debian package fixes

debian/etc/taler-exchange-db.conf

@@ -0,0 +1,11 @@
+# This file should contain the access control information to talk to
+# the exchange database.
+
+[exchangedb-postgres]
+
+# Typically, there should only be a single line here, of the form:
+
+# CONFIG=postgres:///DATABASE
+
+# The details of the URI depend on where the database lives and how
+# access control was configured.

debian/etc/taler-exchange.conf

@@ -1,3 +1,9 @@
+# First line should be: "INLINE@ /etc/taler-exchange-db.conf"
+@INLINE@ /etc/taler-exchange-db.conf
+# Do not edit this file using 'taler-config', otherwise the line
+# above will be lost!
+
+
 [PATHS]
 
 # Move runtime data "tmp" directory to /var/lib/taler-exchange/
@@ -5,6 +11,18 @@
 TALER_RUNTIME_DIR = /var/lib/taler-exchange/tmp/
 
 [exchange]
+# Debian package is configured to use a reverse proxy with a UNIX
+# domain socket. See nginx/apache configuration files.
 SERVE = UNIX
 UNIXPATH = /var/lib/taler-exchange/exchange.sock
+
+# Only supported database is Postgres right now.
 DATABASE = postgres
+
+[taler]
+# Here you need to set the currency of your exchange:
+# CURRENCY = KUDOS
+
+[coin_FOO]
+# You must specify the various denominations to be offered by your exchange
+# in sections called "coin_".

debian/etc/taler-wire.conf

@@ -0,0 +1,10 @@
+# First line should be: "INLINE@ /etc/taler-exchange-db.conf"
+@INLINE@ /etc/taler-exchange-db.conf
+# Do not edit this file using 'taler-config', otherwise the line
+# above will be lost!
+
+
+# This file should contain the wire account access information which is needed
+# by the Taler exchange to talk to LibEuFin to interact with the bank.
+# The file SHOULD only be readable for the "taler-exchange-wire" user,
+# as other users/services have no business talking to the bank.

debian/taler-exchange.postinst

@@ -211,6 +211,13 @@ EOF
         chmod 770 /var/lib/taler-exchange/tmp
         chmod +s /var/lib/taler-exchange/tmp
 
+        chown ${_WIREUSERNAME}:root /etc/taler-wire.conf
+        chmod 460 /etc/taler-wire.conf
+        chown root:${_DBGROUPNAME} /etc/taler-exchange-db.conf
+        chmod 640 /etc/taler-exchange-db.conf
+        chown ${_EUSERNAME}:${_GROUPNAME} /etc/taler-exchange.conf
+        chmod 460 /etc/taler-wire.conf
+
         systemctl daemon-reload
 
         echo "done."