From cf26455d3a2d9b78c49504911a6268596a939322 Mon Sep 17 00:00:00 2001
From: Claude Agent <claude@stakesquid.eu>
Date: Wed, 8 Jul 2026 11:49:07 +0000
Subject: [PATCH] deploy: regenerate compose from vibe-node main 07b0472e0d1a

---
 ...abstract-mainnet-external-node-archive.yml |  2 +-
 .../abstract-mainnet-external-node-pruned.yml |  2 +-
 ...abstract-testnet-external-node-archive.yml |  2 +-
 .../abstract-testnet-external-node-pruned.yml |  2 +-
 arc/reth/arc-testnet-reth-archive-trace.yml   |  1 -
 arc/reth/arc-testnet-reth-pruned-trace.yml    |  1 -
 arc/reth/arc-testnet-reth-pruned.yml          |  1 -
 .../go/avalanche-fuji-go-archive-leveldb.yml  |  2 +-
 ...avalanche-fuji-go-pruned-leveldb.prune.yml |  2 +-
 .../go/avalanche-fuji-go-pruned-leveldb.yml   |  2 +-
 ...valanche-fuji-go-pruned-pebbledb.prune.yml |  2 +-
 .../go/avalanche-fuji-go-pruned-pebbledb.yml  |  2 +-
 .../avalanche-mainnet-go-archive-leveldb.yml  |  2 +-
 ...lanche-mainnet-go-pruned-leveldb.prune.yml |  2 +-
 .../avalanche-mainnet-go-pruned-leveldb.yml   |  2 +-
 ...anche-mainnet-go-pruned-pebbledb.prune.yml |  2 +-
 .../avalanche-mainnet-go-pruned-pebbledb.yml  |  2 +-
 .../babylon-mainnet-babylond-pruned.yml       |  2 +-
 cosmos/gaiad/cosmos-mainnet-gaiad-pruned.yml  |  2 +-
 ...os-zkevm-mainnet-external-node-archive.yml |  2 +-
 ...nos-zkevm-mainnet-external-node-pruned.yml |  2 +-
 ...os-zkevm-testnet-external-node-archive.yml |  2 +-
 ...nos-zkevm-testnet-external-node-pruned.yml |  2 +-
 .../cronos/cronos-mainnet-cronos-pruned.yml   |  2 +-
 .../ethereum-classic-besu-pruned-bonsai.yml   |  2 +-
 ...eum-mainnet-besu-pruned-bonsai--nimbus.yml |  2 +-
 haqq/haqq/haqq-mainnet-haqq-pruned.yml        |  2 +-
 jovay/aldaba/jovay-mainnet-aldaba-pruned.yml  |  2 +-
 jovay/aldaba/jovay-sepolia-aldaba-pruned.yml  |  2 +-
 kite/go/kite-mainnet-go-pruned-leveldb.yml    |  2 +-
 .../lens-mainnet-external-node-archive.yml    |  2 +-
 .../lens-mainnet-external-node-pruned.yml     |  2 +-
 .../lens-testnet-external-node-archive.yml    |  2 +-
 .../lens-testnet-external-node-pruned.yml     |  2 +-
 .../besu/linea-mainnet-besu-pruned-bonsai.yml |  2 +-
 .../besu/linea-sepolia-besu-pruned-bonsai.yml |  2 +-
 ...inea-mainnet-geth-archive-leveldb-hash.yml | 10 ++++++++++
 .../linea-mainnet-geth-pruned-pebble-path.yml | 10 ++++++++++
 ...da-mainnet-l2geth-archive-leveldb-hash.yml |  2 +-
 ...da-sepolia-l2geth-archive-leveldb-hash.yml |  2 +-
 .../ronin-mainnet-op-reth-archive-trace.yml   |  2 +-
 .../ronin-saigon-op-reth-archive-trace.yml    |  2 +-
 op/reth/ronin-saigon-op-reth-pruned-trace.yml |  2 +-
 ...unichain-mainnet-op-reth-archive-trace.yml | 20 ++++++++++++-------
 ...unichain-sepolia-op-reth-archive-trace.yml | 20 ++++++++++++-------
 sei/sei/sei-mainnet-sei-pruned.yml            |  2 +-
 sei/sei/sei-testnet-sei-pruned.yml            |  2 +-
 .../sophon-mainnet-external-node-archive.yml  |  2 +-
 .../sophon-mainnet-external-node-pruned.yml   |  2 +-
 .../juno/starknet-mainnet-juno-archive.yml    |  2 +-
 .../juno/starknet-sepolia-juno-archive.yml    |  2 +-
 .../starknet-mainnet-madara-archive.yml       |  2 +-
 .../madara/starknet-mainnet-madara-pruned.yml |  2 +-
 .../starknet-sepolia-madara-archive.yml       |  2 +-
 .../madara/starknet-sepolia-madara-pruned.yml |  2 +-
 .../starknet-mainnet-pathfinder-archive.yml   |  2 +-
 ...knet-mainnet-pathfinder-pruned-history.yml |  2 +-
 .../starknet-mainnet-pathfinder-pruned.yml    |  2 +-
 .../starknet-sepolia-pathfinder-archive.yml   |  2 +-
 ...knet-sepolia-pathfinder-pruned-history.yml |  2 +-
 .../starknet-sepolia-pathfinder-pruned.yml    |  2 +-
 .../tac-mainnet-tacchaind-pruned.yml          |  2 +-
 tac/tacchaind/tac-spb-tacchaind-pruned.yml    |  2 +-
 ...tion-mainnet-node-archive-leveldb-hash.yml |  2 +-
 ...ction-mainnet-node-pruned-leveldb-hash.yml |  2 +-
 ...tion-testnet-node-archive-leveldb-hash.yml |  2 +-
 ...ction-testnet-node-pruned-leveldb-hash.yml |  2 +-
 ...sync-era-boojnet-external-node-archive.yml |  2 +-
 ...ksync-era-boojnet-external-node-pruned.yml |  2 +-
 ...sync-era-mainnet-external-node-archive.yml |  2 +-
 ...ksync-era-mainnet-external-node-pruned.yml |  2 +-
 71 files changed, 110 insertions(+), 81 deletions(-)

diff --git a/abstract/external-node/abstract-mainnet-external-node-archive.yml b/abstract/external-node/abstract-mainnet-external-node-archive.yml
index d401158a..e7f04261 100644
--- a/abstract/external-node/abstract-mainnet-external-node-archive.yml
+++ b/abstract/external-node/abstract-mainnet-external-node-archive.yml
@@ -98,7 +98,7 @@ services:
       - traefik.http.routers.abstract-mainnet-external-node-archive.service=abstract-mainnet-external-node-archive
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-mainnet-archive`) || Path(`/abstract-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.abstract-mainnet-external-node-archive-ws.rule=(Path(`/abstract-mainnet-archive`) || Path(`/abstract-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.abstract-mainnet-external-node-archive-ws.middlewares=abstract-mainnet-external-node-archive-stripprefix, ipallowlist
diff --git a/abstract/external-node/abstract-mainnet-external-node-pruned.yml b/abstract/external-node/abstract-mainnet-external-node-pruned.yml
index d16ad171..6280609c 100644
--- a/abstract/external-node/abstract-mainnet-external-node-pruned.yml
+++ b/abstract/external-node/abstract-mainnet-external-node-pruned.yml
@@ -98,7 +98,7 @@ services:
       - traefik.http.routers.abstract-mainnet-external-node-pruned.service=abstract-mainnet-external-node-pruned
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-mainnet`) || Path(`/abstract-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.abstract-mainnet-external-node-pruned-ws.rule=(Path(`/abstract-mainnet`) || Path(`/abstract-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.abstract-mainnet-external-node-pruned-ws.middlewares=abstract-mainnet-external-node-pruned-stripprefix, ipallowlist
diff --git a/abstract/external-node/abstract-testnet-external-node-archive.yml b/abstract/external-node/abstract-testnet-external-node-archive.yml
index 584a8cd7..080cfe28 100644
--- a/abstract/external-node/abstract-testnet-external-node-archive.yml
+++ b/abstract/external-node/abstract-testnet-external-node-archive.yml
@@ -98,7 +98,7 @@ services:
       - traefik.http.routers.abstract-testnet-external-node-archive.service=abstract-testnet-external-node-archive
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-testnet-archive`) || Path(`/abstract-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.abstract-testnet-external-node-archive-ws.rule=(Path(`/abstract-testnet-archive`) || Path(`/abstract-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.abstract-testnet-external-node-archive-ws.middlewares=abstract-testnet-external-node-archive-stripprefix, ipallowlist
diff --git a/abstract/external-node/abstract-testnet-external-node-pruned.yml b/abstract/external-node/abstract-testnet-external-node-pruned.yml
index 1da83d56..04652bca 100644
--- a/abstract/external-node/abstract-testnet-external-node-pruned.yml
+++ b/abstract/external-node/abstract-testnet-external-node-pruned.yml
@@ -98,7 +98,7 @@ services:
       - traefik.http.routers.abstract-testnet-external-node-pruned.service=abstract-testnet-external-node-pruned
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-testnet`) || Path(`/abstract-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.abstract-testnet-external-node-pruned-ws.rule=(Path(`/abstract-testnet`) || Path(`/abstract-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.abstract-testnet-external-node-pruned-ws.middlewares=abstract-testnet-external-node-pruned-stripprefix, ipallowlist
diff --git a/arc/reth/arc-testnet-reth-archive-trace.yml b/arc/reth/arc-testnet-reth-archive-trace.yml
index 747195e6..c39194ad 100644
--- a/arc/reth/arc-testnet-reth-archive-trace.yml
+++ b/arc/reth/arc-testnet-reth-archive-trace.yml
@@ -132,7 +132,6 @@ services:
       - --execution-socket=/sockets/auth.ipc
       - --follow
       - --follow.endpoint=https://rpc.quicknode.testnet.arc.network,wss=rpc.quicknode.testnet.arc.network
-      - --follow.endpoint=https://rpc.drpc.testnet.arc.network,wss=rpc.drpc.testnet.arc.network
       - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
       - --full
       - --home=/data/consensus
diff --git a/arc/reth/arc-testnet-reth-pruned-trace.yml b/arc/reth/arc-testnet-reth-pruned-trace.yml
index 461f4280..ff732101 100644
--- a/arc/reth/arc-testnet-reth-pruned-trace.yml
+++ b/arc/reth/arc-testnet-reth-pruned-trace.yml
@@ -133,7 +133,6 @@ services:
       - --execution-socket=/sockets/auth.ipc
       - --follow
       - --follow.endpoint=https://rpc.quicknode.testnet.arc.network,wss=rpc.quicknode.testnet.arc.network
-      - --follow.endpoint=https://rpc.drpc.testnet.arc.network,wss=rpc.drpc.testnet.arc.network
       - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
       - --full
       - --home=/data/consensus
