deploy: regenerate compose from vibe-node main e5b8e344f927

This commit is contained in:
2026-07-13 16:58:03 +00:00
parent ba410ba7f6
commit 14b3d70125
2 changed files with 281 additions and 0 deletions

View File

@@ -0,0 +1,263 @@
---
x-logging-defaults: &logging-defaults
driver: json-file
options:
max-size: "512m"
max-file: "2"
# Usage:
#
# mkdir rpc && cd rpc
#
# git init
# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
# git fetch origin vibe
# git checkout origin/vibe
#
# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
#
# env
# ...
# IP=$(curl ipinfo.io/ip)
# DOMAIN=${IP}.traefik.me
# COMPOSE_FILE=base.yml:rpc.yml:plasma/reth/plasma-mainnet-reth-pruned-trace.yml
#
# docker compose up -d
#
# curl -X POST https://${IP}.traefik.me/plasma-mainnet \
# -H "Content-Type: application/json" \
# --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
services:
plasma-mainnet-initialize-openssl:
image: ${PLASMA_OPENSSL_IMAGE:-docker.io/alpine/openssl}:${PLASMA_OPENSSL_VERSION:-3.5.2}
entrypoint: [/bin/sh, -c]
command:
- |
if [ ! -f /jwt/jwt.hex ]; then
echo 'INFO Generating jwt secret'
openssl rand -hex 32 | tr -d '\n' > /jwt/jwt.hex
else
echo 'INFO JWT secret already exists'
fi
if [ ! -f /consensus/ec-secp256k1-non-validator.pem ]; then
echo 'INFO Generating secp256k1 keypair for non-validator'
openssl ecparam -name secp256k1 -genkey -noout -out /consensus/ec-secp256k1-non-validator.pem
openssl ec -in /consensus/ec-secp256k1-non-validator.pem -outform DER -no_public -out /consensus/ec-secp256k1-non-validator.der
else
echo 'INFO secp256k1 keypair for non-validator already exists'
fi
echo 'INFO OpenSSL initialization completed'
restart: no
networks:
- chains
volumes:
- ${PLASMA_MAINNET_RETH_PRUNED_TRACE_CONSENSUS_DATA:-plasma-mainnet-reth-pruned-trace-consensus}:/consensus:rw
- plasma-mainnet-reth-pruned-trace-jwt:/jwt:rw
logging: *logging-defaults
plasma-mainnet-initialize-consensus:
image: ${PLASMA_PLASMA_CONSENSUS_IMAGE:-ghcr.io/plasmalaboratories/plasma-consensus-public}:${PLASMA_MAINNET_PLASMA_CONSENSUS_VERSION:-0.15.0}
user: 0:0
entrypoint: [/bin/bash, -c]
command:
- |
set -euo pipefail
if [ ! -f /consensus/data.mdb ]; then
echo "INFO Generating consensus database for mainnet network"
plasma-cli init \
--chain /node/genesis.json \
--data-dir /consensus
else
echo "INFO Consensus database already exists at /consensus/data.mdb"
fi
if [ ! -f /consensus/peer-id.txt ]; then
echo "INFO Generating peer ID for non-validator"
plasma-cli peer-id \
--identity-file-path /consensus/ec-secp256k1-non-validator.der > /consensus/peer-id.txt
else
echo "INFO Peer ID for non-validator already exists"
fi
restart: no
depends_on:
plasma-mainnet-initialize-openssl:
condition: service_completed_successfully
networks:
- chains
volumes:
- ${PLASMA_MAINNET_RETH_PRUNED_TRACE_CONSENSUS_DATA:-plasma-mainnet-reth-pruned-trace-consensus}:/consensus:rw
- ./plasma/mainnet/genesis.json:/node/genesis.json:ro
- plasma-mainnet-reth-pruned-trace-jwt:/jwt:ro
logging: *logging-defaults
plasma-mainnet-initialize-execution:
image: ${PLASMA_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${PLASMA_MAINNET_RETH_VERSION:-v1.11.3}
user: 0:0
entrypoint: [/bin/bash, -c]
command:
- |
set -euo pipefail
if [ ! -f /execution/db/mdbx.dat ]; then
echo "INFO Generating execution database for mainnet network"
reth init \
--chain /node/genesis.json \
--datadir /execution \
--log.file.directory /execution/log
else
echo "INFO Execution database already exists at /execution/db"
fi
restart: no
depends_on:
plasma-mainnet-initialize-consensus:
condition: service_completed_successfully
networks:
- chains
volumes:
- ${PLASMA_MAINNET_RETH_PRUNED_TRACE_EXECUTION_DATA:-plasma-mainnet-reth-pruned-trace-execution}:/execution:rw
- ./plasma/mainnet/genesis.json:/node/genesis.json:ro
- plasma-mainnet-reth-pruned-trace-jwt:/jwt:ro
logging: *logging-defaults
plasma-mainnet:
image: ${PLASMA_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${PLASMA_MAINNET_RETH_VERSION:-v1.11.3}
sysctls:
# TCP Performance
net.ipv4.tcp_slow_start_after_idle: 0 # Disable slow start after idle
net.ipv4.tcp_no_metrics_save: 1 # Disable metrics cache
net.ipv4.tcp_rmem: 4096 87380 16777216 # Increase TCP read buffers
net.ipv4.tcp_wmem: 4096 87380 16777216 # Increase TCP write buffers
net.core.somaxconn: 32768 # Higher connection queue
# Memory/Connection Management
# net.core.netdev_max_backlog: 50000 # Increase network buffer
net.ipv4.tcp_max_syn_backlog: 30000 # More SYN requests
net.ipv4.tcp_max_tw_buckets: 2000000 # Allow more TIME_WAIT sockets
ulimits:
nofile: 1048576 # Max open files (for RPC/WS connections)
memlock: -1 # Disable memory locking limits (for in-memory DBs like MDBX)
user: 0:0
ports:
- 13415:30303
- 13415:30303/udp
expose:
- 8545
- 8551
- 9001
entrypoint: [/bin/bash, -c]
command:
- |
reth node \
--chain /node/genesis.json \
--datadir /execution \
--trusted-peers "enode://037faf42966a9502d904af0937f57d02a8598552e1031f8ac44d3ab8b51e3c11b5f5d35dd92427568734804caf077c0d43fd3dbc1d171c5fc533f038d5a476ab@plasma-mainnet-observer-ex-1.plasmalabs.tech:30303?discport=30304,enode://5504b229ff169d4c0d8d723e1c6cfc72e844183e7c8338c2671cfe3d1c4527a27493ca53afd3b5891cac16dd30404d95a6c242e79c76c4450f4ba0db0bdd37de@plasma-mainnet-observer-ex-4.plasmalabs.tech:30303?discport=30304,enode://06b80fc821ae13f198e325b38c9f678f1b8f32ef31ecbd57d2b5fd3b695925380285456a7539eccb72461383d615d2ecf955a1060e75c43f41a88c7ba78a4fad@plasma-mainnet-observer-ex-9.plasmalabs.tech:30303?discport=30304" \
--authrpc.jwtsecret /jwt/jwt.hex \
--authrpc.addr 0.0.0.0 \
--authrpc.port 8551 \
--http \
--http.addr 0.0.0.0 \
--http.api eth,net,web3,txpool,debug \
--http.corsdomain '*' \
--metrics 0.0.0.0:9001 \
--color never \
--rpc.gascap 600000000 \
--txpool.gas-limit 36000000 \
--txpool.blobpool-max-count 0 \
--txpool.blobpool-max-size 0 \
--txpool.blob-cache-size 0 \
--log.file.directory /execution/log
restart: unless-stopped
stop_grace_period: 5m
depends_on:
plasma-mainnet-initialize-execution:
condition: service_completed_successfully
networks:
- chains
volumes:
- ${PLASMA_MAINNET_RETH_PRUNED_TRACE_EXECUTION_DATA:-plasma-mainnet-reth-pruned-trace-execution}:/execution:rw
- ./plasma/mainnet/genesis.json:/node/genesis.json:ro
- /slowdisk:/slowdisk
- plasma-mainnet-reth-pruned-trace-jwt:/jwt:ro
healthcheck:
test: [CMD, bash, -c, exec 6<> /dev/tcp/localhost/8545 && exec 6<> /dev/tcp/localhost/8551]
interval: 10s
timeout: 10s
retries: 30
logging: *logging-defaults
labels:
- prometheus-scrape.enabled=true
- prometheus-scrape.port=9001
- prometheus-scrape.path=/metrics
- traefik.enable=true
- traefik.http.middlewares.plasma-mainnet-reth-pruned-trace-stripprefix.stripprefix.prefixes=/plasma-mainnet
- traefik.http.services.plasma-mainnet-reth-pruned-trace.loadbalancer.server.port=8545
- ${NO_SSL:-traefik.http.routers.plasma-mainnet-reth-pruned-trace.entrypoints=websecure}
- ${NO_SSL:-traefik.http.routers.plasma-mainnet-reth-pruned-trace.tls.certresolver=myresolver}
- ${NO_SSL:-traefik.http.routers.plasma-mainnet-reth-pruned-trace.rule=Host(`$DOMAIN`) && (Path(`/plasma-mainnet`) || Path(`/plasma-mainnet/`))}
- ${NO_SSL:+traefik.http.routers.plasma-mainnet-reth-pruned-trace.rule=Path(`/plasma-mainnet`) || Path(`/plasma-mainnet/`)}
- traefik.http.routers.plasma-mainnet-reth-pruned-trace.middlewares=plasma-mainnet-reth-pruned-trace-stripprefix, ipallowlist
shm_size: 2gb
plasma-mainnet-node:
image: ${PLASMA_PLASMA_CONSENSUS_IMAGE:-ghcr.io/plasmalaboratories/plasma-consensus-public}:${PLASMA_MAINNET_PLASMA_CONSENSUS_VERSION:-0.15.0}
user: 0:0
ports:
- 18415:34070
expose:
- 35070
- 9001
entrypoint: [/bin/bash, -c]
command:
- |
sed 's|http://plasma-mainnet:8551|http://plasma-mainnet:8551|g' /config/non-validator.toml > /tmp/non-validator.toml
exec plasma-cli observer \
--config-path /tmp/non-validator.toml \
--no-color \
--timeout-stream-manager 10ms \
--telemetry.enable-metrics \
--telemetry.enable-health \
--telemetry.host 0.0.0.0 \
--telemetry.port 9001 \
-vvv
restart: unless-stopped
stop_grace_period: 5m
depends_on:
plasma-mainnet-initialize-consensus:
condition: service_completed_successfully
plasma-mainnet:
condition: service_healthy
networks:
- chains
volumes:
- ${PLASMA_MAINNET_RETH_PRUNED_TRACE_CONSENSUS_DATA:-plasma-mainnet-reth-pruned-trace-consensus}:/consensus:rw
- ./plasma/mainnet/genesis.json:/node/genesis.json:ro
- ./plasma/mainnet/identities:/node/identities:ro
- ./plasma/mainnet/keys:/node/keys:ro
- ./plasma/mainnet/non-validator.toml:/config/non-validator.toml:ro
- plasma-mainnet-reth-pruned-trace-jwt:/jwt:ro
logging: *logging-defaults
labels:
- prometheus-scrape.enabled=true
- prometheus-scrape.port=9001
volumes:
plasma-mainnet-reth-pruned-trace-consensus:
plasma-mainnet-reth-pruned-trace-execution:
plasma-mainnet-reth-pruned-trace-jwt:
x-upstreams:
- id: $${ID}
labels:
provider: $${PROVIDER}
connection:
generic:
rpc:
url: $${RPC_URL}
chain: plasma
method-groups:
enabled:
- debug
- filter
- trace
methods:
enabled:
- name: txpool_content
...