Merge pull request #20 from offen/kms

Add KMS app

.circleci/config.yml

@@ -1,6 +1,29 @@
 version: 2
 
 jobs:
+  kms:
+    docker:
+      - image: circleci/golang:1.12
+    working_directory: ~/offen/kms
+    steps:
+      - checkout:
+          path: ~/offen
+      - restore_cache:
+          key: offen-kms-{{ checksum "go.mod" }}
+      - run:
+          name: Download modules
+          command: go mod download
+      - save_cache:
+          paths:
+            - /go/pkg/mod
+          key: offen-kms-{{ checksum "go.mod" }}
+      - run:
+          name: Generate one-off key file
+          command: make bootstrap
+      - run:
+          name: Run tests
+          command: make test-ci
+
   server:
     docker:
       - image: circleci/golang:1.12
@@ -122,6 +145,7 @@ workflows:
   build_and_test:
     jobs:
       - server
+      - kms
       - vault
       - script
       - auditorium

docker-compose.yml

@@ -1,4 +1,21 @@
-server:
+version: '3'
+
+services:
+  kms:
+    image: golang:1.12
+    working_dir: /kms
+    volumes:
+      - ./kms:/kms
+      - ./local.offen.dev.pem:/kms/local.offen.dev.pem
+      - ./local.offen.dev-key.pem:/kms/local.offen.dev-key.pem
+      - $GOPATH/pkg/mod:/go/pkg/mod
+    environment:
+      - GOPATH=/go
+    ports:
+      - 8081:8081
+    command: go run cmd/kms/main.go -port 8081
+
+  server:
     image: golang:1.12
     working_dir: /server
     volumes:
@@ -9,18 +26,21 @@ server:
     environment:
       - GOPATH=/go
       - POSTGRES_CONNECTION_STRING=postgres://postgres:develop@database:5432/postgres?sslmode=disable
+      - KMS_ENCRYPTION_ENDPOINT=http://kms:8081/encrypt
     ports:
       - 8080:8080
-  command: go run cmd/server/main.go -origin https://local.offen.dev:9977 -conn postgres://postgres:develop@database:5432/postgres?sslmode=disable -key local.offen.dev-key.pem -cert local.offen.dev.pem
+    command: go run cmd/server/main.go -origin https://local.offen.dev:9977 -conn postgres://postgres:develop@database:5432/postgres?sslmode=disable -key local.offen.dev-key.pem -cert local.offen.dev.pem -level debug
     links:
       - database
+    depends_on:
+      - kms
 
-database:
+  database:
     image: postgres:11.2
     environment:
       - POSTGRES_PASSWORD=develop
 
-vault:
+  vault:
     image: timbru31/node-chrome:slim
     working_dir: /offen/vault
     volumes:
@@ -34,7 +54,7 @@ vault:
       - SERVER_HOST=https://local.offen.dev:8080
       - AUDITORIUM_HOST=https://local.offen.dev:9955
 
-script:
+  script:
     image: timbru31/node-chrome:slim
     working_dir: /offen/script
     volumes:
@@ -47,7 +67,7 @@ script:
     environment:
       - VAULT_HOST=https://local.offen.dev:9977
 
-auditorium:
+  auditorium:
     image: timbru31/node-chrome:slim
     working_dir: /offen/auditorium
     volumes: