Strip upstream integrations, vendor Docker deploy, rebrand to Zipherscan by ronkq · Pull Request #6 · QED-it/zipherscan

ronkq · 2026-09-17T17:35:52Z

Remove upstream analytics, donations, Telegram signals, and CDN calls
Drop Redis; vendor the deployment Dockerfiles instead
Clean up remaining signals references left over from zsa1
Document running locally against the QED-it ZSA1_1 node
Rename repo references from Cipherscan to Zipherscan; add Zipherscan section to README

PaulLaux

Added some comments. Plus:

Please cleanup the main readme.md - we don't need to preserve nothing that is not relevant to ZSA:

Some things need to change to Zipherscan. some things need to stay Cipherscan. Some things need to go away completely. Keep only the absolute essentials.

Also, We don't need two sets of dockerfile and two sets of docker-compose. Only properly-named files with what we need.

Also, npm run dev should get info from https://rpc.test-zsa.org not from public zebra node.

Did not tested api localy. will be waiting for the docs/run-locally.md file.

PaulLaux · 2026-09-22T18:36:44Z

+
+**What differs from upstream**
+
+- Targets QED-it's ZSA1_1 testnet node (`https://rpc.test-zsa.org`) rather than the public Zcash networks. See [docs/run-locally.md](docs/run-locally.md) for running it and for connecting to that node or your own ZSA zebrad.


I don't see run-locally.md

Sorry, was missed because of .gitignore
Added now

PaulLaux · 2026-09-22T18:44:48Z

+        title: 'ZipherScan Testnet - Zcash Testnet Explorer for TAZ',
+        description: 'Explore the Zcash testnet with ZipherScan. Search TAZ blocks, transactions, and addresses, monitor pending transactions, and inspect testnet network activity.',


".. For ZSA" + adjust description

PaulLaux · 2026-09-22T18:45:30Z

 } from './solar';

-const WORLD_TOPO_URL = 'https://cdn.jsdelivr.net/npm/world-atlas@2/land-110m.json';
+const WORLD_TOPO_URL = '/land-110m.json';


PaulLaux · 2026-09-22T18:46:39Z

+**What differs from upstream**
+
+- Targets QED-it's ZSA1_1 testnet node (`https://rpc.test-zsa.org`) rather than the public Zcash networks. See [docs/run-locally.md](docs/run-locally.md) for running it and for connecting to that node or your own ZSA zebrad.
+- Upstream analytics, donation UI, Telegram signals and third-party CDN calls are removed. Redis is optional.


I see redis removed completely from package.json. Is it stil optional?

Correct, removed completly and not optional

PaulLaux · 2026-09-22T19:10:47Z

+  lightwalletd:
+    profiles: [local-node]


Do we need lightwalletd or not?

No, removed

PaulLaux · 2026-09-22T19:14:08Z

+`NEXT_PUBLIC_*` values are compiled into the browser bundle, so the API URL is a
+**build arg** — setting it at runtime in compose has no effect. Without it the
+bundle falls back to `DEFAULT_API_URLS` in `lib/api-config.ts`, which points at
+upstream's `api.testnet.cipherscan.app`.


The default should be test-zsa.org. Nothing should default to regular non zsa version.

PaulLaux · 2026-09-22T19:15:11Z

+## api
+
+Build from the **repository root**, not `server/api` — the Dockerfile copies
+`server/lib/` and `server/signals/`, which are outside that directory. The


You removed server/signals/ from this branch

Updated the line, fixed

dev-zipherscan-indexer is built from Kenbak/cipherscan-rust, not from this repo, and tagged zsa-<commit>. Add it to the image table and describe what the image contains, since the Dockerfile is not committed anywhere.

ronkq · 2026-09-23T11:59:42Z

Added some comments. Plus:

Please cleanup the main readme.md - we don't need to preserve nothing that is not relevant to ZSA:

Some things need to change to Zipherscan. some things need to stay Cipherscan. Some things need to go away completely. Keep only the absolute essentials.

Also, We don't need two sets of dockerfile and two sets of docker-compose. Only properly-named files with what we need.

Also, npm run dev should get info from https://rpc.test-zsa.org not from public zebra node.

Did not tested api localy. will be waiting for the docs/run-locally.md file.

Rewrote and kept the essentials of the readme.md
Removed the other ones, left one compose and dockerfile
Updated the npm source
And added the run-locally.md file

The API rejected https://cipherscan.test-zsa.org in both its CORS and WebSocket allowlists, so browser POSTs through the /api proxy got a 500 and the WebSocket a 403. The WebSocket also connected to "/", which Next serves as a page and closes on upgrade (502); /api/ws goes through the proxy. CORS_ORIGINS now extends both allowlists, and ECR.md builds web with the site origin as NEXT_PUBLIC_API_URL, matching the live image.

PaulLaux

New issues:

The live site's own origin is blocked by the API:
server/api/server.js:256 (CORS allowlist) and server/api/server.js:309 (WebSocket allowlist).
the PR moves testnet to https://cipherscan.test-zsa.org for the site and https://cipherscan-api.test-zsa.org for the API. Both allowlists still name only upstream's hosts. We get 500 (CORS rejection). All live pages are currentl dead. See #7 for a fix - Merge/adopt.

This one is critical. please rebuild with the updated docker build config and redeploy both api and web after this fix.

Also, removing Redis breaks the API test suite in CI: server/api/test/list-cache.redis.test.js:26 still does require('redis'). Delete the test and remove the Redis service and TEST_REDIS_URL from ci.yml. Then point the CI triggers at zsa1.

Think that's the minimum

Allow the ZSA site origin and route the WebSocket through /api

ronkq · 2026-09-24T10:43:58Z

New issues:

The live site's own origin is blocked by the API: server/api/server.js:256 (CORS allowlist) and server/api/server.js:309 (WebSocket allowlist). the PR moves testnet to https://cipherscan.test-zsa.org for the site and https://cipherscan-api.test-zsa.org for the API. Both allowlists still name only upstream's hosts. We get 500 (CORS rejection). All live pages are currentl dead. See #7 for a fix - Merge/adopt.

This one is critical. please rebuild with the updated docker build config and redeploy both api and web after this fix.

Also, removing Redis breaks the API test suite in CI: server/api/test/list-cache.redis.test.js:26 still does require('redis'). Delete the test and remove the Redis service and TEST_REDIS_URL from ci.yml. Then point the CI triggers at zsa1.

Think that's the minimum

Merged #7, rebuilt and redeployed api and web (hash 669a97b), and the live site works.
Removed the Redis test plus the CI service and TEST_REDIS_URL, and pointed CI at zsa1.
CI passes when run manually and I've enabled the Github actions (it's a fork) for it to also run on push/PR.

PaulLaux

looks better, Please update pr description and fix ci before merge.

ronkq added 7 commits September 14, 2026 15:16

Remove upstream analytics, donations, Telegram signals and CDN calls

725b47a

Drop Redis and vendor the deployment Dockerfiles

fa92e57

Fix stale signals reference in the api Dockerfile comment

eb31d5f

Drop remaining signals references added on zsa1

bb439cb

Document running locally against the QED-it ZSA1_1 node

acc3402

Rename repo references to Zipherscan

992d690

Add Zipherscan section on top of the upstream README

7c92445

ronkq requested a review from PaulLaux September 17, 2026 17:35

ronkq self-assigned this Sep 17, 2026

Rebrand the visible title, nav and footer to ZipherScan

f99bc8a

ronkq changed the base branch from main to zsa1 September 22, 2026 09:10

ronkq added 2 commits September 22, 2026 13:12

Document building and pushing the ZSA testnet images to ECR

a55f582

Proxy /api to the API container so the browser uses one origin

b62dd0e

PaulLaux reviewed Sep 22, 2026

View reviewed changes

ronkq force-pushed the zipherscan-init branch from f977c6c to b62dd0e Compare September 23, 2026 08:04

ronkq added 2 commits September 23, 2026 10:48

Document the indexer image in ECR.md

4231c2d

dev-zipherscan-indexer is built from Kenbak/cipherscan-rust, not from this repo, and tagged zsa-<commit>. Add it to the image table and describe what the image contains, since the Dockerfile is not committed anywhere.

Removed redis, not optional

a484bd2

QED-it deleted a comment from seniakalma Sep 23, 2026

ronkq added 9 commits September 23, 2026 11:22

Say ZSA in testnet title and description

a7cd1a9

Update mentions

7acf608

Default testnet to test-zsa.org

3754d84

Remove lightwalletd

6bd7a93

Drop Node <23 cap

9d3847a

Regenerate lockfiles

96192eb

Single compose and Dockerfile set

1fe5b5d

Default API RPC to rpc.test-zsa.org

4ed7dfc

Trim README to ZSA essentials

46732ea

ronkq added 2 commits September 23, 2026 14:01

Add docs/run-locally.md

1ef11c8

Grant app role access to schema tables

45c1044

PaulLaux reviewed Sep 23, 2026

View reviewed changes

ronkq added 6 commits September 24, 2026 11:35

Merge pull request #7 from QED-it/allow-zsa-site-origin

00a4bb9

Allow the ZSA site origin and route the WebSocket through /api

Remove Redis test and CI service

900d5e7

Point CI triggers at zsa1

669a97b

Expect the /api proxy rewrite in the sitemap test

cc64c24

Remove signals leftovers

687548f

Remove lightwalletd scan

953849e

ronkq closed this Sep 24, 2026

ronkq reopened this Sep 24, 2026

Remove orphaned useWasmWorker hook

7994868

ronkq mentioned this pull request Sep 24, 2026

Fix npm advisories and pin dependencies by hash #8

Open

PaulLaux previously approved these changes Sep 24, 2026

View reviewed changes

Bump next, sharp, postcss, js-yaml, fflate for security advisories

870bdb1

ronkq dismissed PaulLaux’s stale review via 870bdb1 September 24, 2026 17:13

Wait for Postgres over TCP in the API smoke test

640aca9

ronkq force-pushed the zipherscan-init branch from 78b50d4 to 640aca9 Compare September 25, 2026 03:58

PaulLaux approved these changes Sep 25, 2026

View reviewed changes

ronkq merged commit daeb021 into zsa1 Sep 25, 2026
18 checks passed


		What differs from upstream

		- Targets QED-it's ZSA1_1 testnet node (`https://rpc.test-zsa.org`) rather than the public Zcash networks. See [docs/run-locally.md](docs/run-locally.md) for running it and for connecting to that node or your own ZSA zebrad.

		title: 'ZipherScan Testnet - Zcash Testnet Explorer for TAZ',
		description: 'Explore the Zcash testnet with ZipherScan. Search TAZ blocks, transactions, and addresses, monitor pending transactions, and inspect testnet network activity.',

Conversation

ronkq commented Sep 17, 2026

Uh oh!

PaulLaux left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

ronkq commented Sep 23, 2026

Uh oh!

PaulLaux left a comment

Choose a reason for hiding this comment

Uh oh!

ronkq commented Sep 24, 2026

Uh oh!

PaulLaux left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants