Skip to content

chore: update Blinklabs/Kupo endpoints #39

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
verbotenj merged 4 commits into from
May 18, 2026
Merged

chore: update Blinklabs/Kupo endpoints #39

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
455b8a3
chore: update Blinklabs/Kupo endpoints
verbotenj May 3, 2026
23b9888
chore: Add demeter URLs (#41)
gonzalezzfelipe May 11, 2026
58d94fb
feat: update code and terraform state to match current Cloudflare/Gra…
verbotenj May 16, 2026
8afafc7
feat: remove CNODE hosts entries from certificate
verbotenj May 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
319 changes: 44 additions & 275 deletions cloudflare.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,23 +20,15 @@ locals {
demeter_providers = [
{
name = "blinklabs-us"
blockfrost = {
enabled = true
port = 3001
health_check_port = 3001
networks = {
cardano_mainnet = "preview.dolos.blinklabs.cloud"
cardano_preprod = "preview.dolos.blinklabs.cloud"
cardano_preview = "preview.dolos.blinklabs.cloud"
}
blockfrost_m1 = {
enabled = true
address = "demeter.blinklabs.cloud"
port = 3001
}
kupo = {
kupo_m1 = {
enabled = true
networks = {
cardano_mainnet = "kupo.blinklabs.cloud"
cardano_preprod = "preprod.kupo.blinklabs.cloud"
cardano_preview = "preview.kupo.blinklabs.cloud"
}
address = "demeter.blinklabs.cloud"
port = 4442
}
ogmios = {
enabled = true
Expand All @@ -63,23 +55,15 @@ locals {
},
{
name = "txpipe-m2"
blockfrost = {
enabled = false
port = 0
health_check_port = 0
networks = {
cardano_mainnet = ""
cardano_preprod = ""
cardano_preview = ""
}
blockfrost_m1 = {
enabled = true
address = "all.blockfrost-m1.demeter.run"
port = 443
}
kupo = {
kupo_m1 = {
enabled = true
networks = {
cardano_mainnet = "mainnet-v2.kupo-m1.demeter.run"
cardano_preprod = "preprod-v2.kupo-m1.demeter.run"
cardano_preview = "preview-v2.kupo-m1.demeter.run"
}
address = "all.kupo-m1.demeter.run"
port = 443
}
ogmios = {
enabled = true
Expand Down Expand Up @@ -169,141 +153,42 @@ resource "cloudflare_certificate_pack" "this" {
}

# Kupo
resource "cloudflare_load_balancer_pool" "kupo_preview" {
name = "KupoPreview"

account_id = var.cloudflare_account_id
monitor = cloudflare_load_balancer_monitor.kupo_preview_monitor.id

origins = [
for p in local.demeter_providers : {
name = p.name
address = p.kupo.networks.cardano_preview != "" ? p.kupo.networks.cardano_preview : "${p.name}.${var.cloudflare_zone_name}"
} if p.kupo.enabled
]
}

resource "cloudflare_load_balancer" "kupo_preview" {
zone_id = var.cloudflare_zone_id
name = "cardano-preview-v2.kupo-m1.${var.cloudflare_zone_name}"
default_pools = [cloudflare_load_balancer_pool.kupo_preview.id]
fallback_pool = cloudflare_load_balancer_pool.kupo_preview.id
proxied = true
steering_policy = "off"
}

resource "cloudflare_load_balancer" "kupo_preview_splat" {
zone_id = var.cloudflare_zone_id
name = "*.cardano-preview-v2.kupo-m1.${var.cloudflare_zone_name}"
default_pools = [cloudflare_load_balancer_pool.kupo_preview.id]
fallback_pool = cloudflare_load_balancer_pool.kupo_preview.id
proxied = true
steering_policy = "off"
}

resource "cloudflare_load_balancer_monitor" "kupo_preview_monitor" {
account_id = var.cloudflare_account_id
type = "https"
description = "Health check for KupoPreview"
path = "/dmtr_health"
interval = 60
timeout = 5
retries = 2
method = "GET"
expected_codes = "200"
allow_insecure = true
}

resource "cloudflare_load_balancer_pool" "kupo_preprod" {
name = "KupoPreprod"

account_id = var.cloudflare_account_id
monitor = cloudflare_load_balancer_monitor.kupo_preprod_monitor.id

origins = [
for p in local.demeter_providers : {
name = p.name
address = p.kupo.networks.cardano_preprod != "" ? p.kupo.networks.cardano_preprod : "${p.name}.${var.cloudflare_zone_name}"
} if p.kupo.enabled
]
}

resource "cloudflare_load_balancer" "kupo_preprod" {
zone_id = var.cloudflare_zone_id
name = "cardano-preprod-v2.kupo-m1.${var.cloudflare_zone_name}"
default_pools = [cloudflare_load_balancer_pool.kupo_preprod.id]
fallback_pool = cloudflare_load_balancer_pool.kupo_preprod.id
proxied = true
steering_policy = "off"
}

resource "cloudflare_load_balancer" "kupo_preprod_splat" {
zone_id = var.cloudflare_zone_id
name = "*.cardano-preprod-v2.kupo-m1.${var.cloudflare_zone_name}"
default_pools = [cloudflare_load_balancer_pool.kupo_preprod.id]
fallback_pool = cloudflare_load_balancer_pool.kupo_preprod.id
proxied = true
steering_policy = "off"
}

resource "cloudflare_load_balancer_monitor" "kupo_preprod_monitor" {
account_id = var.cloudflare_account_id
type = "https"
description = "Health check for KupoPreprod"
path = "/dmtr_health"
resource "cloudflare_load_balancer_monitor" "kupo_m1_monitor" {
account_id = var.cloudflare_account_id
type = "https"
description = "Health Check for Kupo"
path = "/dmtr_health"
# port omitted so each origin is health-checked on its own port (blinklabs-us: 4442, txpipe-m2: 443)
interval = 60
timeout = 5
retries = 2
method = "GET"
expected_codes = "200"
allow_insecure = true
}

resource "cloudflare_load_balancer_pool" "kupo_mainnet" {
name = "KupoMainnet"

resource "cloudflare_load_balancer_pool" "kupo_m1" {
name = "Kupo"
account_id = var.cloudflare_account_id
monitor = cloudflare_load_balancer_monitor.kupo_mainnet_monitor.id
monitor = cloudflare_load_balancer_monitor.kupo_m1_monitor.id

origins = [
for p in local.demeter_providers : {
name = p.name
address = p.kupo.networks.cardano_mainnet != "" ? p.kupo.networks.cardano_mainnet : "${p.name}.${var.cloudflare_zone_name}"
} if p.kupo.enabled
address = p.kupo_m1.address != "" ? p.kupo_m1.address : "${p.name}.${var.cloudflare_zone_name}"
port = p.kupo_m1.port != 0 ? p.kupo_m1.port : null
} if p.kupo_m1.enabled
]
}

resource "cloudflare_load_balancer" "kupo_mainnet" {
zone_id = var.cloudflare_zone_id
name = "cardano-mainnet-v2.kupo-m1.${var.cloudflare_zone_name}"
default_pools = [cloudflare_load_balancer_pool.kupo_mainnet.id]
fallback_pool = cloudflare_load_balancer_pool.kupo_mainnet.id
proxied = true
steering_policy = "off"
}

resource "cloudflare_load_balancer" "kupo_mainnet_splat" {
resource "cloudflare_load_balancer" "kupo_m1_splat" {
zone_id = var.cloudflare_zone_id
name = "*.cardano-mainnet-v2.kupo-m1.${var.cloudflare_zone_name}"
default_pools = [cloudflare_load_balancer_pool.kupo_mainnet.id]
fallback_pool = cloudflare_load_balancer_pool.kupo_mainnet.id
name = "*.kupo-m1.${var.cloudflare_zone_name}"
default_pools = [cloudflare_load_balancer_pool.kupo_m1.id]
fallback_pool = cloudflare_load_balancer_pool.kupo_m1.id
proxied = true
steering_policy = "off"
}

resource "cloudflare_load_balancer_monitor" "kupo_mainnet_monitor" {
account_id = var.cloudflare_account_id
type = "https"
description = "Health check for KupoMainnet"
path = "/dmtr_health"
interval = 60
timeout = 5
retries = 2
method = "GET"
expected_codes = "200"
allow_insecure = true
}

