fix(rskj): traefik should hit nginx wrapper on port 80, not rskj client on 8545
The rskj compose has an nginx proxy wrapper in front of the rskj client. The wrapper listens on port 80 and proxies to rskj:8545 internally (this is required because rskj's hosts whitelist is hard-coded to localhost only, so traefik forwards must look local to rskj). Traefik labels were pointing to port 8545, hitting the rskj client directly, which rejected the request because the Host header didn't match localhost. Fix: traefik loadbalancer.server.port now 80 for both rootstock-mainnet and rootstock-bamboo (mirrors the parent rpc-client.yml template's existing client_proxy_required logic, which the rskj client template inadvertently dropped). Verified on de-31: rootstock-mainnet eth_blockNumber returns block 8,872,189 after the fix. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -90,7 +90,7 @@ services:
|
||||
- traefik.enable=true
|
||||
- traefik.http.middlewares.rootstock-bamboo-rskj-archive-host.headers.customrequestheaders.Host=localhost
|
||||
- traefik.http.middlewares.rootstock-bamboo-rskj-archive-stripprefix.stripprefix.prefixes=/rootstock-bamboo
|
||||
- traefik.http.services.rootstock-bamboo-rskj-archive.loadbalancer.server.port=8545
|
||||
- traefik.http.services.rootstock-bamboo-rskj-archive.loadbalancer.server.port=80
|
||||
- ${NO_SSL:-traefik.http.routers.rootstock-bamboo-rskj-archive.entrypoints=websecure}
|
||||
- ${NO_SSL:-traefik.http.routers.rootstock-bamboo-rskj-archive.tls.certresolver=myresolver}
|
||||
- ${NO_SSL:-traefik.http.routers.rootstock-bamboo-rskj-archive.rule=Host(`$DOMAIN`) && (Path(`/rootstock-bamboo`) || Path(`/rootstock-bamboo/`))}
|
||||
|
||||
@@ -90,7 +90,7 @@ services:
|
||||
- traefik.enable=true
|
||||
- traefik.http.middlewares.rootstock-mainnet-rskj-archive-host.headers.customrequestheaders.Host=localhost
|
||||
- traefik.http.middlewares.rootstock-mainnet-rskj-archive-stripprefix.stripprefix.prefixes=/rootstock-mainnet
|
||||
- traefik.http.services.rootstock-mainnet-rskj-archive.loadbalancer.server.port=8545
|
||||
- traefik.http.services.rootstock-mainnet-rskj-archive.loadbalancer.server.port=80
|
||||
- ${NO_SSL:-traefik.http.routers.rootstock-mainnet-rskj-archive.entrypoints=websecure}
|
||||
- ${NO_SSL:-traefik.http.routers.rootstock-mainnet-rskj-archive.tls.certresolver=myresolver}
|
||||
- ${NO_SSL:-traefik.http.routers.rootstock-mainnet-rskj-archive.rule=Host(`$DOMAIN`) && (Path(`/rootstock-mainnet`) || Path(`/rootstock-mainnet/`))}
|
||||
|
||||
Reference in New Issue
Block a user