Satoshi Qazi Muhammed 74336dff5c ci: deploy over a pinned, single-purpose key instead of root
deploy-vps reached subquery1 as root, through appleboy/ssh-action referenced
by tag, with a key whose comment (mamostehp@MamostePC) made it look like a
person's. It now uses plain ssh with SUBQUERY_DEPLOY_KEY, which the host pins
(authorized_keys restrict,command=) to ops/host/subquery-deploy-ssh: the
commit SHA is its only input. subquery-deploy, run through sudo, does what
the workflow's script did, with three changes:

- It deploys exactly the SHA CI was triggered for, and only a commit on main.
- The host's local edits to tracked files (the indexer manifests) are put
  back whether the deploy succeeds or fails. Before, a failed build exited
  before `stash pop` and left them stashed.
- Only tracked files are stashed. Stashing untracked ones too (.yarn/, which
  yarn install recreates) made every pop fail half-way; that is how 13 stash
  entries piled up on the host.

test-deploy.sh covers this against a scratch clone (red with the restore
trap removed); CI runs it with shellcheck. subquery1's host key is pinned.
The indexer endpoints themselves are unchanged. Actions pinned to SHAs; the
secret scanner's own AGPL licence is allowed in dependency review.
2026-10-09 06:55:06 +04:00

Pezkuwi SubQuery

SubQuery indexer for Pezkuwi blockchain - provides staking rewards, NominationPools, transfers and era validator data for PezWallet.

Projects

  • pezkuwi.yaml - Pezkuwi Relay Chain staking indexer
  • pezkuwi-assethub.yaml - Pezkuwi Asset Hub NominationPools and transfers indexer

Features

  • Staking rewards (Reward/Rewarded events)
  • Nomination Pool rewards (PaidOut events)
  • Slashing events (Slash/Slashed, PoolSlashed, UnbondingPoolSlashed)
  • Native transfers (balances.Transfer)
  • Asset transfers (assets.Transferred) - Asset Hub only
  • Era validator information (StakersElected/StakingElection)
  • Full transaction history (signed extrinsics)

Get Started

Install dependencies

yarn install

Build

yarn build

Local Development

sh local-runner.sh pezkuwi.yaml

Deploy to SubQuery Network

./node_modules/.bin/subql publish -f pezkuwi.yaml
./node_modules/.bin/subql publish -f pezkuwi-assethub.yaml

Endpoints

  • Pezkuwi Relay: wss://rpc.pezkuwichain.io
  • Pezkuwi Asset Hub: wss://asset-hub-rpc.pezkuwichain.io

License

Apache 2.0 - Based on Nova SubQuery implementation

S
Description
No description provided
Readme Apache-2.0
15 MiB
1 Watchers 0 Forks
Languages
TypeScript 49.7%
JavaScript 43.5%
Shell 6%
Dockerfile 0.8%