# Ogmios
resource "cloudflare_load_balancer_pool" "ogmios_preview" {
name = "OgmiosPreview"
Expand Down Expand Up @@ -477,156 +362,40 @@ resource "cloudflare_load_balancer" "tx_submit_api_m1" {
}

# Blockfrost
resource "cloudflare_load_balancer_pool" "blockfrost_preview" {
name = "BlockfrostPreview"

account_id = var.cloudflare_account_id
monitor = cloudflare_load_balancer_monitor.blockfrost_preview_monitor.id

origins = [
for p in local.demeter_providers : {
name = p.name
address = p.blockfrost.networks.cardano_preview != "" ? p.blockfrost.networks.cardano_preview : "${p.name}.${var.cloudflare_zone_name}"
port = p.blockfrost.port != 0 ? p.blockfrost.port : null
} if p.blockfrost.enabled
]
}

resource "cloudflare_load_balancer" "blockfrost_preview" {
zone_id = var.cloudflare_zone_id
name = "cardano-preview.blockfrost-m1.${var.cloudflare_zone_name}"
default_pools = [cloudflare_load_balancer_pool.blockfrost_preview.id]
fallback_pool = cloudflare_load_balancer_pool.blockfrost_preview.id
proxied = true
steering_policy = "off"
}

resource "cloudflare_load_balancer" "blockfrost_preview_splat" {
zone_id = var.cloudflare_zone_id
name = "*.cardano-preview.blockfrost-m1.${var.cloudflare_zone_name}"
default_pools = [cloudflare_load_balancer_pool.blockfrost_preview.id]
fallback_pool = cloudflare_load_balancer_pool.blockfrost_preview.id
proxied = true
steering_policy = "off"
}

resource "cloudflare_load_balancer_monitor" "blockfrost_preview_monitor" {
account_id = var.cloudflare_account_id
type = "https"
description = "Health check for BlockfrostPreview"
path = "/dmtr_health"
port = try(([for p in local.demeter_providers : p.blockfrost.health_check_port if p.blockfrost.enabled && p.blockfrost.health_check_port != 0])[0], null)
resource "cloudflare_load_balancer_monitor" "blockfrost_m1_monitor" {
account_id = var.cloudflare_account_id
type = "https"
description = "Health check for BlockfrostM1"
path = "/dmtr_health"
# port omitted so each origin is health-checked on its own port (blinklabs-us: 3001, txpipe-m2: 443)
interval = 60
timeout = 5
retries = 2
method = "GET"
expected_codes = "200"
allow_insecure = true
}

resource "cloudflare_load_balancer_pool" "blockfrost_preprod" {
name = "BlockfrostPreprod"

resource "cloudflare_load_balancer_pool" "blockfrost_m1" {
name = "Blockfrost"
account_id = var.cloudflare_account_id
monitor = cloudflare_load_balancer_monitor.blockfrost_preprod_monitor.id
monitor = cloudflare_load_balancer_monitor.blockfrost_m1_monitor.id

origins = [
for p in local.demeter_providers : {
name = p.name
address = p.blockfrost.networks.cardano_preprod != "" ? p.blockfrost.networks.cardano_preprod : "${p.name}.${var.cloudflare_zone_name}"
port = p.blockfrost.port != 0 ? p.blockfrost.port : null
} if p.blockfrost.enabled
address = p.blockfrost_m1.address != "" ? p.blockfrost_m1.address : "${p.name}.${var.cloudflare_zone_name}"
port = p.blockfrost_m1.port != 0 ? p.blockfrost_m1.port : null
} if p.blockfrost_m1.enabled
]
}

resource "cloudflare_load_balancer" "blockfrost_preprod" {
zone_id = var.cloudflare_zone_id
name = "cardano-preprod.blockfrost-m1.${var.cloudflare_zone_name}"
default_pools = [cloudflare_load_balancer_pool.blockfrost_preprod.id]
fallback_pool = cloudflare_load_balancer_pool.blockfrost_preprod.id
proxied = true
steering_policy = "off"
}

resource "cloudflare_load_balancer" "blockfrost_preprod_splat" {
zone_id = var.cloudflare_zone_id
name = "*.cardano-preprod.blockfrost-m1.${var.cloudflare_zone_name}"
default_pools = [cloudflare_load_balancer_pool.blockfrost_preprod.id]
fallback_pool = cloudflare_load_balancer_pool.blockfrost_preprod.id
proxied = true
steering_policy = "off"
}

resource "cloudflare_load_balancer_monitor" "blockfrost_preprod_monitor" {
account_id = var.cloudflare_account_id
type = "https"
description = "Health check for BlockfrostPreprod"
path = "/dmtr_health"
port = try(([for p in local.demeter_providers : p.blockfrost.health_check_port if p.blockfrost.enabled && p.blockfrost.health_check_port != 0])[0], null)
interval = 60
timeout = 5
retries = 2
method = "GET"
expected_codes = "200"
allow_insecure = true
}

resource "cloudflare_load_balancer_pool" "blockfrost_mainnet" {
name = "BlockfrostMainnet"

account_id = var.cloudflare_account_id
monitor = cloudflare_load_balancer_monitor.blockfrost_mainnet_monitor.id

origins = [
for p in local.demeter_providers : {
name = p.name
address = p.blockfrost.networks.cardano_mainnet != "" ? p.blockfrost.networks.cardano_mainnet : "${p.name}.${var.cloudflare_zone_name}"
port = p.blockfrost.port != 0 ? p.blockfrost.port : null
} if p.blockfrost.enabled
]
}

resource "cloudflare_load_balancer" "blockfrost_mainnet" {
zone_id = var.cloudflare_zone_id
name = "cardano-mainnet.blockfrost-m1.${var.cloudflare_zone_name}"
default_pools = [cloudflare_load_balancer_pool.blockfrost_mainnet.id]
fallback_pool = cloudflare_load_balancer_pool.blockfrost_mainnet.id
proxied = true
steering_policy = "off"
}

resource "cloudflare_load_balancer" "blockfrost_mainnet_splat" {
zone_id = var.cloudflare_zone_id
name = "*.cardano-mainnet.blockfrost-m1.${var.cloudflare_zone_name}"
default_pools = [cloudflare_load_balancer_pool.blockfrost_mainnet.id]
fallback_pool = cloudflare_load_balancer_pool.blockfrost_mainnet.id
proxied = true
steering_policy = "off"
}

resource "cloudflare_load_balancer" "blockfrost_m1_splat" {
zone_id = var.cloudflare_zone_id
name = "*.blockfrost-m1.${var.cloudflare_zone_name}"
default_pools = [cloudflare_load_balancer_pool.blockfrost_preview.id]
fallback_pool = cloudflare_load_balancer_pool.blockfrost_preview.id
default_pools = [cloudflare_load_balancer_pool.blockfrost_m1.id]
fallback_pool = cloudflare_load_balancer_pool.blockfrost_m1.id
proxied = true
steering_policy = "off"

rules = []
}

resource "cloudflare_load_balancer_monitor" "blockfrost_mainnet_monitor" {
account_id = var.cloudflare_account_id
type = "https"
description = "Health check for BlockfrostMainnet"
path = "/dmtr_health"
port = try(([for p in local.demeter_providers : p.blockfrost.health_check_port if p.blockfrost.enabled && p.blockfrost.health_check_port != 0])[0], null)
interval = 60
timeout = 5
retries = 2
method = "GET"
expected_codes = "200"
allow_insecure = true
}

# UTxORPC
Expand Down
Loading
Loading