Launch new donate front-end

The donate page front-end rewrite is nearing completion. A new server has been deployed to host the production instance ( tpo/tpa/team#41596 (closed)) and it has been hooked up to the CI/CD pipeline in the tpo/web/donate-neo project.

This ticket is to track the steps for the launch:

Pre-launch

  • Decide on a launch date
  • Configure IPSec on donate-01 and join CRM network
  • Reduce TTL on donate.torproject.org DNS entry to 300
  • Switch to production API secrets for the container environment
    • Paypal
    • Stripe
  • service docs ( #79 (closed))
  • hook up monitoring ( #72 (closed)) and alerting ( #75 (closed))
  • Tests (see #14 (closed))
  • deploy a visible copy of the production server, perhaps on donate-01.torproject.org directly, so we can actually test prod before flipping the switch as well

Launch day

  • set maintenandeMode: true on donate frontend, see donate-static@1fe0f6fa

  • remove password protection on prod site (revert tor-puppet@d10874f14b5a4d48e753945a6f792495cedeca33)

  • Switch over main DNS entry

  • Migrate the onion service to the new server

  • Switch over the vendor webhook configurations to the new URLs (via vendor dashboards, with help from @mattlav)

    • Paypal (create new webhook for all events, delete old webhook?)
    • Stripe (enable new webhook, disable old webhook)

Post-launch

See also the updates required on the CiviCRM side of things, in https://gitlab.torproject.org/tpo/web/civicrm/-/issues/139

/cc @anarcat @gaba

Edited by Gaba