperson

Ägare

Status 2026-10-01: the role is merged (#507), pinned to the first published image v0.2.1 (#508) and applied. Production runs it disabled: billing_enabled: false. A second --check gave changed=0.

No webhook secret: Mollie does not sign webhooks, so the service re-fetches each payment by id.

Left before this closes, in order (runbook "Billing service"):

Create the bitborg-billing Kanidm service account and a read-write API token.
Add vault_payments_mollie_api_key_test, vault_billing_db_password, vault_billing_api_token, vault_kanidm_billing_token.
Set billing_enabled: true, dry-run, apply. Verify, including that entry_managed_by on an account grants member write on tier_pro.
Set billing_payments_enabled: true, run a test payment, confirm the paid tier reaches Forgejo.
Take a backup and let the drill restore the billing database.

Status 2026-10-01: the role is merged (#507), pinned to the first published image `v0.2.1` (#508) and applied. Production runs it disabled: `billing_enabled: false`. A second `--check` gave `changed=0`. No webhook secret: Mollie does not sign webhooks, so the service re-fetches each payment by id. Left before this closes, in order (runbook "Billing service"): 1. Create the `bitborg-billing` Kanidm service account and a read-write API token. 2. Add `vault_payments_mollie_api_key_test`, `vault_billing_db_password`, `vault_billing_api_token`, `vault_kanidm_billing_token`. 3. Set `billing_enabled: true`, dry-run, apply. Verify, including that `entry_managed_by` on an account grants member write on `tier_pro`. 4. Set `billing_payments_enabled: true`, run a test payment, confirm the paid tier reaches Forgejo. 5. Take a backup and let the drill restore the billing database.

supernaut refererade till detta ärende

2026-10-01 15:11:04 +00:00

Payments: payment -> Kanidm group -> reconciler flow #46

supernaut kommenterad

2026-10-01 20:47:20 +00:00

Upphovsperson

Ägare

One more step for the enable checklist, from #510: after billing_enabled: true is applied and the bitborg-billing container logs to Loki, confirm the BillingReconcileManualReview alert fires on one matching line. For example, log [reconcile] test is paid at the provider with no settled local charge; needs manual review from inside the container to stdout, then check Alertmanager. The rule needs the monitoring tag applied first.

One more step for the enable checklist, from #510: after `billing_enabled: true` is applied and the `bitborg-billing` container logs to Loki, confirm the `BillingReconcileManualReview` alert fires on one matching line. For example, log `[reconcile] test is paid at the provider with no settled local charge; needs manual review` from inside the container to stdout, then check Alertmanager. The rule needs the `monitoring` tag applied first.

supernaut refererade till detta ärende

2026-10-01 21:05:27 +00:00

feat(monitoring): alert on billing reconcile manual-review line #512

supernaut refererade till detta ärende från en incheckning

2026-10-01 21:23:15 +00:00

feat(monitoring): alert on billing reconcile manual-review line (#512)

supernaut refererade till detta ärende

2026-10-01 21:36:12 +00:00

chore(billing): pin image v0.3.0 #513

supernaut refererade till detta ärende från en incheckning

2026-10-01 21:45:18 +00:00

chore(billing): pin image v0.3.0 (#513)