👷 Use sst secrets within the ponder.config, use prebuilt docker image…

… from

.github/workflows/deploy.yml

@@ -23,15 +23,43 @@ defaults:
     shell: bash
 
 jobs:
-  # Independent step, deploying all the tools infrastructure
-  deploy-indexer:
-    name: "🚀 Deploy Indexer"
-    uses: ./.github/workflows/deploy-submodule.yml
-    secrets: inherit
-    with:
-      # Need a custom ami image id since it's needing docker for the build process
-      #ami-image-id: ami-0e2a787a966f10c15
-      #instance-type: t4g.small
-      runner-label: "ubuntu-latest"
-      pr-sha: ${{ github.event.pull_request.head.sha }}
-      ref: ${{ github.ref }}
+  deploy:
+    runs-on: 'ubuntu-latest'
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.ref }}
+      - uses: oven-sh/setup-bun@v1
+
+      - name: "🔨 Install dependencies"
+        run: bun install --frozen-lockfile
+
+      - name: "👥 Configure AWS Credentials"
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: arn:aws:iam::262732185023:role/github-action-deploy-role
+          aws-region: eu-west-1
+          retry-max-attempts: 5
+
+      - name:  "👥 Login to Amazon ECR"
+        id: login-ecr
+        uses: aws-actions/amazon-ecr-login@v2
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: "🔨 Prebuild docker dependencies"
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          platforms: linux/arm64
+          push: true
+          tags: 262732185023.dkr.ecr.eu-west-1.amazonaws.com/indexer-cache:latest
+
+      - name: "🚀 SST Deploy"
+        run: |
+          echo "Deploying with stage: prod"
+          bun sst deploy --stage prod

Dockerfile.prebuilt

@@ -0,0 +1,7 @@
+# Prebuilt docker file from the CI worklow
+FROM 262732185023.dkr.ecr.eu-west-1.amazonaws.com/indexer-cache:latest
+
+# run the app
+USER bun
+EXPOSE 42069/tcp
+ENTRYPOINT [ "bun", "run", "start" ]

ponder.config.ts

@@ -1,4 +1,5 @@
 import { createConfig } from "@ponder/core";
+import { Config } from "sst/node/config";
 import { http } from "viem";
 import { erc20ABI } from "./abis/erc20ABI";
 import { multiWebAuthNValidatorV2Abi } from "./abis/multiWebAuthNValidatorABI";
@@ -8,33 +9,46 @@ const pollingConfig = {
     maxRequestsPerSecond: 1,
 } as const;
 
+function getConfigOrEnv(key: keyof typeof Config): string | undefined {
+    try {
+        return Config[key] ?? process.env[key] ?? undefined;
+    } catch {
+        console.error(`Failed to get config for key: ${key}`);
+    }
+    return process.env[key] ?? undefined;
+}
+
 export default createConfig({
+    database: {
+        kind: "postgres",
+        connectionString: getConfigOrEnv("DATABASE_URL"),
+    },
     networks: {
         // Mainnets
         arbitrum: {
             chainId: 42161,
-            transport: http(process.env.PONDER_RPC_URL_ARB),
+            transport: http(getConfigOrEnv("PONDER_RPC_URL_ARB")),
             ...pollingConfig,
         },
         base: {
             chainId: 8453,
-            transport: http(process.env.PONDER_RPC_URL_BASE),
+            transport: http(getConfigOrEnv("PONDER_RPC_URL_BASE")),
             ...pollingConfig,
         },
         optimism: {
             chainId: 10,
-            transport: http(process.env.PONDER_RPC_URL_OPTIMISM),
+            transport: http(getConfigOrEnv("PONDER_RPC_URL_OPTIMISM")),
             ...pollingConfig,
         },
         polygon: {
             chainId: 137,
-            transport: http(process.env.PONDER_RPC_URL_POLYGON),
+            transport: http(getConfigOrEnv("PONDER_RPC_URL_POLYGON")),
             ...pollingConfig,
         },
         // Testnets
         arbitrumSepolia: {
             chainId: 421614,
-            transport: http(process.env.PONDER_RPC_URL_ARB_SEPOLIA),
+            transport: http(getConfigOrEnv("PONDER_RPC_URL_ARB_SEPOLIA")),
             ...pollingConfig,
         },
     },
@@ -44,7 +58,7 @@ export default createConfig({
             abi: erc20ABI,
             network: "arbitrumSepolia",
             address: "0x9584A61F70cC4BEF5b8B5f588A1d35740f0C7ae2",
-            startBlock: 29562417
+            startBlock: 29562417,
         },
         // The WebAuthN validator to index
         WebAuthNValidator: {

sst-env.d.ts

@@ -0,0 +1 @@
+/// <reference path="./.sst/types/index.ts" />

sst.config.ts

@@ -1,6 +1,6 @@
 import { Port, SecurityGroup } from "aws-cdk-lib/aws-ec2";
 import type { SSTConfig } from "sst";
-import { Service, type StackContext, Config } from "sst/constructs";
+import { Config, Service, type StackContext } from "sst/constructs";
 
 export default {
     config(_input) {
@@ -48,11 +48,12 @@ function IndexerStack({ stack }: StackContext) {
         new Config.Secret(stack, "PONDER_RPC_URL_POLYGON"),
         // Testnet RPCs
         new Config.Secret(stack, "PONDER_RPC_URL_ARB_SEPOLIA"),
-    ]
+    ];
 
     // The service itself
     const indexerService = new Service(stack, "IndexerService", {
         path: "./",
+        file: "Dockerfile.prebuilt",
         port: 42069,
         // Domain mapping
         customDomain: {