diff --git a/arc/reth/arc-testnet-reth-pruned.yml b/arc/reth/arc-testnet-reth-pruned.yml
index f199cb08..3fe22616 100644
--- a/arc/reth/arc-testnet-reth-pruned.yml
+++ b/arc/reth/arc-testnet-reth-pruned.yml
@@ -133,7 +133,6 @@ services:
       - --execution-socket=/sockets/auth.ipc
       - --follow
       - --follow.endpoint=https://rpc.quicknode.testnet.arc.network,wss=rpc.quicknode.testnet.arc.network
-      - --follow.endpoint=https://rpc.drpc.testnet.arc.network,wss=rpc.drpc.testnet.arc.network
       - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
       - --full
       - --home=/data/consensus
diff --git a/avalanche/go/avalanche-fuji-go-archive-leveldb.yml b/avalanche/go/avalanche-fuji-go-archive-leveldb.yml
index 240955d0..9db31efd 100644
--- a/avalanche/go/avalanche-fuji-go-archive-leveldb.yml
+++ b/avalanche/go/avalanche-fuji-go-archive-leveldb.yml
@@ -87,7 +87,7 @@ services:
       - traefik.http.routers.avalanche-fuji-go-archive-leveldb.service=avalanche-fuji-go-archive-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji-archive`) || Path(`/avalanche-fuji-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.rule=(Path(`/avalanche-fuji-archive`) || Path(`/avalanche-fuji-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.middlewares=avalanche-fuji-go-archive-leveldb-stripprefix, avalanche-fuji-go-archive-leveldb-set-ws-path, ipallowlist
diff --git a/avalanche/go/avalanche-fuji-go-pruned-leveldb.prune.yml b/avalanche/go/avalanche-fuji-go-pruned-leveldb.prune.yml
index 3acc2140..b3d0d7a0 100644
--- a/avalanche/go/avalanche-fuji-go-pruned-leveldb.prune.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-leveldb.prune.yml
@@ -87,7 +87,7 @@ services:
       - traefik.http.routers.avalanche-fuji-go-pruned-leveldb.service=avalanche-fuji-go-pruned-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.middlewares=avalanche-fuji-go-pruned-leveldb-stripprefix, avalanche-fuji-go-pruned-leveldb-set-ws-path, ipallowlist
diff --git a/avalanche/go/avalanche-fuji-go-pruned-leveldb.yml b/avalanche/go/avalanche-fuji-go-pruned-leveldb.yml
index 57e54b5f..c2ad110c 100644
--- a/avalanche/go/avalanche-fuji-go-pruned-leveldb.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-leveldb.yml
@@ -87,7 +87,7 @@ services:
       - traefik.http.routers.avalanche-fuji-go-pruned-leveldb.service=avalanche-fuji-go-pruned-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.middlewares=avalanche-fuji-go-pruned-leveldb-stripprefix, avalanche-fuji-go-pruned-leveldb-set-ws-path, ipallowlist
diff --git a/avalanche/go/avalanche-fuji-go-pruned-pebbledb.prune.yml b/avalanche/go/avalanche-fuji-go-pruned-pebbledb.prune.yml
index 853ec9df..0b26ce8e 100644
--- a/avalanche/go/avalanche-fuji-go-pruned-pebbledb.prune.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-pebbledb.prune.yml
@@ -87,7 +87,7 @@ services:
       - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.service=avalanche-fuji-go-pruned-pebbledb
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.middlewares=avalanche-fuji-go-pruned-pebbledb-stripprefix, avalanche-fuji-go-pruned-pebbledb-set-ws-path, ipallowlist
diff --git a/avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml b/avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml
index a69d21ea..4edd4c26 100644
--- a/avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml
@@ -87,7 +87,7 @@ services:
       - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.service=avalanche-fuji-go-pruned-pebbledb
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.middlewares=avalanche-fuji-go-pruned-pebbledb-stripprefix, avalanche-fuji-go-pruned-pebbledb-set-ws-path, ipallowlist
diff --git a/avalanche/go/avalanche-mainnet-go-archive-leveldb.yml b/avalanche/go/avalanche-mainnet-go-archive-leveldb.yml
index aa1e7034..1a7a5993 100644
--- a/avalanche/go/avalanche-mainnet-go-archive-leveldb.yml
+++ b/avalanche/go/avalanche-mainnet-go-archive-leveldb.yml
@@ -87,7 +87,7 @@ services:
       - traefik.http.routers.avalanche-mainnet-go-archive-leveldb.service=avalanche-mainnet-go-archive-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet-archive`) || Path(`/avalanche-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.rule=(Path(`/avalanche-mainnet-archive`) || Path(`/avalanche-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.middlewares=avalanche-mainnet-go-archive-leveldb-stripprefix, avalanche-mainnet-go-archive-leveldb-set-ws-path, ipallowlist
diff --git a/avalanche/go/avalanche-mainnet-go-pruned-leveldb.prune.yml b/avalanche/go/avalanche-mainnet-go-pruned-leveldb.prune.yml
index 5a2aa74e..68d426a3 100644
--- a/avalanche/go/avalanche-mainnet-go-pruned-leveldb.prune.yml
+++ b/avalanche/go/avalanche-mainnet-go-pruned-leveldb.prune.yml
@@ -87,7 +87,7 @@ services:
       - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb.service=avalanche-mainnet-go-pruned-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.middlewares=avalanche-mainnet-go-pruned-leveldb-stripprefix, avalanche-mainnet-go-pruned-leveldb-set-ws-path, ipallowlist
diff --git a/avalanche/go/avalanche-mainnet-go-pruned-leveldb.yml b/avalanche/go/avalanche-mainnet-go-pruned-leveldb.yml
index a99b6110..f4369261 100644
--- a/avalanche/go/avalanche-mainnet-go-pruned-leveldb.yml
+++ b/avalanche/go/avalanche-mainnet-go-pruned-leveldb.yml
@@ -87,7 +87,7 @@ services:
       - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb.service=avalanche-mainnet-go-pruned-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.middlewares=avalanche-mainnet-go-pruned-leveldb-stripprefix, avalanche-mainnet-go-pruned-leveldb-set-ws-path, ipallowlist
diff --git a/avalanche/go/avalanche-mainnet-go-pruned-pebbledb.prune.yml b/avalanche/go/avalanche-mainnet-go-pruned-pebbledb.prune.yml
index 3c744b6a..9890b052 100644
--- a/avalanche/go/avalanche-mainnet-go-pruned-pebbledb.prune.yml
+++ b/avalanche/go/avalanche-mainnet-go-pruned-pebbledb.prune.yml
@@ -87,7 +87,7 @@ services:
       - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb.service=avalanche-mainnet-go-pruned-pebbledb
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.middlewares=avalanche-mainnet-go-pruned-pebbledb-stripprefix, avalanche-mainnet-go-pruned-pebbledb-set-ws-path, ipallowlist
diff --git a/avalanche/go/avalanche-mainnet-go-pruned-pebbledb.yml b/avalanche/go/avalanche-mainnet-go-pruned-pebbledb.yml
index 4dc3deb6..e3af5bf2 100644
--- a/avalanche/go/avalanche-mainnet-go-pruned-pebbledb.yml
+++ b/avalanche/go/avalanche-mainnet-go-pruned-pebbledb.yml
@@ -87,7 +87,7 @@ services:
       - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb.service=avalanche-mainnet-go-pruned-pebbledb
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.middlewares=avalanche-mainnet-go-pruned-pebbledb-stripprefix, avalanche-mainnet-go-pruned-pebbledb-set-ws-path, ipallowlist
diff --git a/babylon/babylond/babylon-mainnet-babylond-pruned.yml b/babylon/babylond/babylon-mainnet-babylond-pruned.yml
index 78a41dbb..9b5d483e 100644
--- a/babylon/babylond/babylon-mainnet-babylond-pruned.yml
+++ b/babylon/babylond/babylon-mainnet-babylond-pruned.yml
@@ -96,7 +96,7 @@ services:
       - traefik.http.routers.babylon-mainnet-babylond-pruned.service=babylon-mainnet-babylond-pruned
       - ${NO_SSL:-traefik.http.routers.babylon-mainnet-babylond-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.babylon-mainnet-babylond-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.babylon-mainnet-babylond-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/babylon-mainnet-pruned`) || Path(`/babylon-mainnet-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.babylon-mainnet-babylond-pruned-ws.rule=(Path(`/babylon-mainnet-pruned`) || Path(`/babylon-mainnet-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.babylon-mainnet-babylond-pruned-ws.middlewares=babylon-mainnet-babylond-pruned-stripprefix, babylon-mainnet-babylond-pruned-set-ws-path, ipallowlist
diff --git a/cosmos/gaiad/cosmos-mainnet-gaiad-pruned.yml b/cosmos/gaiad/cosmos-mainnet-gaiad-pruned.yml
index f257eb24..e5e31350 100644
--- a/cosmos/gaiad/cosmos-mainnet-gaiad-pruned.yml
+++ b/cosmos/gaiad/cosmos-mainnet-gaiad-pruned.yml
@@ -96,7 +96,7 @@ services:
       - traefik.http.routers.cosmos-mainnet-gaiad-pruned.service=cosmos-mainnet-gaiad-pruned
       - ${NO_SSL:-traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/cosmos-mainnet-pruned`) || Path(`/cosmos-mainnet-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.rule=(Path(`/cosmos-mainnet-pruned`) || Path(`/cosmos-mainnet-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.middlewares=cosmos-mainnet-gaiad-pruned-stripprefix, cosmos-mainnet-gaiad-pruned-set-ws-path, ipallowlist
diff --git a/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-archive.yml b/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-archive.yml
index 7651a443..6c18b55f 100644
--- a/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-archive.yml
+++ b/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-archive.yml
@@ -102,7 +102,7 @@ services:
       - traefik.http.routers.cronos-zkevm-mainnet-external-node-archive.service=cronos-zkevm-mainnet-external-node-archive
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-mainnet-archive`) || Path(`/cronos-zkevm-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.rule=(Path(`/cronos-zkevm-mainnet-archive`) || Path(`/cronos-zkevm-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.middlewares=cronos-zkevm-mainnet-external-node-archive-stripprefix, ipallowlist
diff --git a/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-pruned.yml b/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-pruned.yml
index c8746391..4c361bf5 100644
--- a/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-pruned.yml
+++ b/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-pruned.yml
@@ -102,7 +102,7 @@ services:
       - traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned.service=cronos-zkevm-mainnet-external-node-pruned
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-mainnet`) || Path(`/cronos-zkevm-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.rule=(Path(`/cronos-zkevm-mainnet`) || Path(`/cronos-zkevm-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.middlewares=cronos-zkevm-mainnet-external-node-pruned-stripprefix, ipallowlist
diff --git a/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-archive.yml b/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-archive.yml
index 5970f857..443b1887 100644
--- a/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-archive.yml
+++ b/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-archive.yml
@@ -102,7 +102,7 @@ services:
       - traefik.http.routers.cronos-zkevm-testnet-external-node-archive.service=cronos-zkevm-testnet-external-node-archive
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-testnet-archive`) || Path(`/cronos-zkevm-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.rule=(Path(`/cronos-zkevm-testnet-archive`) || Path(`/cronos-zkevm-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.middlewares=cronos-zkevm-testnet-external-node-archive-stripprefix, ipallowlist
diff --git a/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-pruned.yml b/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-pruned.yml
index 3df1ed4d..ebc4d1eb 100644
--- a/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-pruned.yml
+++ b/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-pruned.yml
@@ -102,7 +102,7 @@ services:
       - traefik.http.routers.cronos-zkevm-testnet-external-node-pruned.service=cronos-zkevm-testnet-external-node-pruned
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-testnet`) || Path(`/cronos-zkevm-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.rule=(Path(`/cronos-zkevm-testnet`) || Path(`/cronos-zkevm-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.middlewares=cronos-zkevm-testnet-external-node-pruned-stripprefix, ipallowlist
diff --git a/cronos/cronos/cronos-mainnet-cronos-pruned.yml b/cronos/cronos/cronos-mainnet-cronos-pruned.yml
index d4834f74..d7ab600c 100644
--- a/cronos/cronos/cronos-mainnet-cronos-pruned.yml
+++ b/cronos/cronos/cronos-mainnet-cronos-pruned.yml
@@ -105,7 +105,7 @@ services:
       - traefik.http.routers.cronos-mainnet-cronos-pruned.service=cronos-mainnet-cronos-pruned
       - ${NO_SSL:-traefik.http.routers.cronos-mainnet-cronos-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.cronos-mainnet-cronos-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.cronos-mainnet-cronos-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-mainnet`) || Path(`/cronos-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.cronos-mainnet-cronos-pruned-ws.rule=(Path(`/cronos-mainnet`) || Path(`/cronos-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.cronos-mainnet-cronos-pruned-ws.middlewares=cronos-mainnet-cronos-pruned-stripprefix, ipallowlist
diff --git a/ethereum/besu/ethereum-classic-besu-pruned-bonsai.yml b/ethereum/besu/ethereum-classic-besu-pruned-bonsai.yml
index 60190a21..1d8d3dfc 100644
--- a/ethereum/besu/ethereum-classic-besu-pruned-bonsai.yml
+++ b/ethereum/besu/ethereum-classic-besu-pruned-bonsai.yml
@@ -103,7 +103,7 @@ services:
       - traefik.http.routers.ethereum-classic-besu-pruned-bonsai.service=ethereum-classic-besu-pruned-bonsai
       - ${NO_SSL:-traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/ethereum-classic-besu`) || Path(`/ethereum-classic-besu/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.rule=(Path(`/ethereum-classic-besu`) || Path(`/ethereum-classic-besu/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.middlewares=ethereum-classic-besu-pruned-bonsai-stripprefix, ipallowlist
diff --git a/ethereum/besu/ethereum-mainnet-besu-pruned-bonsai--nimbus.yml b/ethereum/besu/ethereum-mainnet-besu-pruned-bonsai--nimbus.yml
index 2bff2366..c8451e2c 100644
--- a/ethereum/besu/ethereum-mainnet-besu-pruned-bonsai--nimbus.yml
+++ b/ethereum/besu/ethereum-mainnet-besu-pruned-bonsai--nimbus.yml
@@ -109,7 +109,7 @@ services:
       - traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai.service=ethereum-mainnet-besu-pruned-bonsai
       - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/ethereum-mainnet-besu`) || Path(`/ethereum-mainnet-besu/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.rule=(Path(`/ethereum-mainnet-besu`) || Path(`/ethereum-mainnet-besu/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.middlewares=ethereum-mainnet-besu-pruned-bonsai-stripprefix, ipallowlist
diff --git a/haqq/haqq/haqq-mainnet-haqq-pruned.yml b/haqq/haqq/haqq-mainnet-haqq-pruned.yml
index dd16be72..283ec27b 100644
--- a/haqq/haqq/haqq-mainnet-haqq-pruned.yml
+++ b/haqq/haqq/haqq-mainnet-haqq-pruned.yml
@@ -92,7 +92,7 @@ services:
       - traefik.http.routers.haqq-mainnet-haqq-pruned.service=haqq-mainnet-haqq-pruned
       - ${NO_SSL:-traefik.http.routers.haqq-mainnet-haqq-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.haqq-mainnet-haqq-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.haqq-mainnet-haqq-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/haqq-mainnet`) || Path(`/haqq-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.haqq-mainnet-haqq-pruned-ws.rule=(Path(`/haqq-mainnet`) || Path(`/haqq-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.haqq-mainnet-haqq-pruned-ws.middlewares=haqq-mainnet-haqq-pruned-stripprefix, ipallowlist
diff --git a/jovay/aldaba/jovay-mainnet-aldaba-pruned.yml b/jovay/aldaba/jovay-mainnet-aldaba-pruned.yml
index 0fa487cd..a97faef0 100644
--- a/jovay/aldaba/jovay-mainnet-aldaba-pruned.yml
+++ b/jovay/aldaba/jovay-mainnet-aldaba-pruned.yml
@@ -140,7 +140,7 @@ services:
       - traefik.http.routers.jovay-mainnet-aldaba-pruned.service=jovay-mainnet-aldaba-pruned
       - ${NO_SSL:-traefik.http.routers.jovay-mainnet-aldaba-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.jovay-mainnet-aldaba-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.jovay-mainnet-aldaba-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/jovay-mainnet`) || Path(`/jovay-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.jovay-mainnet-aldaba-pruned-ws.rule=(Path(`/jovay-mainnet`) || Path(`/jovay-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.jovay-mainnet-aldaba-pruned-ws.middlewares=jovay-mainnet-aldaba-pruned-stripprefix, ipallowlist
diff --git a/jovay/aldaba/jovay-sepolia-aldaba-pruned.yml b/jovay/aldaba/jovay-sepolia-aldaba-pruned.yml
index 05d4f70a..f624ee52 100644
--- a/jovay/aldaba/jovay-sepolia-aldaba-pruned.yml
+++ b/jovay/aldaba/jovay-sepolia-aldaba-pruned.yml
@@ -140,7 +140,7 @@ services:
       - traefik.http.routers.jovay-sepolia-aldaba-pruned.service=jovay-sepolia-aldaba-pruned
       - ${NO_SSL:-traefik.http.routers.jovay-sepolia-aldaba-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.jovay-sepolia-aldaba-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.jovay-sepolia-aldaba-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/jovay-sepolia`) || Path(`/jovay-sepolia/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.jovay-sepolia-aldaba-pruned-ws.rule=(Path(`/jovay-sepolia`) || Path(`/jovay-sepolia/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.jovay-sepolia-aldaba-pruned-ws.middlewares=jovay-sepolia-aldaba-pruned-stripprefix, ipallowlist
diff --git a/kite/go/kite-mainnet-go-pruned-leveldb.yml b/kite/go/kite-mainnet-go-pruned-leveldb.yml
index 6d8649bb..8fc4e286 100644
--- a/kite/go/kite-mainnet-go-pruned-leveldb.yml
+++ b/kite/go/kite-mainnet-go-pruned-leveldb.yml
@@ -91,7 +91,7 @@ services:
       - traefik.http.routers.kite-mainnet-go-pruned-leveldb.service=kite-mainnet-go-pruned-leveldb
       - ${NO_SSL:-traefik.http.routers.kite-mainnet-go-pruned-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.kite-mainnet-go-pruned-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.kite-mainnet-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/kite-mainnet`) || Path(`/kite-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.kite-mainnet-go-pruned-leveldb-ws.rule=(Path(`/kite-mainnet`) || Path(`/kite-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.kite-mainnet-go-pruned-leveldb-ws.middlewares=kite-mainnet-go-pruned-leveldb-stripprefix, kite-mainnet-go-pruned-leveldb-set-ws-path, ipallowlist
diff --git a/lens/external-node/lens-mainnet-external-node-archive.yml b/lens/external-node/lens-mainnet-external-node-archive.yml
index 254bf875..eb4ac09d 100644
--- a/lens/external-node/lens-mainnet-external-node-archive.yml
+++ b/lens/external-node/lens-mainnet-external-node-archive.yml
@@ -107,7 +107,7 @@ services:
       - traefik.http.routers.lens-mainnet-external-node-archive.service=lens-mainnet-external-node-archive
       - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-mainnet-archive`) || Path(`/lens-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.lens-mainnet-external-node-archive-ws.rule=(Path(`/lens-mainnet-archive`) || Path(`/lens-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.lens-mainnet-external-node-archive-ws.middlewares=lens-mainnet-external-node-archive-stripprefix, ipallowlist
diff --git a/lens/external-node/lens-mainnet-external-node-pruned.yml b/lens/external-node/lens-mainnet-external-node-pruned.yml
index 0891bf47..3c89a401 100644
--- a/lens/external-node/lens-mainnet-external-node-pruned.yml
+++ b/lens/external-node/lens-mainnet-external-node-pruned.yml
@@ -107,7 +107,7 @@ services:
       - traefik.http.routers.lens-mainnet-external-node-pruned.service=lens-mainnet-external-node-pruned
       - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-mainnet`) || Path(`/lens-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.lens-mainnet-external-node-pruned-ws.rule=(Path(`/lens-mainnet`) || Path(`/lens-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.lens-mainnet-external-node-pruned-ws.middlewares=lens-mainnet-external-node-pruned-stripprefix, ipallowlist
diff --git a/lens/external-node/lens-testnet-external-node-archive.yml b/lens/external-node/lens-testnet-external-node-archive.yml
index ecb44f39..4bbfed9c 100644
--- a/lens/external-node/lens-testnet-external-node-archive.yml
+++ b/lens/external-node/lens-testnet-external-node-archive.yml
@@ -106,7 +106,7 @@ services:
       - traefik.http.routers.lens-testnet-external-node-archive.service=lens-testnet-external-node-archive
       - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-testnet-archive`) || Path(`/lens-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.lens-testnet-external-node-archive-ws.rule=(Path(`/lens-testnet-archive`) || Path(`/lens-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.lens-testnet-external-node-archive-ws.middlewares=lens-testnet-external-node-archive-stripprefix, ipallowlist
diff --git a/lens/external-node/lens-testnet-external-node-pruned.yml b/lens/external-node/lens-testnet-external-node-pruned.yml
index 5d5a6dcc..cb1621f5 100644
--- a/lens/external-node/lens-testnet-external-node-pruned.yml
+++ b/lens/external-node/lens-testnet-external-node-pruned.yml
@@ -106,7 +106,7 @@ services:
       - traefik.http.routers.lens-testnet-external-node-pruned.service=lens-testnet-external-node-pruned
       - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-testnet`) || Path(`/lens-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.lens-testnet-external-node-pruned-ws.rule=(Path(`/lens-testnet`) || Path(`/lens-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.lens-testnet-external-node-pruned-ws.middlewares=lens-testnet-external-node-pruned-stripprefix, ipallowlist
diff --git a/linea/besu/linea-mainnet-besu-pruned-bonsai.yml b/linea/besu/linea-mainnet-besu-pruned-bonsai.yml
index 28e7d418..6275861f 100644
--- a/linea/besu/linea-mainnet-besu-pruned-bonsai.yml
+++ b/linea/besu/linea-mainnet-besu-pruned-bonsai.yml
@@ -111,7 +111,7 @@ services:
       - traefik.http.routers.linea-mainnet-besu-pruned-bonsai.service=linea-mainnet-besu-pruned-bonsai
       - ${NO_SSL:-traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/linea-mainnet`) || Path(`/linea-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.rule=(Path(`/linea-mainnet`) || Path(`/linea-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.middlewares=linea-mainnet-besu-pruned-bonsai-stripprefix, ipallowlist
diff --git a/linea/besu/linea-sepolia-besu-pruned-bonsai.yml b/linea/besu/linea-sepolia-besu-pruned-bonsai.yml
index 32771841..adfc16ed 100644
--- a/linea/besu/linea-sepolia-besu-pruned-bonsai.yml
+++ b/linea/besu/linea-sepolia-besu-pruned-bonsai.yml
@@ -111,7 +111,7 @@ services:
       - traefik.http.routers.linea-sepolia-besu-pruned-bonsai.service=linea-sepolia-besu-pruned-bonsai
       - ${NO_SSL:-traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/linea-sepolia`) || Path(`/linea-sepolia/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.rule=(Path(`/linea-sepolia`) || Path(`/linea-sepolia/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.middlewares=linea-sepolia-besu-pruned-bonsai-stripprefix, ipallowlist
diff --git a/linea/geth/linea-mainnet-geth-archive-leveldb-hash.yml b/linea/geth/linea-mainnet-geth-archive-leveldb-hash.yml
index af949bde..8173f861 100644
--- a/linea/geth/linea-mainnet-geth-archive-leveldb-hash.yml
+++ b/linea/geth/linea-mainnet-geth-archive-leveldb-hash.yml
@@ -90,8 +90,14 @@ services:
     volumes:
       - ${LINEA_MAINNET_GETH_ARCHIVE_LEVELDB_HASH_DATA:-linea-mainnet-geth-archive-leveldb-hash}:/root/.ethereum
       - ./linea/mainnet:/config
+      - ./linea/scripts/engine-healthcheck.sh:/engine-healthcheck.sh:ro
       - .jwtsecret:/jwtsecret:ro
       - /slowdisk:/slowdisk
+    healthcheck:
+      test: [CMD-SHELL, /engine-healthcheck.sh]
+      interval: 5s
+      start_period: 60s
+      retries: 30
     logging: *logging-defaults
     labels:
       - prometheus-scrape.enabled=true
@@ -130,6 +136,10 @@ services:
         envsubst < /config/maru/config.toml.template > /config.toml
         exec java -Dlog4j2.configurationFile=/config/maru/log4j.xml -jar /opt/consensys/maru/maru.jar --network=linea-mainnet --config=/config.toml "$@"
     restart: unless-stopped
+    depends_on:
+      linea-mainnet-geth-archive:
+        condition: service_healthy
+        restart: true
     networks:
       - chains
     volumes:
diff --git a/linea/geth/linea-mainnet-geth-pruned-pebble-path.yml b/linea/geth/linea-mainnet-geth-pruned-pebble-path.yml
index 8a720114..c78eab5b 100644
--- a/linea/geth/linea-mainnet-geth-pruned-pebble-path.yml
+++ b/linea/geth/linea-mainnet-geth-pruned-pebble-path.yml
@@ -90,8 +90,14 @@ services:
     volumes:
       - ${LINEA_MAINNET_GETH_PRUNED_PEBBLE_PATH_DATA:-linea-mainnet-geth-pruned-pebble-path}:/root/.ethereum
       - ./linea/mainnet:/config
+      - ./linea/scripts/engine-healthcheck.sh:/engine-healthcheck.sh:ro
       - .jwtsecret:/jwtsecret:ro
       - /slowdisk:/slowdisk
+    healthcheck:
+      test: [CMD-SHELL, /engine-healthcheck.sh]
+      interval: 5s
+      start_period: 60s
+      retries: 30
     logging: *logging-defaults
     labels:
       - prometheus-scrape.enabled=true
@@ -130,6 +136,10 @@ services:
         envsubst < /config/maru/config.toml.template > /config.toml
         exec java -Dlog4j2.configurationFile=/config/maru/log4j.xml -jar /opt/consensys/maru/maru.jar --network=linea-mainnet --config=/config.toml "$@"
     restart: unless-stopped
+    depends_on:
+      linea-mainnet-geth:
+        condition: service_healthy
+        restart: true
     networks:
       - chains
     volumes:
diff --git a/metis-andromeda/l2geth/metis-andromeda-mainnet-l2geth-archive-leveldb-hash.yml b/metis-andromeda/l2geth/metis-andromeda-mainnet-l2geth-archive-leveldb-hash.yml
index 8c19075a..ac41d972 100644
--- a/metis-andromeda/l2geth/metis-andromeda-mainnet-l2geth-archive-leveldb-hash.yml
+++ b/metis-andromeda/l2geth/metis-andromeda-mainnet-l2geth-archive-leveldb-hash.yml
@@ -121,7 +121,7 @@ services:
       - traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash.service=metis-andromeda-mainnet-l2geth-archive-leveldb-hash
       - ${NO_SSL:-traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.rule=Host(`$DOMAIN`) && (Path(`/metis-andromeda-mainnet-archive`) || Path(`/metis-andromeda-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.rule=(Path(`/metis-andromeda-mainnet-archive`) || Path(`/metis-andromeda-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.middlewares=metis-andromeda-mainnet-l2geth-archive-leveldb-hash-stripprefix, ipallowlist
diff --git a/metis-andromeda/l2geth/metis-andromeda-sepolia-l2geth-archive-leveldb-hash.yml b/metis-andromeda/l2geth/metis-andromeda-sepolia-l2geth-archive-leveldb-hash.yml
index bb092045..8794c002 100644
--- a/metis-andromeda/l2geth/metis-andromeda-sepolia-l2geth-archive-leveldb-hash.yml
+++ b/metis-andromeda/l2geth/metis-andromeda-sepolia-l2geth-archive-leveldb-hash.yml
@@ -121,7 +121,7 @@ services:
       - traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash.service=metis-andromeda-sepolia-l2geth-archive-leveldb-hash
       - ${NO_SSL:-traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.rule=Host(`$DOMAIN`) && (Path(`/metis-andromeda-sepolia-archive`) || Path(`/metis-andromeda-sepolia-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.rule=(Path(`/metis-andromeda-sepolia-archive`) || Path(`/metis-andromeda-sepolia-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.middlewares=metis-andromeda-sepolia-l2geth-archive-leveldb-hash-stripprefix, ipallowlist
diff --git a/op/reth/ronin-mainnet-op-reth-archive-trace.yml b/op/reth/ronin-mainnet-op-reth-archive-trace.yml
index 78bccade..ca127b03 100644
--- a/op/reth/ronin-mainnet-op-reth-archive-trace.yml
+++ b/op/reth/ronin-mainnet-op-reth-archive-trace.yml
@@ -111,7 +111,7 @@ services:
     shm_size: 2gb
 
   ronin-mainnet-node:
-    image: ${RONIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${RONIN_MAINNET_NODE_VERSION:-v1.16.5}
+    image: ${RONIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${RONIN_MAINNET_NODE_VERSION:-v1.19.2}
     ports:
       - 19792:19792
       - 19792:19792/udp
diff --git a/op/reth/ronin-saigon-op-reth-archive-trace.yml b/op/reth/ronin-saigon-op-reth-archive-trace.yml
index b7a95a29..eabf59a7 100644
--- a/op/reth/ronin-saigon-op-reth-archive-trace.yml
+++ b/op/reth/ronin-saigon-op-reth-archive-trace.yml
@@ -110,7 +110,7 @@ services:
     shm_size: 2gb
 
   ronin-saigon-node:
-    image: ${RONIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${RONIN_SAIGON_NODE_VERSION:-v1.16.5}
+    image: ${RONIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${RONIN_SAIGON_NODE_VERSION:-v1.19.2}
     ports:
       - 16763:16763
       - 16763:16763/udp
diff --git a/op/reth/ronin-saigon-op-reth-pruned-trace.yml b/op/reth/ronin-saigon-op-reth-pruned-trace.yml
index 0d581b9d..0c87157f 100644
--- a/op/reth/ronin-saigon-op-reth-pruned-trace.yml
+++ b/op/reth/ronin-saigon-op-reth-pruned-trace.yml
@@ -111,7 +111,7 @@ services:
     shm_size: 2gb
 
   ronin-saigon-pruned-node:
-    image: ${RONIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${RONIN_SAIGON_NODE_VERSION:-v1.16.5}
+    image: ${RONIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${RONIN_SAIGON_NODE_VERSION:-v1.19.2}
     ports:
       - 18446:18446
       - 18446:18446/udp
diff --git a/op/reth/unichain-mainnet-op-reth-archive-trace.yml b/op/reth/unichain-mainnet-op-reth-archive-trace.yml
index 183b95d3..3acec215 100644
--- a/op/reth/unichain-mainnet-op-reth-archive-trace.yml
+++ b/op/reth/unichain-mainnet-op-reth-archive-trace.yml
@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   unichain-mainnet-op-reth:
-    image: ${UNICHAIN_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${UNICHAIN_MAINNET_RETH_VERSION:-v2.3.2-rc.2}
+    image: ${UNICHAIN_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${UNICHAIN_MAINNET_RETH_VERSION:-v2.3.2}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -57,6 +57,10 @@ services:
     command:
       - --chain=unichain
       - --datadir=/root/.local/share/reth
+      - --discovery.addr=0.0.0.0
+      - --discovery.port=10472
+      - --discovery.v5.addr=0.0.0.0
+      - --discovery.v5.port=10472
       - --engine.cross-block-cache-size=${UNICHAIN_MAINNET_RETH_STATE_CACHE:-4096}
       - --max-inbound-peers=50
       - --max-outbound-peers=50
@@ -107,7 +111,7 @@ services:
     shm_size: 2gb
 
   unichain-mainnet-op-reth-node:
-    image: ${UNICHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${UNICHAIN_MAINNET_NODE_VERSION:-v1.19.0}
+    image: ${UNICHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${UNICHAIN_MAINNET_NODE_VERSION:-v1.19.1}
     ports:
       - 15472:15472
       - 15472:15472/udp
@@ -133,14 +137,16 @@ services:
       - OP_NODE_P2P_LISTEN_UDP_PORT=15472
       - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
       - OP_NODE_RPC_ADDR=0.0.0.0
-      - OP_NODE_RPC_PORT=8545
+      - OP_NODE_RPC_PORT=9545
       - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
       - OP_NODE_SYNCMODE=execution-layer
       - OP_NODE_VERIFIER_L1_CONFS=0
     entrypoint: [op-node]
     restart: unless-stopped
     depends_on:
-      - unichain-mainnet-op-reth
+      unichain-mainnet-op-reth:
+        condition: service_started
+        restart: true
     networks:
       - chains
     volumes:
@@ -152,7 +158,7 @@ services:
       - prometheus-scrape.path=/metrics
       - traefik.enable=true
       - traefik.http.middlewares.unichain-mainnet-op-reth-archive-trace-node-stripprefix.stripprefix.prefixes=/unichain-mainnet-op-reth/node
-      - traefik.http.services.unichain-mainnet-op-reth-archive-trace-node.loadbalancer.server.port=8547
+      - traefik.http.services.unichain-mainnet-op-reth-archive-trace-node.loadbalancer.server.port=9545
       - ${NO_SSL:-traefik.http.routers.unichain-mainnet-op-reth-archive-trace-node.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.unichain-mainnet-op-reth-archive-trace-node.tls.certresolver=myresolver}
       - ${NO_SSL:-traefik.http.routers.unichain-mainnet-op-reth-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/unichain-mainnet-op-reth/node`)}
diff --git a/op/reth/unichain-sepolia-op-reth-archive-trace.yml b/op/reth/unichain-sepolia-op-reth-archive-trace.yml
index d5e42341..aedd01d7 100644
--- a/op/reth/unichain-sepolia-op-reth-archive-trace.yml
+++ b/op/reth/unichain-sepolia-op-reth-archive-trace.yml
@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   unichain-sepolia-op-reth:
-    image: ${UNICHAIN_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${UNICHAIN_SEPOLIA_RETH_VERSION:-v2.3.2-rc.2}
+    image: ${UNICHAIN_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${UNICHAIN_SEPOLIA_RETH_VERSION:-v2.3.2}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -57,6 +57,10 @@ services:
     command:
       - --chain=unichain-sepolia
       - --datadir=/root/.local/share/reth
+      - --discovery.addr=0.0.0.0
+      - --discovery.port=11190
+      - --discovery.v5.addr=0.0.0.0
+      - --discovery.v5.port=11190
       - --engine.cross-block-cache-size=${UNICHAIN_SEPOLIA_RETH_STATE_CACHE:-4096}
       - --max-inbound-peers=50
       - --max-outbound-peers=50
@@ -107,7 +111,7 @@ services:
     shm_size: 2gb
 
   unichain-sepolia-op-reth-node:
-    image: ${UNICHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${UNICHAIN_SEPOLIA_NODE_VERSION:-v1.19.0}
+    image: ${UNICHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${UNICHAIN_SEPOLIA_NODE_VERSION:-v1.19.1}
     ports:
       - 16190:16190
       - 16190:16190/udp
@@ -134,14 +138,16 @@ services:
       - OP_NODE_P2P_LISTEN_UDP_PORT=16190
       - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
       - OP_NODE_RPC_ADDR=0.0.0.0
-      - OP_NODE_RPC_PORT=8545
+      - OP_NODE_RPC_PORT=9545
       - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
       - OP_NODE_SYNCMODE=execution-layer
       - OP_NODE_VERIFIER_L1_CONFS=0
     entrypoint: [op-node]
     restart: unless-stopped
     depends_on:
-      - unichain-sepolia-op-reth
+      unichain-sepolia-op-reth:
+        condition: service_started
+        restart: true
     networks:
       - chains
     volumes:
@@ -153,7 +159,7 @@ services:
       - prometheus-scrape.path=/metrics
       - traefik.enable=true
       - traefik.http.middlewares.unichain-sepolia-op-reth-archive-trace-node-stripprefix.stripprefix.prefixes=/unichain-sepolia-op-reth/node
-      - traefik.http.services.unichain-sepolia-op-reth-archive-trace-node.loadbalancer.server.port=8547
+      - traefik.http.services.unichain-sepolia-op-reth-archive-trace-node.loadbalancer.server.port=9545
       - ${NO_SSL:-traefik.http.routers.unichain-sepolia-op-reth-archive-trace-node.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.unichain-sepolia-op-reth-archive-trace-node.tls.certresolver=myresolver}
       - ${NO_SSL:-traefik.http.routers.unichain-sepolia-op-reth-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/unichain-sepolia-op-reth/node`)}
diff --git a/sei/sei/sei-mainnet-sei-pruned.yml b/sei/sei/sei-mainnet-sei-pruned.yml
index 25b82d42..295f9bf1 100644
--- a/sei/sei/sei-mainnet-sei-pruned.yml
+++ b/sei/sei/sei-mainnet-sei-pruned.yml
@@ -91,7 +91,7 @@ services:
       - traefik.http.routers.sei-mainnet-sei-pruned.service=sei-mainnet-sei-pruned
       - ${NO_SSL:-traefik.http.routers.sei-mainnet-sei-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.sei-mainnet-sei-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.sei-mainnet-sei-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/sei-mainnet-sei-pruned`) || Path(`/sei-mainnet-sei-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.sei-mainnet-sei-pruned-ws.rule=(Path(`/sei-mainnet-sei-pruned`) || Path(`/sei-mainnet-sei-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.sei-mainnet-sei-pruned-ws.middlewares=sei-mainnet-sei-pruned-stripprefix, ipallowlist
diff --git a/sei/sei/sei-testnet-sei-pruned.yml b/sei/sei/sei-testnet-sei-pruned.yml
index 6058e2b6..45d4d50d 100644
--- a/sei/sei/sei-testnet-sei-pruned.yml
+++ b/sei/sei/sei-testnet-sei-pruned.yml
@@ -91,7 +91,7 @@ services:
       - traefik.http.routers.sei-testnet-sei-pruned.service=sei-testnet-sei-pruned
