Add tempo consensus parameters for RPC nodes

- Add --consensus.signing-key and --consensus.fee-recipient
- Add secrets volume for validator key storage
- Add comment with key generation instructions

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

tempo/reth/tempo-moderato-reth-archive-trace.yml

@@ -4,6 +4,11 @@ x-logging-defaults: &logging-defaults
   options:
     max-size: "10m"
     max-file: "3"
+# Tempo node requires consensus parameters even for follower/RPC nodes.
+
+# Before starting, generate a signing key:
+#   docker run --rm -v tempo-secrets:/secrets ghcr.io/tempoxyz/tempo:sha-a1ac033 \
+#     consensus generate-private-key --output /secrets/validator_key.json
 
 # Usage:
 #
@@ -58,6 +63,8 @@ services:
     command:
       - --bootnodes=enode://daff60c56f91f13f7a01304badbf65a4b0fe71004293a1fa26e31bf9b2083cb7c176b8318219ac2a651dc26c61e094eff70ece6f440b849b8a1881c7766373bb@148.113.217.72:30014,enode://1dc8f9d6f7406cd9ea546f7dd8abc84f69fce8a88dc7315372859010e3db9235d74a93347e91732283e7b4dd22f7d3a60c81dee31a8dc6665dc7ed9aff977c20@148.113.193.121:30016,enode://c2b3cd1404534510487b96b099541d88072260d5410bcc38195d7f606decf0c0043964f6f9252869534675a80ca9f12af81d5b9c078966e9dfae4487a773cb0b@148.113.225.199:30018,enode://53fc9564e37a20aa3f53dc5b3dce124f55df6b8eab45f5b40b13d19f4753255f4b1e240c4b5004bab8f5f8698a7f8c6607d28dc9afa0018fb69526b88411d8ab@148.113.193.123:30020
       - --chain=moderato
+      - --consensus.fee-recipient=0x0000000000000000000000000000000000000000
+      - --consensus.signing-key=/secrets/validator_key.json
       - --datadir=/root/.local/share/reth
       - --discovery.port=10941
       - --engine.cross-block-cache-size=${TEMPO_MODERATO_RETH_STATE_CACHE:-4096}
@@ -91,6 +98,7 @@ services:
     volumes:
       - ${TEMPO_MODERATO_RETH_ARCHIVE_TRACE_DATA:-tempo-moderato-reth-archive-trace}:/root/.local/share/reth
       - /slowdisk:/slowdisk
+      - tempo-moderato-reth-secrets:/secrets
     logging: *logging-defaults
     labels:
       - prometheus-scrape.enabled=true
@@ -108,6 +116,7 @@ services:
 
 volumes:
   tempo-moderato-reth-archive-trace:
+  tempo-moderato-reth-secrets:
 
 x-upstreams:
   - id: $${ID}

tempo/reth/tempo-moderato-reth-pruned-trace.yml

@@ -4,6 +4,11 @@ x-logging-defaults: &logging-defaults
   options:
     max-size: "10m"
     max-file: "3"
+# Tempo node requires consensus parameters even for follower/RPC nodes.
+
+# Before starting, generate a signing key:
+#   docker run --rm -v tempo-secrets:/secrets ghcr.io/tempoxyz/tempo:sha-a1ac033 \
+#     consensus generate-private-key --output /secrets/validator_key.json
 
 # Usage:
 #
@@ -58,6 +63,8 @@ services:
     command:
       - --bootnodes=enode://daff60c56f91f13f7a01304badbf65a4b0fe71004293a1fa26e31bf9b2083cb7c176b8318219ac2a651dc26c61e094eff70ece6f440b849b8a1881c7766373bb@148.113.217.72:30014,enode://1dc8f9d6f7406cd9ea546f7dd8abc84f69fce8a88dc7315372859010e3db9235d74a93347e91732283e7b4dd22f7d3a60c81dee31a8dc6665dc7ed9aff977c20@148.113.193.121:30016,enode://c2b3cd1404534510487b96b099541d88072260d5410bcc38195d7f606decf0c0043964f6f9252869534675a80ca9f12af81d5b9c078966e9dfae4487a773cb0b@148.113.225.199:30018,enode://53fc9564e37a20aa3f53dc5b3dce124f55df6b8eab45f5b40b13d19f4753255f4b1e240c4b5004bab8f5f8698a7f8c6607d28dc9afa0018fb69526b88411d8ab@148.113.193.123:30020
       - --chain=moderato
+      - --consensus.fee-recipient=0x0000000000000000000000000000000000000000
+      - --consensus.signing-key=/secrets/validator_key.json
       - --datadir=/root/.local/share/reth
       - --discovery.port=10490
       - --engine.cross-block-cache-size=${TEMPO_MODERATO_RETH_STATE_CACHE:-4096}
@@ -92,6 +99,7 @@ services:
     volumes:
       - ${TEMPO_MODERATO_RETH_PRUNED_TRACE_DATA:-tempo-moderato-reth-pruned-trace}:/root/.local/share/reth
       - /slowdisk:/slowdisk
+      - tempo-moderato-reth-pruned-secrets:/secrets
     logging: *logging-defaults
     labels:
       - prometheus-scrape.enabled=true
@@ -108,6 +116,7 @@ services:
     shm_size: 2gb
 
 volumes:
+  tempo-moderato-reth-pruned-secrets:
   tempo-moderato-reth-pruned-trace:
 
 x-upstreams:

tempo/reth/tempo-testnet-reth-archive-trace.yml

@@ -4,6 +4,11 @@ x-logging-defaults: &logging-defaults
   options:
     max-size: "10m"
     max-file: "3"
+# Tempo node requires consensus parameters even for follower/RPC nodes.
+
+# Before starting, generate a signing key:
+#   docker run --rm -v tempo-secrets:/secrets ghcr.io/tempoxyz/tempo:sha-a1ac033 \
+#     consensus generate-private-key --output /secrets/validator_key.json
 
