do not store logs

2025-05-16 12:01:50 +07:00
parent bfccfdbadc
commit 22ce16f065
6 changed files with 589 additions and 0 deletions
--- a/arb/nitro/arbitrum-one-nitro-pruned-pebble-hash--fireeth.yml
+++ b/arb/nitro/arbitrum-one-nitro-pruned-pebble-hash--fireeth.yml
@@ -0,0 +1,190 @@
+---
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-one-nitro-pruned-pebble-hash--fireeth.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-one \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: 10m
+    max-file: '3'
+
+services:
+  arbitrum-one:
+    image: ${ARBITRUM_FIREETH_IMAGE:-ghcr.io/streamingfast/firehose-ethereum}:${ARBITRUM_ONE_FIREETH_VERSION:-v2.11.7-nitro-nitro-v3.5.5-fh3.0}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    entrypoint: [sh, -c, exec fireeth start reader-node --log-to-file=false --reader-node-arguments "$*", _]
+    command:
+      - --chain.id=42161
+      - --execution.caching.archive=false
+      - --execution.caching.state-scheme=hash
+      - --execution.rpc.gas-cap=600000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --init.download-path=/tmp
+      - --init.latest=pruned
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-one
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_DATA:-arbitrum-one-nitro-pruned-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-one:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-one-nitro-pruned-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-one
+      - traefik.http.services.arbitrum-one-nitro-pruned-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-one`) || Path(`/arbitrum-one/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.rule=Path(`/arbitrum-one`) || Path(`/arbitrum-one/`)}
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.middlewares=arbitrum-one-nitro-pruned-pebble-hash-stripprefix, ipallowlist
+
+  arbitrum-one-firehose:
+    image: ${ARBITRUM_FIREETH_IMAGE:-ghcr.io/streamingfast/firehose-ethereum}:${ARBITRUM_ONE_FIREETH_VERSION:-v2.11.7-nitro-nitro-v3.5.5-fh3.0}
+    expose:
+      - 10015
+      - 10014
+    environment:
+      - ${ARBITRUM_ONE_FIREETH_BLOCKS_STORE:-/firehose-data/storage/merged-blocks}
+    entrypoint: [sh, -c, exec fireeth start firehose index-builder relayer merger $@, _]
+    command:
+      - --log-to-file=false
+      - --relayer-source=http://arbitrum-one:10010
+    restart: unless-stopped
+    depends_on:
+      - arbitrum-one
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_FIREETH_DATA:-arbitrum-one-fireeth}:/firehose-data
+    logging: *logging-defaults
+    labels:
+      - traefik.enable=true
+      - traefik.http.services.arbitrum-one-nitro-pruned-pebble-hash-firehose.loadbalancer.server.scheme=h2c
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-firehose.service=arbitrum-one-nitro-pruned-pebble-hash-firehose
+      - traefik.http.services.arbitrum-one-nitro-pruned-pebble-hash-firehose.loadbalancer.server.port=10015
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-firehose.entrypoints=grpc
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-firehose.tls.certresolver=myresolver}
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-firehose.rule=Host(`arbitrum-one-firehose.${DOMAIN}`)
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-firehose.middlewares=ipallowlist
+
+  arbitrum-one-events:
+    image: ${ARBITRUM_FIREETH_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_FIREETH_VERSION:-v3.6.2-5b41a2d}
+    expose:
+      - 10016
+    entrypoint: [sh, -c, exec fireeth start substreams-tier-1 substreams-tier-2 $@, _]
+    command:
+      - --common-live-blocks-addr=http://arbitrum-one-firehose:10014
+      - --log-to-file=false
+      - --substreams-rpc-endpoints=${ARBITRUM_ONE_FIREETH_ARCHIVE_RPC}
+    restart: unless-stopped
+    depends_on:
+      - arbitrum-one
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_FIREETH_DATA:-arbitrum-one-fireeth}:/firehose-data
+    logging: *logging-defaults
+    labels:
+      - traefik.enable=true
+      - traefik.http.services.arbitrum-one-nitro-pruned-pebble-hash-events.loadbalancer.server.scheme=h2c
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-events.service=arbitrum-one-nitro-pruned-pebble-hash-events
+      - traefik.http.services.arbitrum-one-nitro-pruned-pebble-hash-events.loadbalancer.server.port=10016
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-events.entrypoints=grpc
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-events.tls.certresolver=myresolver}
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-events.rule=Host(`arbitrum-one-events.${DOMAIN}`)
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-events.middlewares=ipallowlist
+
+volumes:
+  arbitrum-one-nitro-pruned-pebble-hash:
+  arbitrum-one-nitro-pruned-pebble-hash_fireeth:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...
--- a/bsc/bsc/bsc-mainnet-bsc-pruned-pebble-path--fireeth.yml
+++ b/bsc/bsc/bsc-mainnet-bsc-pruned-pebble-path--fireeth.yml
@@ -0,0 +1,196 @@
+---
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:bsc/bsc/bsc-mainnet-bsc-pruned-pebble-path--fireeth.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/bsc-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: 10m
+    max-file: '3'
+
+services:
+  bsc-mainnet:
+    image: ${BSC_FIREETH_IMAGE:-ghcr.io/streamingfast/firehose-ethereum}:${BSC_MAINNET_FIREETH_VERSION:-v2.11.9-bnb}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 12037:12037
+      - 12037:12037/udp
+    expose:
+      - 8545
+      - 10010
+    entrypoint: [sh, -c, exec fireeth start reader-node --log-to-file=false --reader-node-arguments "$*", _]
+    command:
+      - --config=/config/config.toml
+      - --datadir=/bsc/.ethereum
+      - --db.engine=pebble
+      - --gcmode=full
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,txpool,debug,admin,parlia
+      - --http.port=8545
+      - --http.vhosts=*
+      - --mainnet
+      - --maxpeers=50
+      - --nat=extip:${IP}
+      - --port=12037
+      - --rpc.gascap=600000000
+      - --rpc.txfeecap=0
+      - --state.scheme=path
+      - --syncmode=full
+      - --ws
+      - --ws.addr=0.0.0.0
+      - --ws.api=eth,net,web3,txpool,debug,admin,parlia
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${BSC_MAINNET_BSC_PRUNED_PEBBLE_PATH_DATA:-bsc-mainnet-bsc-pruned-pebble-path}:/bsc/.ethereum
+      - ./bsc/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - traefik.enable=true
+      - traefik.http.middlewares.bsc-mainnet-bsc-pruned-pebble-path-stripprefix.stripprefix.prefixes=/bsc-mainnet
+      - traefik.http.services.bsc-mainnet-bsc-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.bsc-mainnet-bsc-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.bsc-mainnet-bsc-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.bsc-mainnet-bsc-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/bsc-mainnet`) || Path(`/bsc-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.bsc-mainnet-bsc-pruned-pebble-path.rule=Path(`/bsc-mainnet`) || Path(`/bsc-mainnet/`)}
+      - traefik.http.routers.bsc-mainnet-bsc-pruned-pebble-path.middlewares=bsc-mainnet-bsc-pruned-pebble-path-stripprefix, ipallowlist
+
+  bsc-mainnet-firehose:
+    image: ${BSC_FIREETH_IMAGE:-ghcr.io/streamingfast/firehose-ethereum}:${BSC_MAINNET_FIREETH_VERSION:-v2.11.9-bnb}
+    expose:
+      - 10015
+      - 10014
+    environment:
+      - ${BSC_MAINNET_FIREETH_BLOCKS_STORE:-/firehose-data/storage/merged-blocks}
+    entrypoint: [sh, -c, exec fireeth start firehose index-builder relayer merger $@, _]
+    command:
+      - --log-to-file=false
+      - --relayer-source=http://bsc-mainnet:10010
+    restart: unless-stopped
+    depends_on:
+      - bsc-mainnet
+    networks:
+      - chains
+    volumes:
+      - ${BSC_MAINNET_FIREETH_DATA:-bsc-mainnet-fireeth}:/firehose-data
+    logging: *logging-defaults
+    labels:
+      - traefik.enable=true
+      - traefik.http.services.bsc-mainnet-bsc-pruned-pebble-path-firehose.loadbalancer.server.scheme=h2c
+      - traefik.http.routers.bsc-mainnet-bsc-pruned-pebble-path-firehose.service=bsc-mainnet-bsc-pruned-pebble-path-firehose
+      - traefik.http.services.bsc-mainnet-bsc-pruned-pebble-path-firehose.loadbalancer.server.port=10015
+      - traefik.http.routers.bsc-mainnet-bsc-pruned-pebble-path-firehose.entrypoints=grpc
+      - ${NO_SSL:-traefik.http.routers.bsc-mainnet-bsc-pruned-pebble-path-firehose.tls.certresolver=myresolver}
+      - traefik.http.routers.bsc-mainnet-bsc-pruned-pebble-path-firehose.rule=Host(`bsc-mainnet-firehose.${DOMAIN}`)
+      - traefik.http.routers.bsc-mainnet-bsc-pruned-pebble-path-firehose.middlewares=ipallowlist
+
+  bsc-mainnet-events:
+    image: ${BSC_FIREETH_IMAGE:-ghcr.io/bnb-chain/bsc}:${BSC_MAINNET_FIREETH_VERSION:-1.5.12}
+    expose:
+      - 10016
+    entrypoint: [sh, -c, exec fireeth start substreams-tier-1 substreams-tier-2 $@, _]
+    command:
+      - --common-live-blocks-addr=http://bsc-mainnet-firehose:10014
+      - --log-to-file=false
+      - --substreams-rpc-endpoints=${BSC_MAINNET_FIREETH_ARCHIVE_RPC}
+    restart: unless-stopped
+    depends_on:
+      - bsc-mainnet
+    networks:
+      - chains
+    volumes:
+      - ${BSC_MAINNET_FIREETH_DATA:-bsc-mainnet-fireeth}:/firehose-data
+    logging: *logging-defaults
+    labels:
+      - traefik.enable=true
+      - traefik.http.services.bsc-mainnet-bsc-pruned-pebble-path-events.loadbalancer.server.scheme=h2c
+      - traefik.http.routers.bsc-mainnet-bsc-pruned-pebble-path-events.service=bsc-mainnet-bsc-pruned-pebble-path-events
+      - traefik.http.services.bsc-mainnet-bsc-pruned-pebble-path-events.loadbalancer.server.port=10016
+      - traefik.http.routers.bsc-mainnet-bsc-pruned-pebble-path-events.entrypoints=grpc
+      - ${NO_SSL:-traefik.http.routers.bsc-mainnet-bsc-pruned-pebble-path-events.tls.certresolver=myresolver}
+      - traefik.http.routers.bsc-mainnet-bsc-pruned-pebble-path-events.rule=Host(`bsc-mainnet-events.${DOMAIN}`)
+      - traefik.http.routers.bsc-mainnet-bsc-pruned-pebble-path-events.middlewares=ipallowlist
+
+volumes:
+  bsc-mainnet-bsc-pruned-pebble-path:
+  bsc-mainnet-bsc-pruned-pebble-path_fireeth:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: bsc
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...
--- a/ethereum/geth/ethereum-mainnet-geth-pruned-leveldb-hash--nimbus--fireeth.yml
+++ b/ethereum/geth/ethereum-mainnet-geth-pruned-leveldb-hash--nimbus--fireeth.yml
@@ -106,6 +106,7 @@ services:
      - ${ETHEREUM_MAINNET_FIREETH_BLOCKS_STORE:-/firehose-data/storage/merged-blocks}
    entrypoint: [sh, -c, exec fireeth start firehose index-builder relayer merger $@, _]
    command:
+      - --log-to-file=false
      - --relayer-source=http://ethereum-mainnet:10010
    restart: unless-stopped
    depends_on:
@@ -132,6 +133,7 @@ services:
    entrypoint: [sh, -c, exec fireeth start substreams-tier-1 substreams-tier-2 $@, _]
    command:
      - --common-live-blocks-addr=http://ethereum-mainnet-firehose:10014
+      - --log-to-file=false
      - --substreams-rpc-endpoints=${ETHEREUM_MAINNET_FIREETH_ARCHIVE_RPC}
    restart: unless-stopped
    depends_on:
--- a/ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path--nimbus--fireeth.yml
+++ b/ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path--nimbus--fireeth.yml
@@ -106,6 +106,7 @@ services:
      - ${ETHEREUM_MAINNET_FIREETH_BLOCKS_STORE:-/firehose-data/storage/merged-blocks}
    entrypoint: [sh, -c, exec fireeth start firehose index-builder relayer merger $@, _]
    command:
+      - --log-to-file=false
      - --relayer-source=http://ethereum-mainnet:10010
    restart: unless-stopped
    depends_on:
@@ -132,6 +133,7 @@ services:
    entrypoint: [sh, -c, exec fireeth start substreams-tier-1 substreams-tier-2 $@, _]
    command:
      - --common-live-blocks-addr=http://ethereum-mainnet-firehose:10014
+      - --log-to-file=false
      - --substreams-rpc-endpoints=${ETHEREUM_MAINNET_FIREETH_ARCHIVE_RPC}
    restart: unless-stopped
    depends_on:
--- a/op/geth/base-mainnet-op-geth-pruned-pebble-path--fireeth.yml
+++ b/op/geth/base-mainnet-op-geth-pruned-pebble-path--fireeth.yml
@@ -109,6 +109,7 @@ services:
      - ${BASE_MAINNET_FIREETH_BLOCKS_STORE:-/firehose-data/storage/merged-blocks}
    entrypoint: [sh, -c, exec fireeth start firehose index-builder relayer merger $@, _]
    command:
+      - --log-to-file=false
      - --relayer-source=http://base-mainnet:10010
    restart: unless-stopped
    depends_on:
@@ -135,6 +136,7 @@ services:
    entrypoint: [sh, -c, exec fireeth start substreams-tier-1 substreams-tier-2 $@, _]
    command:
      - --common-live-blocks-addr=http://base-mainnet-firehose:10014
+      - --log-to-file=false
      - --substreams-rpc-endpoints=${BASE_MAINNET_FIREETH_ARCHIVE_RPC}
    restart: unless-stopped
    depends_on:
--- a/polygon/bor/polygon-mainnet-bor-pruned-pebble-path--fireeth.yml
+++ b/polygon/bor/polygon-mainnet-bor-pruned-pebble-path--fireeth.yml
@@ -0,0 +1,197 @@
+---
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:polygon/bor/polygon-mainnet-bor-pruned-pebble-path--fireeth.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/polygon-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: 10m
+    max-file: '3'
+
+services:
+  polygon-mainnet:
+    image: ${POLYGON_FIREETH_IMAGE:-ghcr.io/streamingfast/firehose-ethereum}:${POLYGON_MAINNET_FIREETH_VERSION:-v2.11.9-polygon-v1.4.1-fh2.4-3}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 14961:14961
+      - 14961:14961/udp
+    expose:
+      - 8545
+      - 10010
+    entrypoint: [sh, -c, exec fireeth start reader-node --log-to-file=false --reader-node-arguments "server $*", _]
+    command:
+      - --bor.heimdall=https://polygon-heimdall-rest.publicnode.com
+      - --chain=mainnet
+      - --datadir=/root.bor/
+      - --db.engine=pebble
+      - --discovery.dns=enrtree://AKUEZKN7PSKVNR65FZDHECMKOJQSGPARGTPPBI7WS2VUL4EGR6XPC@pos.polygon-peers.io
+      - --gcmode=full
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,txpool,debug,admin,bor
+      - --http.port=8545
+      - --http.vhosts=*
+      - --maxpeers=50
+      - --nat=extip:${IP}
+      - --port=14961
+      - --rpc.gascap=600000000
+      - --rpc.returndatalimit=10000000
+      - --rpc.txfeecap=0
+      - --state.scheme=path
+      - --syncmode=full
+      - --ws
+      - --ws.addr=0.0.0.0
+      - --ws.api=eth,net,web3,txpool,debug,admin,bor
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${POLYGON_MAINNET_BOR_PRUNED_PEBBLE_PATH_DATA:-polygon-mainnet-bor-pruned-pebble-path}:/root.bor/
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - traefik.enable=true
+      - traefik.http.middlewares.polygon-mainnet-bor-pruned-pebble-path-stripprefix.stripprefix.prefixes=/polygon-mainnet
+      - traefik.http.services.polygon-mainnet-bor-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.polygon-mainnet-bor-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.polygon-mainnet-bor-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.polygon-mainnet-bor-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/polygon-mainnet`) || Path(`/polygon-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.polygon-mainnet-bor-pruned-pebble-path.rule=Path(`/polygon-mainnet`) || Path(`/polygon-mainnet/`)}
+      - traefik.http.routers.polygon-mainnet-bor-pruned-pebble-path.middlewares=polygon-mainnet-bor-pruned-pebble-path-stripprefix, ipallowlist
+
+  polygon-mainnet-firehose:
+    image: ${POLYGON_FIREETH_IMAGE:-ghcr.io/streamingfast/firehose-ethereum}:${POLYGON_MAINNET_FIREETH_VERSION:-v2.11.9-polygon-v1.4.1-fh2.4-3}
+    expose:
+      - 10015
+      - 10014
+    environment:
+      - ${POLYGON_MAINNET_FIREETH_BLOCKS_STORE:-/firehose-data/storage/merged-blocks}
+    entrypoint: [sh, -c, exec fireeth start firehose index-builder relayer merger $@, _]
+    command:
+      - --log-to-file=false
+      - --relayer-source=http://polygon-mainnet:10010
+    restart: unless-stopped
+    depends_on:
+      - polygon-mainnet
+    networks:
+      - chains
+    volumes:
+      - ${POLYGON_MAINNET_FIREETH_DATA:-polygon-mainnet-fireeth}:/firehose-data
+    logging: *logging-defaults
+    labels:
+      - traefik.enable=true
+      - traefik.http.services.polygon-mainnet-bor-pruned-pebble-path-firehose.loadbalancer.server.scheme=h2c
+      - traefik.http.routers.polygon-mainnet-bor-pruned-pebble-path-firehose.service=polygon-mainnet-bor-pruned-pebble-path-firehose
+      - traefik.http.services.polygon-mainnet-bor-pruned-pebble-path-firehose.loadbalancer.server.port=10015
+      - traefik.http.routers.polygon-mainnet-bor-pruned-pebble-path-firehose.entrypoints=grpc
+      - ${NO_SSL:-traefik.http.routers.polygon-mainnet-bor-pruned-pebble-path-firehose.tls.certresolver=myresolver}
+      - traefik.http.routers.polygon-mainnet-bor-pruned-pebble-path-firehose.rule=Host(`polygon-mainnet-firehose.${DOMAIN}`)
+      - traefik.http.routers.polygon-mainnet-bor-pruned-pebble-path-firehose.middlewares=ipallowlist
+
+  polygon-mainnet-events:
+    image: ${POLYGON_FIREETH_IMAGE:-0xpolygon/bor}:${POLYGON_MAINNET_FIREETH_VERSION:-2.0.3}
+    expose:
+      - 10016
+    entrypoint: [sh, -c, exec fireeth start substreams-tier-1 substreams-tier-2 $@, _]
+    command:
+      - --common-live-blocks-addr=http://polygon-mainnet-firehose:10014
+      - --log-to-file=false
+      - --substreams-rpc-endpoints=${POLYGON_MAINNET_FIREETH_ARCHIVE_RPC}
+    restart: unless-stopped
+    depends_on:
+      - polygon-mainnet
+    networks:
+      - chains
+    volumes:
+      - ${POLYGON_MAINNET_FIREETH_DATA:-polygon-mainnet-fireeth}:/firehose-data
+    logging: *logging-defaults
+    labels:
+      - traefik.enable=true
+      - traefik.http.services.polygon-mainnet-bor-pruned-pebble-path-events.loadbalancer.server.scheme=h2c
+      - traefik.http.routers.polygon-mainnet-bor-pruned-pebble-path-events.service=polygon-mainnet-bor-pruned-pebble-path-events
+      - traefik.http.services.polygon-mainnet-bor-pruned-pebble-path-events.loadbalancer.server.port=10016
+      - traefik.http.routers.polygon-mainnet-bor-pruned-pebble-path-events.entrypoints=grpc
+      - ${NO_SSL:-traefik.http.routers.polygon-mainnet-bor-pruned-pebble-path-events.tls.certresolver=myresolver}
+      - traefik.http.routers.polygon-mainnet-bor-pruned-pebble-path-events.rule=Host(`polygon-mainnet-events.${DOMAIN}`)
+      - traefik.http.routers.polygon-mainnet-bor-pruned-pebble-path-events.middlewares=ipallowlist
+
+volumes:
+  polygon-mainnet-bor-pruned-pebble-path:
+  polygon-mainnet-bor-pruned-pebble-path_fireeth:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: polygon
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...