Refactor code and enhance maintainability.

Author: abrar2030

code/backend/monitoring/prometheus.yml

@@ -2,7 +2,7 @@ global:
   scrape_interval: 15s
   evaluation_interval: 15s
   external_labels:
-    monitor: 'chainfinity'
+    monitor: "chainfinity"
 
 alerting:
   alertmanagers:
@@ -12,22 +12,22 @@ alerting:
 rule_files: []
 
 scrape_configs:
-  - job_name: 'prometheus'
+  - job_name: "prometheus"
     static_configs:
-      - targets: ['localhost:9090']
+      - targets: ["localhost:9090"]
 
-  - job_name: 'chainfinity_api'
+  - job_name: "chainfinity_api"
     static_configs:
-      - targets: ['api:8001']
-    metrics_path: '/metrics'
+      - targets: ["api:8001"]
+    metrics_path: "/metrics"
     scrape_interval: 10s
 
-  - job_name: 'postgres'
+  - job_name: "postgres"
     static_configs:
-      - targets: ['postgres:5432']
+      - targets: ["postgres:5432"]
     scrape_interval: 30s
 
-  - job_name: 'redis'
+  - job_name: "redis"
     static_configs:
-      - targets: ['redis:6379']
+      - targets: ["redis:6379"]
     scrape_interval: 30s

infrastructure/.env.example

@@ -0,0 +1,23 @@
+# ChainFinity Environment Variables
+# Copy to .env and fill in values - NEVER commit .env to version control
+
+# Database
+POSTGRES_DB=chainfinity
+POSTGRES_USER=chainfinity
+POSTGRES_PASSWORD=CHANGE_ME_STRONG_PASSWORD_HERE
+
+# Redis
+REDIS_PASSWORD=CHANGE_ME_STRONG_REDIS_PASSWORD
+
+# Application Secrets
+JWT_SECRET=CHANGE_ME_MIN_32_CHARS_RANDOM_STRING
+ENCRYPTION_KEY=CHANGE_ME_EXACTLY_32_CHARS_KEY__
+
+# Grafana
+GRAFANA_ADMIN_USER=admin
+GRAFANA_ADMIN_PASSWORD=CHANGE_ME_STRONG_GRAFANA_PASSWORD
+
+# AWS (for production)
+# AWS_ACCESS_KEY_ID=
+# AWS_SECRET_ACCESS_KEY=
+# AWS_DEFAULT_REGION=us-west-2

infrastructure/.gitignore

@@ -1,191 +1,58 @@
-# ===============================================================
-# ChainFinity Infrastructure .gitignore
-# ===============================================================
+# Environment & Secrets - NEVER COMMIT
+.env
+.env.*
+!.env.example
+*.pem
+*.key
+*.crt
+*.p12
+*.pfx
+*secret*
+*password*
+*credentials*
+unseal-keys*
+root-token*
 
-# =========================
 # Terraform
-# =========================
-
-# Local .terraform directories
-**/.terraform/*
-**/.terraform.lock.hcl
-
-# .tfstate files
 *.tfstate
 *.tfstate.*
-
-# Crash log files
-crash.log
-crash.*.log
-
-# Variable files that may contain secrets
+*.tfstate.backup
+**/.terraform/
+.terraform.lock.hcl
 terraform.tfvars
-*.auto.tfvars
-*.auto.tfvars.json
-
-# Plans
-*.tfplan
-tfplan
-
-# Override files
-override.tf
-override.tf.json
-*_override.tf
-*_override.tf.json
-
-# CLI configuration files
-.terraformrc
-terraform.rc
-
-# =========================
-# Ansible
-# =========================
-
-# Inventory files with real IPs/hostnames
-ansible/inventory/hosts.yml
-ansible/inventory/*.yml
-!ansible/inventory/hosts.example.yml
-
-# Vault files
-ansible/group_vars/*/vault.yml
-ansible/host_vars/*/vault.yml
-!**/*.example.yml
-
-# Ansible cache
-ansible/.ansible/
-ansible/**.retry
-ansible/**/*.retry
-
-# Ansible facts cache
-/tmp/ansible_facts/
-
-# =========================
-# Kubernetes
-# =========================
-
-# Real secrets (not examples)
-kubernetes/base/app-secrets.yaml
-kubernetes/*/secrets.yaml
-kubernetes/*/*-secrets.yaml
-!kubernetes/**/*.example.yaml
-
-# Kustomize build output
-kubernetes/build/
+!terraform.tfvars.example
+plan.out
+*.plan
+
+# Python
+__pycache__/
+*.py[cod]
+*.egg-info/
+.venv/
+venv/
+dist/
+build/
+
+# Node
+node_modules/
+.next/
+dist/
+build/
+*.log
 
-# =========================
-# General
-# =========================
+# OS
+.DS_Store
+Thumbs.db
 
 # IDE
 .vscode/
 .idea/
 *.swp
 *.swo
-*~
-
-# OS
-.DS_Store
-Thumbs.db
-
-# Logs
-*.log
-logs/
-
-# Temporary files
-tmp/
-temp/
-*.tmp
-
-# Backup files
-*.backup
-*.bak
-*~
-
-# Environment files
-.env
-.env.local
-.env.*.local
-
-# SSH Keys
-*.pem
-*.key
-id_rsa*
-!*.pub
-
-# Certificates
-*.crt
-*.cert
-*.ca-bundle
-!ca.example.crt
-
-# =========================
-# CI/CD
-# =========================
-
-# GitHub Actions
-.github/workflows/*.log
-
-# =========================
-# Monitoring/Logging
-# =========================
-
-# Prometheus data
-monitoring/prometheus/data/
-
-# Grafana data
-monitoring/grafana/data/
-
-# Elasticsearch data
-monitoring/elasticsearch/data/
-
-# =========================
-# Backup
-# =========================
-
-# Database dumps
-backup-recovery/database-backup/*.sql
-backup-recovery/database-backup/*.dump
-backup-recovery/**/*.gz
-backup-recovery/**/*.tar
-
-# Velero backups
-backup-recovery/kubernetes-backup/backups/
-
-# =========================
-# Security
-# =========================
-
-# AWS credentials
-.aws/
-credentials
-config
-
-# Vault tokens
-.vault-token
-
-# Private keys and certificates
-security/**/private.key
-security/**/*.pem
-security/**/*.p12
-security/**/*.pfx
-
-# =========================
-# Validation/Testing
-# =========================
-
-# Test output
-validation_logs/*.txt
-test-results/
-coverage/
-
-# Compliance reports
-compliance-reports/
-audit-reports/
 
-# =========================
-# Scripts
-# =========================
+# Docker
+.docker/
 
-# Script outputs
-*.output
-run_*.log
+# Vault
+vault-data/
+vault-logs/