From 20aeedbc9c858e817d3e949901b5c66cc07717c1 Mon Sep 17 00:00:00 2001 From: Claude Agent Date: Sun, 24 May 2026 15:55:50 +0000 Subject: [PATCH] fix(rskj): traefik should hit nginx wrapper on port 80, not rskj client on 8545 The rskj compose has an nginx proxy wrapper in front of the rskj client. The wrapper listens on port 80 and proxies to rskj:8545 internally (this is required because rskj's hosts whitelist is hard-coded to localhost only, so traefik forwards must look local to rskj). Traefik labels were pointing to port 8545, hitting the rskj client directly, which rejected the request because the Host header didn't match localhost. Fix: traefik loadbalancer.server.port now 80 for both rootstock-mainnet and rootstock-bamboo (mirrors the parent rpc-client.yml template's existing client_proxy_required logic, which the rskj client template inadvertently dropped). Verified on de-31: rootstock-mainnet eth_blockNumber returns block 8,872,189 after the fix. Co-Authored-By: Claude Opus 4.7 (1M context) --- rootstock/rskj/rootstock-bamboo-rskj-archive.yml | 2 +- rootstock/rskj/rootstock-mainnet-rskj-archive.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/rootstock/rskj/rootstock-bamboo-rskj-archive.yml b/rootstock/rskj/rootstock-bamboo-rskj-archive.yml index 221b4aba..89ec5958 100644 --- a/rootstock/rskj/rootstock-bamboo-rskj-archive.yml +++ b/rootstock/rskj/rootstock-bamboo-rskj-archive.yml @@ -90,7 +90,7 @@ services: - traefik.enable=true - traefik.http.middlewares.rootstock-bamboo-rskj-archive-host.headers.customrequestheaders.Host=localhost - traefik.http.middlewares.rootstock-bamboo-rskj-archive-stripprefix.stripprefix.prefixes=/rootstock-bamboo - - traefik.http.services.rootstock-bamboo-rskj-archive.loadbalancer.server.port=8545 + - traefik.http.services.rootstock-bamboo-rskj-archive.loadbalancer.server.port=80 - ${NO_SSL:-traefik.http.routers.rootstock-bamboo-rskj-archive.entrypoints=websecure} - ${NO_SSL:-traefik.http.routers.rootstock-bamboo-rskj-archive.tls.certresolver=myresolver} - ${NO_SSL:-traefik.http.routers.rootstock-bamboo-rskj-archive.rule=Host(`$DOMAIN`) && (Path(`/rootstock-bamboo`) || Path(`/rootstock-bamboo/`))} diff --git a/rootstock/rskj/rootstock-mainnet-rskj-archive.yml b/rootstock/rskj/rootstock-mainnet-rskj-archive.yml index bd40bd0b..d2c0d632 100644 --- a/rootstock/rskj/rootstock-mainnet-rskj-archive.yml +++ b/rootstock/rskj/rootstock-mainnet-rskj-archive.yml @@ -90,7 +90,7 @@ services: - traefik.enable=true - traefik.http.middlewares.rootstock-mainnet-rskj-archive-host.headers.customrequestheaders.Host=localhost - traefik.http.middlewares.rootstock-mainnet-rskj-archive-stripprefix.stripprefix.prefixes=/rootstock-mainnet - - traefik.http.services.rootstock-mainnet-rskj-archive.loadbalancer.server.port=8545 + - traefik.http.services.rootstock-mainnet-rskj-archive.loadbalancer.server.port=80 - ${NO_SSL:-traefik.http.routers.rootstock-mainnet-rskj-archive.entrypoints=websecure} - ${NO_SSL:-traefik.http.routers.rootstock-mainnet-rskj-archive.tls.certresolver=myresolver} - ${NO_SSL:-traefik.http.routers.rootstock-mainnet-rskj-archive.rule=Host(`$DOMAIN`) && (Path(`/rootstock-mainnet`) || Path(`/rootstock-mainnet/`))}