 # Usage:
 #
@@ -58,6 +63,8 @@ services:
     command:
       - --bootnodes=enode://386269ddd50fd95143ad8f33f60ff67c7bd17da1adb46aed19eba5c6ae5326316643595e3aa99784f41b7d861fedde78594b1f764e56a4659917b916c1c3e321@148.113.193.123:30004,enode://11103c936d2c21be1a2da3ca81f4daa3b5ad508e1a04e63198eaebf7b0783b2f805b2ea3997e4745e51881a0f6a49e0d8d2c3c85088c3a4a8a8f3ae0a086cc7d@148.113.225.199:30006,enode://b189a89051ac5c11010d21cac7fabe0c2a3723721f38625631bdd120e88d15a0a748760bc1e4d4a8cd808edf502d4ec6acf677e49592f9ab7d193d094049963b@148.113.193.121:30008,enode://022e06bfe3763851901baa2aae1cf94e276e4faa889d700422db3a88d075072d15868caa103d077ddd1d96f6fca266b1ded8dc9a41e2a612dcd77edc6dd5bae8@40.160.32.193:30010
       - --chain=testnet
+      - --consensus.fee-recipient=0x0000000000000000000000000000000000000000
+      - --consensus.signing-key=/secrets/validator_key.json
       - --datadir=/root/.local/share/reth
       - --discovery.port=10279
       - --engine.cross-block-cache-size=${TEMPO_TESTNET_RETH_STATE_CACHE:-4096}
@@ -91,6 +98,7 @@ services:
     volumes:
       - ${TEMPO_TESTNET_RETH_ARCHIVE_TRACE_DATA:-tempo-testnet-reth-archive-trace}:/root/.local/share/reth
       - /slowdisk:/slowdisk
+      - tempo-testnet-reth-secrets:/secrets
     logging: *logging-defaults
     labels:
       - prometheus-scrape.enabled=true
@@ -108,6 +116,7 @@ services:
 
 volumes:
   tempo-testnet-reth-archive-trace:
+  tempo-testnet-reth-secrets:
 
 x-upstreams:
   - id: $${ID}

tempo/reth/tempo-testnet-reth-pruned-trace.yml

@@ -4,6 +4,11 @@ x-logging-defaults: &logging-defaults
   options:
     max-size: "10m"
     max-file: "3"
+# Tempo node requires consensus parameters even for follower/RPC nodes.
+
+# Before starting, generate a signing key:
+#   docker run --rm -v tempo-secrets:/secrets ghcr.io/tempoxyz/tempo:sha-a1ac033 \
+#     consensus generate-private-key --output /secrets/validator_key.json
 
 # Usage:
 #
@@ -58,6 +63,8 @@ services:
     command:
       - --bootnodes=enode://386269ddd50fd95143ad8f33f60ff67c7bd17da1adb46aed19eba5c6ae5326316643595e3aa99784f41b7d861fedde78594b1f764e56a4659917b916c1c3e321@148.113.193.123:30004,enode://11103c936d2c21be1a2da3ca81f4daa3b5ad508e1a04e63198eaebf7b0783b2f805b2ea3997e4745e51881a0f6a49e0d8d2c3c85088c3a4a8a8f3ae0a086cc7d@148.113.225.199:30006,enode://b189a89051ac5c11010d21cac7fabe0c2a3723721f38625631bdd120e88d15a0a748760bc1e4d4a8cd808edf502d4ec6acf677e49592f9ab7d193d094049963b@148.113.193.121:30008,enode://022e06bfe3763851901baa2aae1cf94e276e4faa889d700422db3a88d075072d15868caa103d077ddd1d96f6fca266b1ded8dc9a41e2a612dcd77edc6dd5bae8@40.160.32.193:30010
       - --chain=testnet
+      - --consensus.fee-recipient=0x0000000000000000000000000000000000000000
+      - --consensus.signing-key=/secrets/validator_key.json
       - --datadir=/root/.local/share/reth
       - --discovery.port=10333
       - --engine.cross-block-cache-size=${TEMPO_TESTNET_RETH_STATE_CACHE:-4096}
@@ -92,6 +99,7 @@ services:
     volumes:
       - ${TEMPO_TESTNET_RETH_PRUNED_TRACE_DATA:-tempo-testnet-reth-pruned-trace}:/root/.local/share/reth
       - /slowdisk:/slowdisk
+      - tempo-testnet-reth-pruned-secrets:/secrets
     logging: *logging-defaults
     labels:
       - prometheus-scrape.enabled=true
@@ -108,6 +116,7 @@ services:
     shm_size: 2gb
 
 volumes:
+  tempo-testnet-reth-pruned-secrets:
   tempo-testnet-reth-pruned-trace:
 
 x-upstreams: