StakeSquid/ethereum-rpc-docker
1
0
Fork 0
Code Issues Pull Requests 3 Packages Projects Releases Wiki Activity

fix: bitcoin rpcallowip IPv4, babylon BLS pre-create, tac peers+cosmos RPC

Browse Source 
- Add -rpcallowip=0.0.0.0/0 family-wide via bitcoind template regen
- Pre-create empty-password BLS key in babylon init.sh (v4.3.0 EOF fix)
- TAC: seeds+persistent_peers, CometBFT :26657 traefik, protocol cosmos

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Claude Agent
2026-07-02 16:03:51 +00:00
parent 75b931461d
commit cb7bb80490
15 changed files with 35 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
babylon/scripts/init.sh
View File

@@ -25,6 +25,13 @@ else
ct_log "already initialized, continuing" ct_log "already initialized, continuing"
fi fi
# v4.x start prompts for a BLS password if no key exists; RPC replicas never sign
# checkpoints, so pre-create an empty-password key before the first start.
if [ ! -f "$CONFIG_DIR/bls_key.json" ]; then
ct_log "pre-creating BLS key (no password — RPC replica)"
babylond create-bls-key --home "$HOME_DIR" --no-bls-password
fi
# Serve RPC on all interfaces (dshackle/traefik upstream); default is 127.0.0.1. # Serve RPC on all interfaces (dshackle/traefik upstream); default is 127.0.0.1.
sed -i '/^\[rpc\]/,/^\[/{s|^laddr = .*|laddr = "tcp://0.0.0.0:26657"|}' "$CONFIG_DIR/config.toml" sed -i '/^\[rpc\]/,/^\[/{s|^laddr = .*|laddr = "tcp://0.0.0.0:26657"|}' "$CONFIG_DIR/config.toml"

1
bitcoin-cash/bitcoind/bitcoin-cash-mainnet-bitcoind-full.yml
View File

@@ -60,6 +60,7 @@ services:
- -externalip=${IP} - -externalip=${IP}
- -port=10863 - -port=10863
- -printtoconsole - -printtoconsole
- -rpcallowip=0.0.0.0/0
- -rpcallowip=::/0 - -rpcallowip=::/0
- -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7 - -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7
- -rpcbind=0.0.0.0 - -rpcbind=0.0.0.0

1
bitcoin-cash/bitcoind/bitcoin-cash-testnet-bitcoind-full.yml
View File

@@ -60,6 +60,7 @@ services:
- -externalip=${IP} - -externalip=${IP}
- -port=14363 - -port=14363
- -printtoconsole - -printtoconsole
- -rpcallowip=0.0.0.0/0
- -rpcallowip=::/0 - -rpcallowip=::/0
- -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7 - -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7
- -rpcbind=0.0.0.0 - -rpcbind=0.0.0.0

1
bitcoin/bitcoind/bitcoin-mainnet-bitcoind-full.yml
View File

@@ -63,6 +63,7 @@ services:
- -maxconnections=64 - -maxconnections=64
- -port=12518 - -port=12518
- -printtoconsole - -printtoconsole
- -rpcallowip=0.0.0.0/0
- -rpcallowip=::/0 - -rpcallowip=::/0
- -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7 - -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7
- -rpcbind=0.0.0.0 - -rpcbind=0.0.0.0

1
bitcoin/bitcoind/bitcoin-testnet-bitcoind-full.yml
View File

@@ -63,6 +63,7 @@ services:
- -maxconnections=64 - -maxconnections=64
- -port=13668 - -port=13668
- -printtoconsole - -printtoconsole
- -rpcallowip=0.0.0.0/0
- -rpcallowip=::/0 - -rpcallowip=::/0
- -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7 - -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7
- -rpcbind=0.0.0.0 - -rpcbind=0.0.0.0

1
dash/dashd/dash-mainnet-dashd-full.yml
View File

@@ -62,6 +62,7 @@ services:
- -externalip=${IP} - -externalip=${IP}
- -port=11650 - -port=11650
- -printtoconsole - -printtoconsole
- -rpcallowip=0.0.0.0/0
- -rpcallowip=::/0 - -rpcallowip=::/0
- -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7 - -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7
- -rpcbind=0.0.0.0 - -rpcbind=0.0.0.0

1
digibyte/digibyted/digibyte-mainnet-digibyted-full.yml
View File

@@ -66,6 +66,7 @@ services:
- -externalip=${IP} - -externalip=${IP}
- -port=11254 - -port=11254
- -printtoconsole - -printtoconsole
- -rpcallowip=0.0.0.0/0
- -rpcallowip=::/0 - -rpcallowip=::/0
- -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7 - -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7
- -rpcbind=0.0.0.0 - -rpcbind=0.0.0.0

1
dogecoin/dogecoind/dogecoin-mainnet-dogecoind-full.yml
View File

@@ -60,6 +60,7 @@ services:
- -externalip=${IP} - -externalip=${IP}
- -port=12577 - -port=12577
- -printtoconsole - -printtoconsole
- -rpcallowip=0.0.0.0/0
- -rpcallowip=::/0 - -rpcallowip=::/0
- -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7 - -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7
- -rpcbind=0.0.0.0 - -rpcbind=0.0.0.0

1
dogecoin/dogecoind/dogecoin-testnet-dogecoind-full.yml
View File

@@ -60,6 +60,7 @@ services:
- -externalip=${IP} - -externalip=${IP}
- -port=10859 - -port=10859
- -printtoconsole - -printtoconsole
- -rpcallowip=0.0.0.0/0
- -rpcallowip=::/0 - -rpcallowip=::/0
- -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7 - -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7
- -rpcbind=0.0.0.0 - -rpcbind=0.0.0.0

1
litecoin/litecoind/litecoin-mainnet-litecoind-full.yml
View File

@@ -60,6 +60,7 @@ services:
- -externalip=${IP} - -externalip=${IP}
- -port=10159 - -port=10159
- -printtoconsole - -printtoconsole
- -rpcallowip=0.0.0.0/0
- -rpcallowip=::/0 - -rpcallowip=::/0
- -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7 - -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7
- -rpcbind=0.0.0.0 - -rpcbind=0.0.0.0

1
litecoin/litecoind/litecoin-testnet-litecoind-full.yml
View File

@@ -60,6 +60,7 @@ services:
- -externalip=${IP} - -externalip=${IP}
- -port=10051 - -port=10051
- -printtoconsole - -printtoconsole
- -rpcallowip=0.0.0.0/0
- -rpcallowip=::/0 - -rpcallowip=::/0
- -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7 - -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7
- -rpcbind=0.0.0.0 - -rpcbind=0.0.0.0

4
reference-rpc-endpoint.json
View File

@@ -3409,7 +3409,7 @@
] ]
}, },
"tac": { "tac": {
"protocol": "eth", "protocol": "cosmos",
"id": 239, "id": 239,
"block_time_ms": 1000, "block_time_ms": 1000,
"lagging_lag": 2, "lagging_lag": 2,
@@ -3422,7 +3422,7 @@
] ]
}, },
"tac-spb": { "tac-spb": {
"protocol": "eth", "protocol": "cosmos",
"id": 2391, "id": 2391,
"block_time_ms": 1000, "block_time_ms": 1000,
"lagging_lag": 2, "lagging_lag": 2,

4
tac/scripts/init.sh
View File

@@ -24,7 +24,11 @@ else
ct_log "already initialized, continuing" ct_log "already initialized, continuing"
fi fi
# Serve CometBFT RPC on all interfaces (dshackle/traefik upstream); default is 127.0.0.1.
sed -i '/^\[rpc\]/,/^\[/{s|^laddr = .*|laddr = "tcp://0.0.0.0:26657"|}' "$CONFIG_DIR/config.toml"
ct_patch_p2p "$CONFIG_DIR/config.toml" "$IP" "${P2P_PORT:-26656}" ct_patch_p2p "$CONFIG_DIR/config.toml" "$IP" "${P2P_PORT:-26656}"
ct_merge_seeds "$CONFIG_DIR/config.toml" "$SEEDS"
ct_set_persistent_peers "$CONFIG_DIR/config.toml" "$PERSISTENT_PEERS" ct_set_persistent_peers "$CONFIG_DIR/config.toml" "$PERSISTENT_PEERS"
ct_set_moniker "$CONFIG_DIR/config.toml" "$MONIKER" ct_set_moniker "$CONFIG_DIR/config.toml" "$MONIKER"
ct_configure_statesync "$CONFIG_DIR/config.toml" "$STATESYNC_RPC" ct_configure_statesync "$CONFIG_DIR/config.toml" "$STATESYNC_RPC"

13
tac/tacchaind/tac-mainnet-tacchaind-pruned.yml
View File

@@ -53,8 +53,7 @@ services:
- 10283:10283 - 10283:10283
- 10283:10283/udp - 10283:10283/udp
expose: expose:
- 8545 - 26657
- 8546
- 6065 - 6065
environment: environment:
- API=eth,net,web3,txpool,debug - API=eth,net,web3,txpool,debug
@@ -64,7 +63,8 @@ services:
- MIN_GAS=25000000000utac - MIN_GAS=25000000000utac
- MONIKER=d${DOMAIN:-local} - MONIKER=d${DOMAIN:-local}
- P2P_PORT=10283 - P2P_PORT=10283
- PERSISTENT_PEERS=d0a80c43a10a6b60475864728db6d9ba4ead42d2@107.6.113.60:58960,10550a03e4f7fa487c78fbd07e0770e2b0f085c7@64.46.115.78:58960,0efae9d157f0ef60ad7d25507d6939799f832e34@173.244.202.99:58960,78079166d06e345dbf4a5c932ee3c69a04148e92@107.6.91.38:58960 - PERSISTENT_PEERS=d0a80c43a10a6b60475864728db6d9ba4ead42d2@107.6.113.60:58960,10550a03e4f7fa487c78fbd07e0770e2b0f085c7@64.46.115.78:58960,0efae9d157f0ef60ad7d25507d6939799f832e34@69.4.239.26:58960,78079166d06e345dbf4a5c932ee3c69a04148e92@107.6.91.38:58960,6b30bd943854f7e6bb1719e47e225db1b82d50b0@89.168.125.111:26656,d88a9cbab1cdf51735854bf5a527aaed9c4bb0ee@95.217.208.137:26656
- SEEDS=186e207d2c95e94a44ff613770aa269dac876013@65.108.201.240:32156
- STATESYNC_RPC=https://tendermint.rpc.tac.build - STATESYNC_RPC=https://tendermint.rpc.tac.build
restart: unless-stopped restart: unless-stopped
stop_grace_period: 5m stop_grace_period: 5m
@@ -81,7 +81,7 @@ services:
- prometheus-scrape.path=/metrics - prometheus-scrape.path=/metrics
- traefik.enable=true - traefik.enable=true
- traefik.http.middlewares.tac-mainnet-tacchaind-pruned-stripprefix.stripprefix.prefixes=/tac-mainnet - traefik.http.middlewares.tac-mainnet-tacchaind-pruned-stripprefix.stripprefix.prefixes=/tac-mainnet
- traefik.http.services.tac-mainnet-tacchaind-pruned.loadbalancer.server.port=8545 - traefik.http.services.tac-mainnet-tacchaind-pruned.loadbalancer.server.port=26657
- ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned.entrypoints=websecure} - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned.entrypoints=websecure}
- ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned.tls.certresolver=myresolver} - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned.tls.certresolver=myresolver}
- ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned.rule=Host(`$DOMAIN`) && (Path(`/tac-mainnet`) || Path(`/tac-mainnet/`))} - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned.rule=Host(`$DOMAIN`) && (Path(`/tac-mainnet`) || Path(`/tac-mainnet/`))}
@@ -89,14 +89,15 @@ services:
- traefik.http.routers.tac-mainnet-tacchaind-pruned.middlewares=tac-mainnet-tacchaind-pruned-stripprefix, ipallowlist - traefik.http.routers.tac-mainnet-tacchaind-pruned.middlewares=tac-mainnet-tacchaind-pruned-stripprefix, ipallowlist
- traefik.http.routers.tac-mainnet-tacchaind-pruned.priority=50 # gets any request that is not GET with UPGRADE header - traefik.http.routers.tac-mainnet-tacchaind-pruned.priority=50 # gets any request that is not GET with UPGRADE header
- traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.priority=100 # answers GET requests first - traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.priority=100 # answers GET requests first
- traefik.http.services.tac-mainnet-tacchaind-pruned-ws.loadbalancer.server.port=8546 - traefik.http.middlewares.tac-mainnet-tacchaind-pruned-set-ws-path.replacepath.path=/websocket
- traefik.http.services.tac-mainnet-tacchaind-pruned-ws.loadbalancer.server.port=26657
- traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.service=tac-mainnet-tacchaind-pruned-ws - traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.service=tac-mainnet-tacchaind-pruned-ws
- traefik.http.routers.tac-mainnet-tacchaind-pruned.service=tac-mainnet-tacchaind-pruned - traefik.http.routers.tac-mainnet-tacchaind-pruned.service=tac-mainnet-tacchaind-pruned
- ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.entrypoints=websecure} - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.entrypoints=websecure}
- ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.tls.certresolver=myresolver} - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.tls.certresolver=myresolver}
- ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/tac-mainnet`) || Path(`/tac-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)} - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/tac-mainnet`) || Path(`/tac-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
- ${NO_SSL:+traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.rule=(Path(`/tac-mainnet`) || Path(`/tac-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)} - ${NO_SSL:+traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.rule=(Path(`/tac-mainnet`) || Path(`/tac-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
- traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.middlewares=tac-mainnet-tacchaind-pruned-stripprefix, ipallowlist - traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.middlewares=tac-mainnet-tacchaind-pruned-stripprefix, tac-mainnet-tacchaind-pruned-set-ws-path, ipallowlist
volumes: volumes:
tac-mainnet-tacchaind-pruned: tac-mainnet-tacchaind-pruned:

10
tac/tacchaind/tac-spb-tacchaind-pruned.yml
View File

@@ -53,8 +53,7 @@ services:
- 14331:14331 - 14331:14331
- 14331:14331/udp - 14331:14331/udp
expose: expose:
- 8545 - 26657
- 8546
- 6065 - 6065
environment: environment:
- API=eth,net,web3,txpool,debug - API=eth,net,web3,txpool,debug
@@ -81,7 +80,7 @@ services:
- prometheus-scrape.path=/metrics - prometheus-scrape.path=/metrics
- traefik.enable=true - traefik.enable=true
- traefik.http.middlewares.tac-spb-tacchaind-pruned-stripprefix.stripprefix.prefixes=/tac-spb - traefik.http.middlewares.tac-spb-tacchaind-pruned-stripprefix.stripprefix.prefixes=/tac-spb
- traefik.http.services.tac-spb-tacchaind-pruned.loadbalancer.server.port=8545 - traefik.http.services.tac-spb-tacchaind-pruned.loadbalancer.server.port=26657
- ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned.entrypoints=websecure} - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned.entrypoints=websecure}
- ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned.tls.certresolver=myresolver} - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned.tls.certresolver=myresolver}
- ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned.rule=Host(`$DOMAIN`) && (Path(`/tac-spb`) || Path(`/tac-spb/`))} - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned.rule=Host(`$DOMAIN`) && (Path(`/tac-spb`) || Path(`/tac-spb/`))}
@@ -89,14 +88,15 @@ services:
- traefik.http.routers.tac-spb-tacchaind-pruned.middlewares=tac-spb-tacchaind-pruned-stripprefix, ipallowlist - traefik.http.routers.tac-spb-tacchaind-pruned.middlewares=tac-spb-tacchaind-pruned-stripprefix, ipallowlist
- traefik.http.routers.tac-spb-tacchaind-pruned.priority=50 # gets any request that is not GET with UPGRADE header - traefik.http.routers.tac-spb-tacchaind-pruned.priority=50 # gets any request that is not GET with UPGRADE header
- traefik.http.routers.tac-spb-tacchaind-pruned-ws.priority=100 # answers GET requests first - traefik.http.routers.tac-spb-tacchaind-pruned-ws.priority=100 # answers GET requests first
- traefik.http.services.tac-spb-tacchaind-pruned-ws.loadbalancer.server.port=8546 - traefik.http.middlewares.tac-spb-tacchaind-pruned-set-ws-path.replacepath.path=/websocket
- traefik.http.services.tac-spb-tacchaind-pruned-ws.loadbalancer.server.port=26657
- traefik.http.routers.tac-spb-tacchaind-pruned-ws.service=tac-spb-tacchaind-pruned-ws - traefik.http.routers.tac-spb-tacchaind-pruned-ws.service=tac-spb-tacchaind-pruned-ws
- traefik.http.routers.tac-spb-tacchaind-pruned.service=tac-spb-tacchaind-pruned - traefik.http.routers.tac-spb-tacchaind-pruned.service=tac-spb-tacchaind-pruned
- ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned-ws.entrypoints=websecure} - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned-ws.entrypoints=websecure}
- ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned-ws.tls.certresolver=myresolver} - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned-ws.tls.certresolver=myresolver}
- ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/tac-spb`) || Path(`/tac-spb/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)} - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/tac-spb`) || Path(`/tac-spb/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
- ${NO_SSL:+traefik.http.routers.tac-spb-tacchaind-pruned-ws.rule=(Path(`/tac-spb`) || Path(`/tac-spb/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)} - ${NO_SSL:+traefik.http.routers.tac-spb-tacchaind-pruned-ws.rule=(Path(`/tac-spb`) || Path(`/tac-spb/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
- traefik.http.routers.tac-spb-tacchaind-pruned-ws.middlewares=tac-spb-tacchaind-pruned-stripprefix, ipallowlist - traefik.http.routers.tac-spb-tacchaind-pruned-ws.middlewares=tac-spb-tacchaind-pruned-stripprefix, tac-spb-tacchaind-pruned-set-ws-path, ipallowlist
volumes: volumes:
tac-spb-tacchaind-pruned: tac-spb-tacchaind-pruned: