Alireza HassaniandCursor
e942348b1d
ZarinPal rejects api.meshkee.com when the terminal is registered to the store apex; nginx now proxies /meshkee/payments/{gateway}/callback to a host-scoped API route.
Co-authored-by: Cursor <cursoragent@cursor.com>
69 lines
1.7 KiB
Bash
Executable File
69 lines
1.7 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Insert / update Meshkee payment-callback proxy locations on a storefront nginx site.
|
|
# Bank gateways (ZarinPal/Mellat) hit https://{host}/meshkee/payments/{gateway}/callback
|
|
# which proxies to the API tenant callback route.
|
|
set -euo pipefail
|
|
|
|
HOST="${1:-}"
|
|
API_HOST="${MESHKEE_API_HOST:-api.meshkee.com}"
|
|
|
|
if [[ -z "$HOST" ]]; then
|
|
echo "usage: patch-nginx-pay.sh <host>" >&2
|
|
exit 1
|
|
fi
|
|
|
|
NGINX_AVAILABLE="/etc/nginx/sites-available/$HOST"
|
|
|
|
if [[ ! -f "$NGINX_AVAILABLE" ]]; then
|
|
echo "missing nginx site for $HOST" >&2
|
|
exit 1
|
|
fi
|
|
|
|
proxy_location() {
|
|
local gateway="$1"
|
|
local path="/meshkee/payments/${gateway}/callback"
|
|
cat <<NGINX
|
|
location = ${path} {
|
|
proxy_pass https://${API_HOST}/api/v1/tenants/${HOST}/payments/${gateway}/callback;
|
|
proxy_set_header Host ${API_HOST};
|
|
proxy_ssl_server_name on;
|
|
proxy_set_header X-Real-IP \$remote_addr;
|
|
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto \$scheme;
|
|
proxy_pass_request_body on;
|
|
proxy_pass_request_headers on;
|
|
}
|
|
|
|
NGINX
|
|
}
|
|
|
|
ensure_location() {
|
|
local gateway="$1"
|
|
local path="/meshkee/payments/${gateway}/callback"
|
|
if grep -qF "location = ${path}" "$NGINX_AVAILABLE"; then
|
|
echo "already present: ${path}"
|
|
return 0
|
|
fi
|
|
|
|
local block
|
|
block="$(proxy_location "$gateway")"
|
|
local tmp
|
|
tmp="$(mktemp)"
|
|
awk -v block="$block" '
|
|
/location \/ \{/ && !done {
|
|
print block
|
|
done = 1
|
|
}
|
|
{ print }
|
|
' "$NGINX_AVAILABLE" >"$tmp"
|
|
mv "$tmp" "$NGINX_AVAILABLE"
|
|
echo "added: ${path}"
|
|
}
|
|
|
|
ensure_location zarinpal
|
|
ensure_location mellat
|
|
|
|
nginx -t
|
|
systemctl reload nginx
|
|
echo "patched nginx payment callback locations for $HOST"
|