       - ${NO_SSL:-traefik.http.routers.sei-testnet-sei-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.sei-testnet-sei-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.sei-testnet-sei-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/sei-testnet-sei-pruned`) || Path(`/sei-testnet-sei-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.sei-testnet-sei-pruned-ws.rule=(Path(`/sei-testnet-sei-pruned`) || Path(`/sei-testnet-sei-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.sei-testnet-sei-pruned-ws.middlewares=sei-testnet-sei-pruned-stripprefix, ipallowlist
diff --git a/sophon/external-node/sophon-mainnet-external-node-archive.yml b/sophon/external-node/sophon-mainnet-external-node-archive.yml
index f07281c7..bd71d1e9 100644
--- a/sophon/external-node/sophon-mainnet-external-node-archive.yml
+++ b/sophon/external-node/sophon-mainnet-external-node-archive.yml
@@ -112,7 +112,7 @@ services:
       - traefik.http.routers.sophon-mainnet-external-node-archive.service=sophon-mainnet-external-node-archive
       - ${NO_SSL:-traefik.http.routers.sophon-mainnet-external-node-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.sophon-mainnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.sophon-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/sophon-mainnet-archive`) || Path(`/sophon-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.sophon-mainnet-external-node-archive-ws.rule=(Path(`/sophon-mainnet-archive`) || Path(`/sophon-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.sophon-mainnet-external-node-archive-ws.middlewares=sophon-mainnet-external-node-archive-stripprefix, ipallowlist
diff --git a/sophon/external-node/sophon-mainnet-external-node-pruned.yml b/sophon/external-node/sophon-mainnet-external-node-pruned.yml
index ed0c67a8..b1da644e 100644
--- a/sophon/external-node/sophon-mainnet-external-node-pruned.yml
+++ b/sophon/external-node/sophon-mainnet-external-node-pruned.yml
@@ -112,7 +112,7 @@ services:
       - traefik.http.routers.sophon-mainnet-external-node-pruned.service=sophon-mainnet-external-node-pruned
       - ${NO_SSL:-traefik.http.routers.sophon-mainnet-external-node-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.sophon-mainnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.sophon-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/sophon-mainnet`) || Path(`/sophon-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.sophon-mainnet-external-node-pruned-ws.rule=(Path(`/sophon-mainnet`) || Path(`/sophon-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.sophon-mainnet-external-node-pruned-ws.middlewares=sophon-mainnet-external-node-pruned-stripprefix, ipallowlist
diff --git a/starknet/juno/starknet-mainnet-juno-archive.yml b/starknet/juno/starknet-mainnet-juno-archive.yml
index 30b19023..fe290901 100644
--- a/starknet/juno/starknet-mainnet-juno-archive.yml
+++ b/starknet/juno/starknet-mainnet-juno-archive.yml
@@ -95,7 +95,7 @@ services:
       - traefik.http.routers.starknet-mainnet-juno-archive.service=starknet-mainnet-juno-archive
       - ${NO_SSL:-traefik.http.routers.starknet-mainnet-juno-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.starknet-mainnet-juno-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.starknet-mainnet-juno-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-mainnet-juno-archive`) || Path(`/starknet-mainnet-juno-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.starknet-mainnet-juno-archive-ws.rule=(Path(`/starknet-mainnet-juno-archive`) || Path(`/starknet-mainnet-juno-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.starknet-mainnet-juno-archive-ws.middlewares=starknet-mainnet-juno-archive-stripprefix, starknet-mainnet-juno-archive-set-ws-path, ipallowlist
diff --git a/starknet/juno/starknet-sepolia-juno-archive.yml b/starknet/juno/starknet-sepolia-juno-archive.yml
index 6f13ca7f..d36cb6a3 100644
--- a/starknet/juno/starknet-sepolia-juno-archive.yml
+++ b/starknet/juno/starknet-sepolia-juno-archive.yml
@@ -95,7 +95,7 @@ services:
       - traefik.http.routers.starknet-sepolia-juno-archive.service=starknet-sepolia-juno-archive
       - ${NO_SSL:-traefik.http.routers.starknet-sepolia-juno-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.starknet-sepolia-juno-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.starknet-sepolia-juno-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-sepolia-juno-archive`) || Path(`/starknet-sepolia-juno-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.starknet-sepolia-juno-archive-ws.rule=(Path(`/starknet-sepolia-juno-archive`) || Path(`/starknet-sepolia-juno-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.starknet-sepolia-juno-archive-ws.middlewares=starknet-sepolia-juno-archive-stripprefix, starknet-sepolia-juno-archive-set-ws-path, ipallowlist
diff --git a/starknet/madara/starknet-mainnet-madara-archive.yml b/starknet/madara/starknet-mainnet-madara-archive.yml
index c286ba02..d2c4d4a6 100644
--- a/starknet/madara/starknet-mainnet-madara-archive.yml
+++ b/starknet/madara/starknet-mainnet-madara-archive.yml
@@ -78,7 +78,7 @@ services:
       - traefik.http.routers.starknet-mainnet-madara-archive.service=starknet-mainnet-madara-archive
       - ${NO_SSL:-traefik.http.routers.starknet-mainnet-madara-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.starknet-mainnet-madara-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.starknet-mainnet-madara-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-mainnet-madara-archive`) || Path(`/starknet-mainnet-madara-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.starknet-mainnet-madara-archive-ws.rule=(Path(`/starknet-mainnet-madara-archive`) || Path(`/starknet-mainnet-madara-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.starknet-mainnet-madara-archive-ws.middlewares=starknet-mainnet-madara-archive-stripprefix, starknet-mainnet-madara-archive-set-ws-path, ipallowlist
diff --git a/starknet/madara/starknet-mainnet-madara-pruned.yml b/starknet/madara/starknet-mainnet-madara-pruned.yml
index 3d779bf9..17aed45c 100644
--- a/starknet/madara/starknet-mainnet-madara-pruned.yml
+++ b/starknet/madara/starknet-mainnet-madara-pruned.yml
@@ -78,7 +78,7 @@ services:
       - traefik.http.routers.starknet-mainnet-madara-pruned.service=starknet-mainnet-madara-pruned
       - ${NO_SSL:-traefik.http.routers.starknet-mainnet-madara-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.starknet-mainnet-madara-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.starknet-mainnet-madara-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-mainnet-madara-pruned`) || Path(`/starknet-mainnet-madara-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.starknet-mainnet-madara-pruned-ws.rule=(Path(`/starknet-mainnet-madara-pruned`) || Path(`/starknet-mainnet-madara-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.starknet-mainnet-madara-pruned-ws.middlewares=starknet-mainnet-madara-pruned-stripprefix, starknet-mainnet-madara-pruned-set-ws-path, ipallowlist
diff --git a/starknet/madara/starknet-sepolia-madara-archive.yml b/starknet/madara/starknet-sepolia-madara-archive.yml
index c2ac605d..67198cf4 100644
--- a/starknet/madara/starknet-sepolia-madara-archive.yml
+++ b/starknet/madara/starknet-sepolia-madara-archive.yml
@@ -78,7 +78,7 @@ services:
       - traefik.http.routers.starknet-sepolia-madara-archive.service=starknet-sepolia-madara-archive
       - ${NO_SSL:-traefik.http.routers.starknet-sepolia-madara-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.starknet-sepolia-madara-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.starknet-sepolia-madara-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-sepolia-madara-archive`) || Path(`/starknet-sepolia-madara-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.starknet-sepolia-madara-archive-ws.rule=(Path(`/starknet-sepolia-madara-archive`) || Path(`/starknet-sepolia-madara-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.starknet-sepolia-madara-archive-ws.middlewares=starknet-sepolia-madara-archive-stripprefix, starknet-sepolia-madara-archive-set-ws-path, ipallowlist
diff --git a/starknet/madara/starknet-sepolia-madara-pruned.yml b/starknet/madara/starknet-sepolia-madara-pruned.yml
index 44d6e770..ae24cf6d 100644
--- a/starknet/madara/starknet-sepolia-madara-pruned.yml
+++ b/starknet/madara/starknet-sepolia-madara-pruned.yml
@@ -78,7 +78,7 @@ services:
       - traefik.http.routers.starknet-sepolia-madara-pruned.service=starknet-sepolia-madara-pruned
       - ${NO_SSL:-traefik.http.routers.starknet-sepolia-madara-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.starknet-sepolia-madara-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.starknet-sepolia-madara-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-sepolia-madara-pruned`) || Path(`/starknet-sepolia-madara-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.starknet-sepolia-madara-pruned-ws.rule=(Path(`/starknet-sepolia-madara-pruned`) || Path(`/starknet-sepolia-madara-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.starknet-sepolia-madara-pruned-ws.middlewares=starknet-sepolia-madara-pruned-stripprefix, starknet-sepolia-madara-pruned-set-ws-path, ipallowlist
diff --git a/starknet/pathfinder/starknet-mainnet-pathfinder-archive.yml b/starknet/pathfinder/starknet-mainnet-pathfinder-archive.yml
index 8be716d0..d62f8d67 100644
--- a/starknet/pathfinder/starknet-mainnet-pathfinder-archive.yml
+++ b/starknet/pathfinder/starknet-mainnet-pathfinder-archive.yml
@@ -81,7 +81,7 @@ services:
       - traefik.http.routers.starknet-mainnet-pathfinder-archive.service=starknet-mainnet-pathfinder-archive
       - ${NO_SSL:-traefik.http.routers.starknet-mainnet-pathfinder-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.starknet-mainnet-pathfinder-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.starknet-mainnet-pathfinder-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-mainnet-pathfinder-archive`) || Path(`/starknet-mainnet-pathfinder-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.starknet-mainnet-pathfinder-archive-ws.rule=(Path(`/starknet-mainnet-pathfinder-archive`) || Path(`/starknet-mainnet-pathfinder-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.starknet-mainnet-pathfinder-archive-ws.middlewares=starknet-mainnet-pathfinder-archive-stripprefix, starknet-mainnet-pathfinder-archive-set-ws-path, ipallowlist
diff --git a/starknet/pathfinder/starknet-mainnet-pathfinder-pruned-history.yml b/starknet/pathfinder/starknet-mainnet-pathfinder-pruned-history.yml
index 94151d81..6bc477cd 100644
--- a/starknet/pathfinder/starknet-mainnet-pathfinder-pruned-history.yml
+++ b/starknet/pathfinder/starknet-mainnet-pathfinder-pruned-history.yml
@@ -80,7 +80,7 @@ services:
       - traefik.http.routers.starknet-mainnet-pathfinder-pruned-history.service=starknet-mainnet-pathfinder-pruned-history
       - ${NO_SSL:-traefik.http.routers.starknet-mainnet-pathfinder-pruned-history-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.starknet-mainnet-pathfinder-pruned-history-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.starknet-mainnet-pathfinder-pruned-history-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-mainnet-pathfinder-pruned`) || Path(`/starknet-mainnet-pathfinder-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.starknet-mainnet-pathfinder-pruned-history-ws.rule=(Path(`/starknet-mainnet-pathfinder-pruned`) || Path(`/starknet-mainnet-pathfinder-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.starknet-mainnet-pathfinder-pruned-history-ws.middlewares=starknet-mainnet-pathfinder-pruned-history-stripprefix, starknet-mainnet-pathfinder-pruned-history-set-ws-path, ipallowlist
diff --git a/starknet/pathfinder/starknet-mainnet-pathfinder-pruned.yml b/starknet/pathfinder/starknet-mainnet-pathfinder-pruned.yml
index 8e9ce8ea..f023addf 100644
--- a/starknet/pathfinder/starknet-mainnet-pathfinder-pruned.yml
+++ b/starknet/pathfinder/starknet-mainnet-pathfinder-pruned.yml
@@ -81,7 +81,7 @@ services:
       - traefik.http.routers.starknet-mainnet-pathfinder-pruned.service=starknet-mainnet-pathfinder-pruned
       - ${NO_SSL:-traefik.http.routers.starknet-mainnet-pathfinder-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.starknet-mainnet-pathfinder-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.starknet-mainnet-pathfinder-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-mainnet-pathfinder-pruned`) || Path(`/starknet-mainnet-pathfinder-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.starknet-mainnet-pathfinder-pruned-ws.rule=(Path(`/starknet-mainnet-pathfinder-pruned`) || Path(`/starknet-mainnet-pathfinder-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.starknet-mainnet-pathfinder-pruned-ws.middlewares=starknet-mainnet-pathfinder-pruned-stripprefix, starknet-mainnet-pathfinder-pruned-set-ws-path, ipallowlist
diff --git a/starknet/pathfinder/starknet-sepolia-pathfinder-archive.yml b/starknet/pathfinder/starknet-sepolia-pathfinder-archive.yml
index 352b1103..a1e12d3c 100644
--- a/starknet/pathfinder/starknet-sepolia-pathfinder-archive.yml
+++ b/starknet/pathfinder/starknet-sepolia-pathfinder-archive.yml
@@ -81,7 +81,7 @@ services:
       - traefik.http.routers.starknet-sepolia-pathfinder-archive.service=starknet-sepolia-pathfinder-archive
       - ${NO_SSL:-traefik.http.routers.starknet-sepolia-pathfinder-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.starknet-sepolia-pathfinder-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.starknet-sepolia-pathfinder-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-sepolia-pathfinder-archive`) || Path(`/starknet-sepolia-pathfinder-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.starknet-sepolia-pathfinder-archive-ws.rule=(Path(`/starknet-sepolia-pathfinder-archive`) || Path(`/starknet-sepolia-pathfinder-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.starknet-sepolia-pathfinder-archive-ws.middlewares=starknet-sepolia-pathfinder-archive-stripprefix, starknet-sepolia-pathfinder-archive-set-ws-path, ipallowlist
diff --git a/starknet/pathfinder/starknet-sepolia-pathfinder-pruned-history.yml b/starknet/pathfinder/starknet-sepolia-pathfinder-pruned-history.yml
index 9fcc0d81..16ab4c8b 100644
--- a/starknet/pathfinder/starknet-sepolia-pathfinder-pruned-history.yml
+++ b/starknet/pathfinder/starknet-sepolia-pathfinder-pruned-history.yml
@@ -80,7 +80,7 @@ services:
       - traefik.http.routers.starknet-sepolia-pathfinder-pruned-history.service=starknet-sepolia-pathfinder-pruned-history
       - ${NO_SSL:-traefik.http.routers.starknet-sepolia-pathfinder-pruned-history-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.starknet-sepolia-pathfinder-pruned-history-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.starknet-sepolia-pathfinder-pruned-history-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-sepolia-pathfinder-pruned`) || Path(`/starknet-sepolia-pathfinder-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.starknet-sepolia-pathfinder-pruned-history-ws.rule=(Path(`/starknet-sepolia-pathfinder-pruned`) || Path(`/starknet-sepolia-pathfinder-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.starknet-sepolia-pathfinder-pruned-history-ws.middlewares=starknet-sepolia-pathfinder-pruned-history-stripprefix, starknet-sepolia-pathfinder-pruned-history-set-ws-path, ipallowlist
diff --git a/starknet/pathfinder/starknet-sepolia-pathfinder-pruned.yml b/starknet/pathfinder/starknet-sepolia-pathfinder-pruned.yml
index 775a4470..51e4d878 100644
--- a/starknet/pathfinder/starknet-sepolia-pathfinder-pruned.yml
+++ b/starknet/pathfinder/starknet-sepolia-pathfinder-pruned.yml
@@ -81,7 +81,7 @@ services:
       - traefik.http.routers.starknet-sepolia-pathfinder-pruned.service=starknet-sepolia-pathfinder-pruned
       - ${NO_SSL:-traefik.http.routers.starknet-sepolia-pathfinder-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.starknet-sepolia-pathfinder-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.starknet-sepolia-pathfinder-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-sepolia-pathfinder-pruned`) || Path(`/starknet-sepolia-pathfinder-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.starknet-sepolia-pathfinder-pruned-ws.rule=(Path(`/starknet-sepolia-pathfinder-pruned`) || Path(`/starknet-sepolia-pathfinder-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.starknet-sepolia-pathfinder-pruned-ws.middlewares=starknet-sepolia-pathfinder-pruned-stripprefix, starknet-sepolia-pathfinder-pruned-set-ws-path, ipallowlist
diff --git a/tac/tacchaind/tac-mainnet-tacchaind-pruned.yml b/tac/tacchaind/tac-mainnet-tacchaind-pruned.yml
index 6b08b12c..7d7376e5 100644
--- a/tac/tacchaind/tac-mainnet-tacchaind-pruned.yml
+++ b/tac/tacchaind/tac-mainnet-tacchaind-pruned.yml
@@ -95,7 +95,7 @@ services:
       - traefik.http.routers.tac-mainnet-tacchaind-pruned.service=tac-mainnet-tacchaind-pruned
       - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/tac-mainnet`) || Path(`/tac-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.rule=(Path(`/tac-mainnet`) || Path(`/tac-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.middlewares=tac-mainnet-tacchaind-pruned-stripprefix, tac-mainnet-tacchaind-pruned-set-ws-path, ipallowlist
diff --git a/tac/tacchaind/tac-spb-tacchaind-pruned.yml b/tac/tacchaind/tac-spb-tacchaind-pruned.yml
index 3ba24b35..9cc6c870 100644
--- a/tac/tacchaind/tac-spb-tacchaind-pruned.yml
+++ b/tac/tacchaind/tac-spb-tacchaind-pruned.yml
@@ -94,7 +94,7 @@ services:
       - traefik.http.routers.tac-spb-tacchaind-pruned.service=tac-spb-tacchaind-pruned
       - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/tac-spb`) || Path(`/tac-spb/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.tac-spb-tacchaind-pruned-ws.rule=(Path(`/tac-spb`) || Path(`/tac-spb/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.tac-spb-tacchaind-pruned-ws.middlewares=tac-spb-tacchaind-pruned-stripprefix, tac-spb-tacchaind-pruned-set-ws-path, ipallowlist
diff --git a/viction/node/viction-mainnet-node-archive-leveldb-hash.yml b/viction/node/viction-mainnet-node-archive-leveldb-hash.yml
index ef8d0bd2..dc45ddfd 100644
--- a/viction/node/viction-mainnet-node-archive-leveldb-hash.yml
+++ b/viction/node/viction-mainnet-node-archive-leveldb-hash.yml
@@ -82,7 +82,7 @@ services:
       - traefik.http.routers.viction-mainnet-node-archive-leveldb-hash.service=viction-mainnet-node-archive-leveldb-hash
       - ${NO_SSL:-traefik.http.routers.viction-mainnet-node-archive-leveldb-hash-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.viction-mainnet-node-archive-leveldb-hash-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.viction-mainnet-node-archive-leveldb-hash-ws.rule=Host(`$DOMAIN`) && (Path(`/viction-mainnet-node-archive`) || Path(`/viction-mainnet-node-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.viction-mainnet-node-archive-leveldb-hash-ws.rule=(Path(`/viction-mainnet-node-archive`) || Path(`/viction-mainnet-node-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.viction-mainnet-node-archive-leveldb-hash-ws.middlewares=viction-mainnet-node-archive-leveldb-hash-stripprefix, ipallowlist
diff --git a/viction/node/viction-mainnet-node-pruned-leveldb-hash.yml b/viction/node/viction-mainnet-node-pruned-leveldb-hash.yml
index 77de01b5..db2d88d3 100644
--- a/viction/node/viction-mainnet-node-pruned-leveldb-hash.yml
+++ b/viction/node/viction-mainnet-node-pruned-leveldb-hash.yml
@@ -82,7 +82,7 @@ services:
       - traefik.http.routers.viction-mainnet-node-pruned-leveldb-hash.service=viction-mainnet-node-pruned-leveldb-hash
       - ${NO_SSL:-traefik.http.routers.viction-mainnet-node-pruned-leveldb-hash-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.viction-mainnet-node-pruned-leveldb-hash-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.viction-mainnet-node-pruned-leveldb-hash-ws.rule=Host(`$DOMAIN`) && (Path(`/viction-mainnet-node`) || Path(`/viction-mainnet-node/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.viction-mainnet-node-pruned-leveldb-hash-ws.rule=(Path(`/viction-mainnet-node`) || Path(`/viction-mainnet-node/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.viction-mainnet-node-pruned-leveldb-hash-ws.middlewares=viction-mainnet-node-pruned-leveldb-hash-stripprefix, ipallowlist
diff --git a/viction/node/viction-testnet-node-archive-leveldb-hash.yml b/viction/node/viction-testnet-node-archive-leveldb-hash.yml
index ddf61463..813c429a 100644
--- a/viction/node/viction-testnet-node-archive-leveldb-hash.yml
+++ b/viction/node/viction-testnet-node-archive-leveldb-hash.yml
@@ -82,7 +82,7 @@ services:
       - traefik.http.routers.viction-testnet-node-archive-leveldb-hash.service=viction-testnet-node-archive-leveldb-hash
       - ${NO_SSL:-traefik.http.routers.viction-testnet-node-archive-leveldb-hash-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.viction-testnet-node-archive-leveldb-hash-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.viction-testnet-node-archive-leveldb-hash-ws.rule=Host(`$DOMAIN`) && (Path(`/viction-testnet-node-archive`) || Path(`/viction-testnet-node-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.viction-testnet-node-archive-leveldb-hash-ws.rule=(Path(`/viction-testnet-node-archive`) || Path(`/viction-testnet-node-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.viction-testnet-node-archive-leveldb-hash-ws.middlewares=viction-testnet-node-archive-leveldb-hash-stripprefix, ipallowlist
diff --git a/viction/node/viction-testnet-node-pruned-leveldb-hash.yml b/viction/node/viction-testnet-node-pruned-leveldb-hash.yml
index 9ba66b3e..c3089e93 100644
--- a/viction/node/viction-testnet-node-pruned-leveldb-hash.yml
+++ b/viction/node/viction-testnet-node-pruned-leveldb-hash.yml
@@ -82,7 +82,7 @@ services:
       - traefik.http.routers.viction-testnet-node-pruned-leveldb-hash.service=viction-testnet-node-pruned-leveldb-hash
       - ${NO_SSL:-traefik.http.routers.viction-testnet-node-pruned-leveldb-hash-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.viction-testnet-node-pruned-leveldb-hash-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.viction-testnet-node-pruned-leveldb-hash-ws.rule=Host(`$DOMAIN`) && (Path(`/viction-testnet-node`) || Path(`/viction-testnet-node/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.viction-testnet-node-pruned-leveldb-hash-ws.rule=(Path(`/viction-testnet-node`) || Path(`/viction-testnet-node/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.viction-testnet-node-pruned-leveldb-hash-ws.middlewares=viction-testnet-node-pruned-leveldb-hash-stripprefix, ipallowlist
diff --git a/zksync-era/external-node/zksync-era-boojnet-external-node-archive.yml b/zksync-era/external-node/zksync-era-boojnet-external-node-archive.yml
index 9223a712..96f79564 100644
--- a/zksync-era/external-node/zksync-era-boojnet-external-node-archive.yml
+++ b/zksync-era/external-node/zksync-era-boojnet-external-node-archive.yml
@@ -96,7 +96,7 @@ services:
       - traefik.http.routers.zksync-era-boojnet-external-node-archive.service=zksync-era-boojnet-external-node-archive
       - ${NO_SSL:-traefik.http.routers.zksync-era-boojnet-external-node-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.zksync-era-boojnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.zksync-era-boojnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/zksync-era-boojnet-archive`) || Path(`/zksync-era-boojnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.zksync-era-boojnet-external-node-archive-ws.rule=(Path(`/zksync-era-boojnet-archive`) || Path(`/zksync-era-boojnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.zksync-era-boojnet-external-node-archive-ws.middlewares=zksync-era-boojnet-external-node-archive-stripprefix, ipallowlist
diff --git a/zksync-era/external-node/zksync-era-boojnet-external-node-pruned.yml b/zksync-era/external-node/zksync-era-boojnet-external-node-pruned.yml
index 3536ab91..213a9658 100644
--- a/zksync-era/external-node/zksync-era-boojnet-external-node-pruned.yml
+++ b/zksync-era/external-node/zksync-era-boojnet-external-node-pruned.yml
@@ -96,7 +96,7 @@ services:
       - traefik.http.routers.zksync-era-boojnet-external-node-pruned.service=zksync-era-boojnet-external-node-pruned
       - ${NO_SSL:-traefik.http.routers.zksync-era-boojnet-external-node-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.zksync-era-boojnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.zksync-era-boojnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/zksync-era-boojnet`) || Path(`/zksync-era-boojnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.zksync-era-boojnet-external-node-pruned-ws.rule=(Path(`/zksync-era-boojnet`) || Path(`/zksync-era-boojnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.zksync-era-boojnet-external-node-pruned-ws.middlewares=zksync-era-boojnet-external-node-pruned-stripprefix, ipallowlist
diff --git a/zksync-era/external-node/zksync-era-mainnet-external-node-archive.yml b/zksync-era/external-node/zksync-era-mainnet-external-node-archive.yml
index 18c65664..c30f94e0 100644
--- a/zksync-era/external-node/zksync-era-mainnet-external-node-archive.yml
+++ b/zksync-era/external-node/zksync-era-mainnet-external-node-archive.yml
@@ -98,7 +98,7 @@ services:
       - traefik.http.routers.zksync-era-mainnet-external-node-archive.service=zksync-era-mainnet-external-node-archive
       - ${NO_SSL:-traefik.http.routers.zksync-era-mainnet-external-node-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.zksync-era-mainnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.zksync-era-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/zksync-era-mainnet-archive`) || Path(`/zksync-era-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.zksync-era-mainnet-external-node-archive-ws.rule=(Path(`/zksync-era-mainnet-archive`) || Path(`/zksync-era-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.zksync-era-mainnet-external-node-archive-ws.middlewares=zksync-era-mainnet-external-node-archive-stripprefix, ipallowlist
diff --git a/zksync-era/external-node/zksync-era-mainnet-external-node-pruned.yml b/zksync-era/external-node/zksync-era-mainnet-external-node-pruned.yml
index 821b5ca9..1d322eda 100644
--- a/zksync-era/external-node/zksync-era-mainnet-external-node-pruned.yml
+++ b/zksync-era/external-node/zksync-era-mainnet-external-node-pruned.yml
@@ -98,7 +98,7 @@ services:
       - traefik.http.routers.zksync-era-mainnet-external-node-pruned.service=zksync-era-mainnet-external-node-pruned
       - ${NO_SSL:-traefik.http.routers.zksync-era-mainnet-external-node-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.zksync-era-mainnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.zksync-era-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/zksync-era-mainnet`) || Path(`/zksync-era-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.zksync-era-mainnet-external-node-pruned-ws.rule=(Path(`/zksync-era-mainnet`) || Path(`/zksync-era-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.zksync-era-mainnet-external-node-pruned-ws.middlewares=zksync-era-mainnet-external-node-pruned-stripprefix, ipallowlist