deploy: regenerate compose from vibe-node main 07b0472e0d1a

2026-07-08 11:49:07 +00:00
parent ad93d73f12
commit cf26455d3a
71 changed files with 110 additions and 81 deletions
--- a/abstract/external-node/abstract-mainnet-external-node-archive.yml
+++ b/abstract/external-node/abstract-mainnet-external-node-archive.yml
@@ -98,7 +98,7 @@ services:
      - traefik.http.routers.abstract-mainnet-external-node-archive.service=abstract-mainnet-external-node-archive
      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-mainnet-archive`) || Path(`/abstract-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.abstract-mainnet-external-node-archive-ws.rule=(Path(`/abstract-mainnet-archive`) || Path(`/abstract-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.abstract-mainnet-external-node-archive-ws.middlewares=abstract-mainnet-external-node-archive-stripprefix, ipallowlist
--- a/abstract/external-node/abstract-mainnet-external-node-pruned.yml
+++ b/abstract/external-node/abstract-mainnet-external-node-pruned.yml
@@ -98,7 +98,7 @@ services:
      - traefik.http.routers.abstract-mainnet-external-node-pruned.service=abstract-mainnet-external-node-pruned
      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-mainnet`) || Path(`/abstract-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.abstract-mainnet-external-node-pruned-ws.rule=(Path(`/abstract-mainnet`) || Path(`/abstract-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.abstract-mainnet-external-node-pruned-ws.middlewares=abstract-mainnet-external-node-pruned-stripprefix, ipallowlist
--- a/abstract/external-node/abstract-testnet-external-node-archive.yml
+++ b/abstract/external-node/abstract-testnet-external-node-archive.yml
@@ -98,7 +98,7 @@ services:
      - traefik.http.routers.abstract-testnet-external-node-archive.service=abstract-testnet-external-node-archive
      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-testnet-archive`) || Path(`/abstract-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.abstract-testnet-external-node-archive-ws.rule=(Path(`/abstract-testnet-archive`) || Path(`/abstract-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.abstract-testnet-external-node-archive-ws.middlewares=abstract-testnet-external-node-archive-stripprefix, ipallowlist
--- a/abstract/external-node/abstract-testnet-external-node-pruned.yml
+++ b/abstract/external-node/abstract-testnet-external-node-pruned.yml
@@ -98,7 +98,7 @@ services:
      - traefik.http.routers.abstract-testnet-external-node-pruned.service=abstract-testnet-external-node-pruned
      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-testnet`) || Path(`/abstract-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.abstract-testnet-external-node-pruned-ws.rule=(Path(`/abstract-testnet`) || Path(`/abstract-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.abstract-testnet-external-node-pruned-ws.middlewares=abstract-testnet-external-node-pruned-stripprefix, ipallowlist
--- a/arc/reth/arc-testnet-reth-archive-trace.yml
+++ b/arc/reth/arc-testnet-reth-archive-trace.yml
@@ -132,7 +132,6 @@ services:
      - --execution-socket=/sockets/auth.ipc
      - --follow
      - --follow.endpoint=https://rpc.quicknode.testnet.arc.network,wss=rpc.quicknode.testnet.arc.network
-      - --follow.endpoint=https://rpc.drpc.testnet.arc.network,wss=rpc.drpc.testnet.arc.network
      - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
      - --full
      - --home=/data/consensus
--- a/arc/reth/arc-testnet-reth-pruned-trace.yml
+++ b/arc/reth/arc-testnet-reth-pruned-trace.yml
@@ -133,7 +133,6 @@ services:
      - --execution-socket=/sockets/auth.ipc
      - --follow
      - --follow.endpoint=https://rpc.quicknode.testnet.arc.network,wss=rpc.quicknode.testnet.arc.network
-      - --follow.endpoint=https://rpc.drpc.testnet.arc.network,wss=rpc.drpc.testnet.arc.network
      - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
      - --full
      - --home=/data/consensus
--- a/arc/reth/arc-testnet-reth-pruned.yml
+++ b/arc/reth/arc-testnet-reth-pruned.yml
@@ -133,7 +133,6 @@ services:
      - --execution-socket=/sockets/auth.ipc
      - --follow
      - --follow.endpoint=https://rpc.quicknode.testnet.arc.network,wss=rpc.quicknode.testnet.arc.network
-      - --follow.endpoint=https://rpc.drpc.testnet.arc.network,wss=rpc.drpc.testnet.arc.network
      - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
      - --full
      - --home=/data/consensus
--- a/avalanche/go/avalanche-fuji-go-archive-leveldb.yml
+++ b/avalanche/go/avalanche-fuji-go-archive-leveldb.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-fuji-go-archive-leveldb.service=avalanche-fuji-go-archive-leveldb
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji-archive`) || Path(`/avalanche-fuji-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.rule=(Path(`/avalanche-fuji-archive`) || Path(`/avalanche-fuji-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.middlewares=avalanche-fuji-go-archive-leveldb-stripprefix, avalanche-fuji-go-archive-leveldb-set-ws-path, ipallowlist
--- a/avalanche/go/avalanche-fuji-go-pruned-leveldb.prune.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-leveldb.prune.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb.service=avalanche-fuji-go-pruned-leveldb
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.middlewares=avalanche-fuji-go-pruned-leveldb-stripprefix, avalanche-fuji-go-pruned-leveldb-set-ws-path, ipallowlist
--- a/avalanche/go/avalanche-fuji-go-pruned-leveldb.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-leveldb.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb.service=avalanche-fuji-go-pruned-leveldb
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.middlewares=avalanche-fuji-go-pruned-leveldb-stripprefix, avalanche-fuji-go-pruned-leveldb-set-ws-path, ipallowlist
--- a/avalanche/go/avalanche-fuji-go-pruned-pebbledb.prune.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-pebbledb.prune.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.service=avalanche-fuji-go-pruned-pebbledb
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.middlewares=avalanche-fuji-go-pruned-pebbledb-stripprefix, avalanche-fuji-go-pruned-pebbledb-set-ws-path, ipallowlist
--- a/avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.service=avalanche-fuji-go-pruned-pebbledb
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.middlewares=avalanche-fuji-go-pruned-pebbledb-stripprefix, avalanche-fuji-go-pruned-pebbledb-set-ws-path, ipallowlist
--- a/avalanche/go/avalanche-mainnet-go-archive-leveldb.yml
+++ b/avalanche/go/avalanche-mainnet-go-archive-leveldb.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-mainnet-go-archive-leveldb.service=avalanche-mainnet-go-archive-leveldb
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet-archive`) || Path(`/avalanche-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.rule=(Path(`/avalanche-mainnet-archive`) || Path(`/avalanche-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.middlewares=avalanche-mainnet-go-archive-leveldb-stripprefix, avalanche-mainnet-go-archive-leveldb-set-ws-path, ipallowlist
--- a/avalanche/go/avalanche-mainnet-go-pruned-leveldb.prune.yml
+++ b/avalanche/go/avalanche-mainnet-go-pruned-leveldb.prune.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb.service=avalanche-mainnet-go-pruned-leveldb
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.middlewares=avalanche-mainnet-go-pruned-leveldb-stripprefix, avalanche-mainnet-go-pruned-leveldb-set-ws-path, ipallowlist
--- a/avalanche/go/avalanche-mainnet-go-pruned-leveldb.yml
+++ b/avalanche/go/avalanche-mainnet-go-pruned-leveldb.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb.service=avalanche-mainnet-go-pruned-leveldb
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.middlewares=avalanche-mainnet-go-pruned-leveldb-stripprefix, avalanche-mainnet-go-pruned-leveldb-set-ws-path, ipallowlist
--- a/avalanche/go/avalanche-mainnet-go-pruned-pebbledb.prune.yml
+++ b/avalanche/go/avalanche-mainnet-go-pruned-pebbledb.prune.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb.service=avalanche-mainnet-go-pruned-pebbledb
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.middlewares=avalanche-mainnet-go-pruned-pebbledb-stripprefix, avalanche-mainnet-go-pruned-pebbledb-set-ws-path, ipallowlist
--- a/avalanche/go/avalanche-mainnet-go-pruned-pebbledb.yml
+++ b/avalanche/go/avalanche-mainnet-go-pruned-pebbledb.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb.service=avalanche-mainnet-go-pruned-pebbledb
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.middlewares=avalanche-mainnet-go-pruned-pebbledb-stripprefix, avalanche-mainnet-go-pruned-pebbledb-set-ws-path, ipallowlist
--- a/babylon/babylond/babylon-mainnet-babylond-pruned.yml
+++ b/babylon/babylond/babylon-mainnet-babylond-pruned.yml
@@ -96,7 +96,7 @@ services:
      - traefik.http.routers.babylon-mainnet-babylond-pruned.service=babylon-mainnet-babylond-pruned
      - ${NO_SSL:-traefik.http.routers.babylon-mainnet-babylond-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.babylon-mainnet-babylond-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.babylon-mainnet-babylond-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/babylon-mainnet-pruned`) || Path(`/babylon-mainnet-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.babylon-mainnet-babylond-pruned-ws.rule=(Path(`/babylon-mainnet-pruned`) || Path(`/babylon-mainnet-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.babylon-mainnet-babylond-pruned-ws.middlewares=babylon-mainnet-babylond-pruned-stripprefix, babylon-mainnet-babylond-pruned-set-ws-path, ipallowlist
--- a/cosmos/gaiad/cosmos-mainnet-gaiad-pruned.yml
+++ b/cosmos/gaiad/cosmos-mainnet-gaiad-pruned.yml
@@ -96,7 +96,7 @@ services:
      - traefik.http.routers.cosmos-mainnet-gaiad-pruned.service=cosmos-mainnet-gaiad-pruned
      - ${NO_SSL:-traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/cosmos-mainnet-pruned`) || Path(`/cosmos-mainnet-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.rule=(Path(`/cosmos-mainnet-pruned`) || Path(`/cosmos-mainnet-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.middlewares=cosmos-mainnet-gaiad-pruned-stripprefix, cosmos-mainnet-gaiad-pruned-set-ws-path, ipallowlist
--- a/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-archive.yml
+++ b/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-archive.yml
@@ -102,7 +102,7 @@ services:
      - traefik.http.routers.cronos-zkevm-mainnet-external-node-archive.service=cronos-zkevm-mainnet-external-node-archive
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-mainnet-archive`) || Path(`/cronos-zkevm-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.rule=(Path(`/cronos-zkevm-mainnet-archive`) || Path(`/cronos-zkevm-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.middlewares=cronos-zkevm-mainnet-external-node-archive-stripprefix, ipallowlist
--- a/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-pruned.yml
+++ b/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-pruned.yml
@@ -102,7 +102,7 @@ services:
      - traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned.service=cronos-zkevm-mainnet-external-node-pruned
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-mainnet`) || Path(`/cronos-zkevm-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.rule=(Path(`/cronos-zkevm-mainnet`) || Path(`/cronos-zkevm-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.middlewares=cronos-zkevm-mainnet-external-node-pruned-stripprefix, ipallowlist
--- a/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-archive.yml
+++ b/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-archive.yml
@@ -102,7 +102,7 @@ services:
      - traefik.http.routers.cronos-zkevm-testnet-external-node-archive.service=cronos-zkevm-testnet-external-node-archive
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-testnet-archive`) || Path(`/cronos-zkevm-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.rule=(Path(`/cronos-zkevm-testnet-archive`) || Path(`/cronos-zkevm-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.middlewares=cronos-zkevm-testnet-external-node-archive-stripprefix, ipallowlist
--- a/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-pruned.yml
+++ b/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-pruned.yml
@@ -102,7 +102,7 @@ services:
      - traefik.http.routers.cronos-zkevm-testnet-external-node-pruned.service=cronos-zkevm-testnet-external-node-pruned
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-testnet`) || Path(`/cronos-zkevm-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.rule=(Path(`/cronos-zkevm-testnet`) || Path(`/cronos-zkevm-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.middlewares=cronos-zkevm-testnet-external-node-pruned-stripprefix, ipallowlist
--- a/cronos/cronos/cronos-mainnet-cronos-pruned.yml
+++ b/cronos/cronos/cronos-mainnet-cronos-pruned.yml
@@ -105,7 +105,7 @@ services:
      - traefik.http.routers.cronos-mainnet-cronos-pruned.service=cronos-mainnet-cronos-pruned
      - ${NO_SSL:-traefik.http.routers.cronos-mainnet-cronos-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.cronos-mainnet-cronos-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.cronos-mainnet-cronos-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-mainnet`) || Path(`/cronos-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.cronos-mainnet-cronos-pruned-ws.rule=(Path(`/cronos-mainnet`) || Path(`/cronos-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.cronos-mainnet-cronos-pruned-ws.middlewares=cronos-mainnet-cronos-pruned-stripprefix, ipallowlist
--- a/ethereum/besu/ethereum-classic-besu-pruned-bonsai.yml
+++ b/ethereum/besu/ethereum-classic-besu-pruned-bonsai.yml
@@ -103,7 +103,7 @@ services:
      - traefik.http.routers.ethereum-classic-besu-pruned-bonsai.service=ethereum-classic-besu-pruned-bonsai
      - ${NO_SSL:-traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/ethereum-classic-besu`) || Path(`/ethereum-classic-besu/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.rule=(Path(`/ethereum-classic-besu`) || Path(`/ethereum-classic-besu/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.middlewares=ethereum-classic-besu-pruned-bonsai-stripprefix, ipallowlist
--- a/ethereum/besu/ethereum-mainnet-besu-pruned-bonsai--nimbus.yml
+++ b/ethereum/besu/ethereum-mainnet-besu-pruned-bonsai--nimbus.yml
@@ -109,7 +109,7 @@ services:
      - traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai.service=ethereum-mainnet-besu-pruned-bonsai
      - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/ethereum-mainnet-besu`) || Path(`/ethereum-mainnet-besu/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.rule=(Path(`/ethereum-mainnet-besu`) || Path(`/ethereum-mainnet-besu/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.middlewares=ethereum-mainnet-besu-pruned-bonsai-stripprefix, ipallowlist
--- a/haqq/haqq/haqq-mainnet-haqq-pruned.yml
+++ b/haqq/haqq/haqq-mainnet-haqq-pruned.yml
@@ -92,7 +92,7 @@ services:
      - traefik.http.routers.haqq-mainnet-haqq-pruned.service=haqq-mainnet-haqq-pruned
      - ${NO_SSL:-traefik.http.routers.haqq-mainnet-haqq-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.haqq-mainnet-haqq-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.haqq-mainnet-haqq-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/haqq-mainnet`) || Path(`/haqq-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.haqq-mainnet-haqq-pruned-ws.rule=(Path(`/haqq-mainnet`) || Path(`/haqq-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.haqq-mainnet-haqq-pruned-ws.middlewares=haqq-mainnet-haqq-pruned-stripprefix, ipallowlist
--- a/jovay/aldaba/jovay-mainnet-aldaba-pruned.yml
+++ b/jovay/aldaba/jovay-mainnet-aldaba-pruned.yml
@@ -140,7 +140,7 @@ services:
      - traefik.http.routers.jovay-mainnet-aldaba-pruned.service=jovay-mainnet-aldaba-pruned
      - ${NO_SSL:-traefik.http.routers.jovay-mainnet-aldaba-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.jovay-mainnet-aldaba-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.jovay-mainnet-aldaba-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/jovay-mainnet`) || Path(`/jovay-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.jovay-mainnet-aldaba-pruned-ws.rule=(Path(`/jovay-mainnet`) || Path(`/jovay-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.jovay-mainnet-aldaba-pruned-ws.middlewares=jovay-mainnet-aldaba-pruned-stripprefix, ipallowlist
--- a/jovay/aldaba/jovay-sepolia-aldaba-pruned.yml
+++ b/jovay/aldaba/jovay-sepolia-aldaba-pruned.yml
@@ -140,7 +140,7 @@ services:
      - traefik.http.routers.jovay-sepolia-aldaba-pruned.service=jovay-sepolia-aldaba-pruned
      - ${NO_SSL:-traefik.http.routers.jovay-sepolia-aldaba-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.jovay-sepolia-aldaba-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.jovay-sepolia-aldaba-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/jovay-sepolia`) || Path(`/jovay-sepolia/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.jovay-sepolia-aldaba-pruned-ws.rule=(Path(`/jovay-sepolia`) || Path(`/jovay-sepolia/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.jovay-sepolia-aldaba-pruned-ws.middlewares=jovay-sepolia-aldaba-pruned-stripprefix, ipallowlist
--- a/kite/go/kite-mainnet-go-pruned-leveldb.yml
+++ b/kite/go/kite-mainnet-go-pruned-leveldb.yml
@@ -91,7 +91,7 @@ services:
      - traefik.http.routers.kite-mainnet-go-pruned-leveldb.service=kite-mainnet-go-pruned-leveldb
      - ${NO_SSL:-traefik.http.routers.kite-mainnet-go-pruned-leveldb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.kite-mainnet-go-pruned-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.kite-mainnet-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/kite-mainnet`) || Path(`/kite-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.kite-mainnet-go-pruned-leveldb-ws.rule=(Path(`/kite-mainnet`) || Path(`/kite-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.kite-mainnet-go-pruned-leveldb-ws.middlewares=kite-mainnet-go-pruned-leveldb-stripprefix, kite-mainnet-go-pruned-leveldb-set-ws-path, ipallowlist
--- a/lens/external-node/lens-mainnet-external-node-archive.yml
+++ b/lens/external-node/lens-mainnet-external-node-archive.yml
@@ -107,7 +107,7 @@ services:
      - traefik.http.routers.lens-mainnet-external-node-archive.service=lens-mainnet-external-node-archive
      - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-mainnet-archive`) || Path(`/lens-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.lens-mainnet-external-node-archive-ws.rule=(Path(`/lens-mainnet-archive`) || Path(`/lens-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.lens-mainnet-external-node-archive-ws.middlewares=lens-mainnet-external-node-archive-stripprefix, ipallowlist
--- a/lens/external-node/lens-mainnet-external-node-pruned.yml
+++ b/lens/external-node/lens-mainnet-external-node-pruned.yml
@@ -107,7 +107,7 @@ services:
      - traefik.http.routers.lens-mainnet-external-node-pruned.service=lens-mainnet-external-node-pruned
      - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-mainnet`) || Path(`/lens-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.lens-mainnet-external-node-pruned-ws.rule=(Path(`/lens-mainnet`) || Path(`/lens-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.lens-mainnet-external-node-pruned-ws.middlewares=lens-mainnet-external-node-pruned-stripprefix, ipallowlist
--- a/lens/external-node/lens-testnet-external-node-archive.yml
+++ b/lens/external-node/lens-testnet-external-node-archive.yml
@@ -106,7 +106,7 @@ services:
      - traefik.http.routers.lens-testnet-external-node-archive.service=lens-testnet-external-node-archive
      - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-testnet-archive`) || Path(`/lens-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.lens-testnet-external-node-archive-ws.rule=(Path(`/lens-testnet-archive`) || Path(`/lens-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.lens-testnet-external-node-archive-ws.middlewares=lens-testnet-external-node-archive-stripprefix, ipallowlist
--- a/lens/external-node/lens-testnet-external-node-pruned.yml
+++ b/lens/external-node/lens-testnet-external-node-pruned.yml
@@ -106,7 +106,7 @@ services:
      - traefik.http.routers.lens-testnet-external-node-pruned.service=lens-testnet-external-node-pruned
      - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-testnet`) || Path(`/lens-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.lens-testnet-external-node-pruned-ws.rule=(Path(`/lens-testnet`) || Path(`/lens-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.lens-testnet-external-node-pruned-ws.middlewares=lens-testnet-external-node-pruned-stripprefix, ipallowlist
--- a/linea/besu/linea-mainnet-besu-pruned-bonsai.yml
+++ b/linea/besu/linea-mainnet-besu-pruned-bonsai.yml
@@ -111,7 +111,7 @@ services:
      - traefik.http.routers.linea-mainnet-besu-pruned-bonsai.service=linea-mainnet-besu-pruned-bonsai
      - ${NO_SSL:-traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/linea-mainnet`) || Path(`/linea-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.rule=(Path(`/linea-mainnet`) || Path(`/linea-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.middlewares=linea-mainnet-besu-pruned-bonsai-stripprefix, ipallowlist
--- a/linea/besu/linea-sepolia-besu-pruned-bonsai.yml
+++ b/linea/besu/linea-sepolia-besu-pruned-bonsai.yml
@@ -111,7 +111,7 @@ services:
      - traefik.http.routers.linea-sepolia-besu-pruned-bonsai.service=linea-sepolia-besu-pruned-bonsai
      - ${NO_SSL:-traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/linea-sepolia`) || Path(`/linea-sepolia/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.rule=(Path(`/linea-sepolia`) || Path(`/linea-sepolia/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.middlewares=linea-sepolia-besu-pruned-bonsai-stripprefix, ipallowlist
--- a/linea/geth/linea-mainnet-geth-archive-leveldb-hash.yml
+++ b/linea/geth/linea-mainnet-geth-archive-leveldb-hash.yml
@@ -90,8 +90,14 @@ services:
    volumes:
      - ${LINEA_MAINNET_GETH_ARCHIVE_LEVELDB_HASH_DATA:-linea-mainnet-geth-archive-leveldb-hash}:/root/.ethereum
      - ./linea/mainnet:/config
+      - ./linea/scripts/engine-healthcheck.sh:/engine-healthcheck.sh:ro
      - .jwtsecret:/jwtsecret:ro
      - /slowdisk:/slowdisk
+    healthcheck:
+      test: [CMD-SHELL, /engine-healthcheck.sh]
+      interval: 5s
+      start_period: 60s
+      retries: 30
    logging: *logging-defaults
    labels:
      - prometheus-scrape.enabled=true
@@ -130,6 +136,10 @@ services:
        envsubst < /config/maru/config.toml.template > /config.toml
        exec java -Dlog4j2.configurationFile=/config/maru/log4j.xml -jar /opt/consensys/maru/maru.jar --network=linea-mainnet --config=/config.toml "$@"
    restart: unless-stopped
+    depends_on:
+      linea-mainnet-geth-archive:
+        condition: service_healthy
+        restart: true
    networks:
      - chains
    volumes:
--- a/linea/geth/linea-mainnet-geth-pruned-pebble-path.yml
+++ b/linea/geth/linea-mainnet-geth-pruned-pebble-path.yml
@@ -90,8 +90,14 @@ services:
    volumes:
      - ${LINEA_MAINNET_GETH_PRUNED_PEBBLE_PATH_DATA:-linea-mainnet-geth-pruned-pebble-path}:/root/.ethereum
      - ./linea/mainnet:/config
+      - ./linea/scripts/engine-healthcheck.sh:/engine-healthcheck.sh:ro
      - .jwtsecret:/jwtsecret:ro
      - /slowdisk:/slowdisk
+    healthcheck:
+      test: [CMD-SHELL, /engine-healthcheck.sh]
+      interval: 5s
+      start_period: 60s
+      retries: 30
    logging: *logging-defaults
    labels:
      - prometheus-scrape.enabled=true
@@ -130,6 +136,10 @@ services:
        envsubst < /config/maru/config.toml.template > /config.toml
        exec java -Dlog4j2.configurationFile=/config/maru/log4j.xml -jar /opt/consensys/maru/maru.jar --network=linea-mainnet --config=/config.toml "$@"
    restart: unless-stopped
+    depends_on:
+      linea-mainnet-geth:
+        condition: service_healthy
+        restart: true
    networks:
      - chains
    volumes:
--- a/metis-andromeda/l2geth/metis-andromeda-mainnet-l2geth-archive-leveldb-hash.yml
+++ b/metis-andromeda/l2geth/metis-andromeda-mainnet-l2geth-archive-leveldb-hash.yml
@@ -121,7 +121,7 @@ services:
      - traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash.service=metis-andromeda-mainnet-l2geth-archive-leveldb-hash
      - ${NO_SSL:-traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.rule=Host(`$DOMAIN`) && (Path(`/metis-andromeda-mainnet-archive`) || Path(`/metis-andromeda-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.rule=(Path(`/metis-andromeda-mainnet-archive`) || Path(`/metis-andromeda-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.middlewares=metis-andromeda-mainnet-l2geth-archive-leveldb-hash-stripprefix, ipallowlist
--- a/metis-andromeda/l2geth/metis-andromeda-sepolia-l2geth-archive-leveldb-hash.yml
+++ b/metis-andromeda/l2geth/metis-andromeda-sepolia-l2geth-archive-leveldb-hash.yml
@@ -121,7 +121,7 @@ services:
      - traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash.service=metis-andromeda-sepolia-l2geth-archive-leveldb-hash
      - ${NO_SSL:-traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.rule=Host(`$DOMAIN`) && (Path(`/metis-andromeda-sepolia-archive`) || Path(`/metis-andromeda-sepolia-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.rule=(Path(`/metis-andromeda-sepolia-archive`) || Path(`/metis-andromeda-sepolia-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.middlewares=metis-andromeda-sepolia-l2geth-archive-leveldb-hash-stripprefix, ipallowlist
--- a/op/reth/ronin-mainnet-op-reth-archive-trace.yml
+++ b/op/reth/ronin-mainnet-op-reth-archive-trace.yml
@@ -111,7 +111,7 @@ services:
    shm_size: 2gb

  ronin-mainnet-node:
-    image: ${RONIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${RONIN_MAINNET_NODE_VERSION:-v1.16.5}
+    image: ${RONIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${RONIN_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 19792:19792
      - 19792:19792/udp
--- a/op/reth/ronin-saigon-op-reth-archive-trace.yml
+++ b/op/reth/ronin-saigon-op-reth-archive-trace.yml
@@ -110,7 +110,7 @@ services:
    shm_size: 2gb

  ronin-saigon-node:
-    image: ${RONIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${RONIN_SAIGON_NODE_VERSION:-v1.16.5}
+    image: ${RONIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${RONIN_SAIGON_NODE_VERSION:-v1.19.2}
    ports:
      - 16763:16763
      - 16763:16763/udp
--- a/op/reth/ronin-saigon-op-reth-pruned-trace.yml
+++ b/op/reth/ronin-saigon-op-reth-pruned-trace.yml
@@ -111,7 +111,7 @@ services:
    shm_size: 2gb

  ronin-saigon-pruned-node:
-    image: ${RONIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${RONIN_SAIGON_NODE_VERSION:-v1.16.5}
+    image: ${RONIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${RONIN_SAIGON_NODE_VERSION:-v1.19.2}
    ports:
      - 18446:18446
      - 18446:18446/udp
--- a/op/reth/unichain-mainnet-op-reth-archive-trace.yml
+++ b/op/reth/unichain-mainnet-op-reth-archive-trace.yml
@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
  driver: json-file
  options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"

 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  unichain-mainnet-op-reth:
-    image: ${UNICHAIN_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${UNICHAIN_MAINNET_RETH_VERSION:-v2.3.2-rc.2}
+    image: ${UNICHAIN_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${UNICHAIN_MAINNET_RETH_VERSION:-v2.3.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -57,6 +57,10 @@ services:
    command:
      - --chain=unichain
      - --datadir=/root/.local/share/reth
+      - --discovery.addr=0.0.0.0
+      - --discovery.port=10472
+      - --discovery.v5.addr=0.0.0.0
+      - --discovery.v5.port=10472
      - --engine.cross-block-cache-size=${UNICHAIN_MAINNET_RETH_STATE_CACHE:-4096}
      - --max-inbound-peers=50
      - --max-outbound-peers=50
@@ -107,7 +111,7 @@ services:
    shm_size: 2gb

  unichain-mainnet-op-reth-node:
-    image: ${UNICHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${UNICHAIN_MAINNET_NODE_VERSION:-v1.19.0}
+    image: ${UNICHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${UNICHAIN_MAINNET_NODE_VERSION:-v1.19.1}
    ports:
      - 15472:15472
      - 15472:15472/udp
@@ -133,14 +137,16 @@ services:
      - OP_NODE_P2P_LISTEN_UDP_PORT=15472
      - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
      - OP_NODE_RPC_ADDR=0.0.0.0
-      - OP_NODE_RPC_PORT=8545
+      - OP_NODE_RPC_PORT=9545
      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
      - OP_NODE_SYNCMODE=execution-layer
      - OP_NODE_VERIFIER_L1_CONFS=0
    entrypoint: [op-node]
    restart: unless-stopped
    depends_on:
-      - unichain-mainnet-op-reth
+      unichain-mainnet-op-reth:
+        condition: service_started
+        restart: true
    networks:
      - chains
    volumes:
@@ -152,7 +158,7 @@ services:
      - prometheus-scrape.path=/metrics
      - traefik.enable=true
      - traefik.http.middlewares.unichain-mainnet-op-reth-archive-trace-node-stripprefix.stripprefix.prefixes=/unichain-mainnet-op-reth/node
-      - traefik.http.services.unichain-mainnet-op-reth-archive-trace-node.loadbalancer.server.port=8547
+      - traefik.http.services.unichain-mainnet-op-reth-archive-trace-node.loadbalancer.server.port=9545
      - ${NO_SSL:-traefik.http.routers.unichain-mainnet-op-reth-archive-trace-node.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.unichain-mainnet-op-reth-archive-trace-node.tls.certresolver=myresolver}
      - ${NO_SSL:-traefik.http.routers.unichain-mainnet-op-reth-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/unichain-mainnet-op-reth/node`)}
--- a/op/reth/unichain-sepolia-op-reth-archive-trace.yml
+++ b/op/reth/unichain-sepolia-op-reth-archive-trace.yml
@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
  driver: json-file
  options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"

 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  unichain-sepolia-op-reth:
-    image: ${UNICHAIN_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${UNICHAIN_SEPOLIA_RETH_VERSION:-v2.3.2-rc.2}
+    image: ${UNICHAIN_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${UNICHAIN_SEPOLIA_RETH_VERSION:-v2.3.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -57,6 +57,10 @@ services:
    command:
      - --chain=unichain-sepolia
      - --datadir=/root/.local/share/reth
+      - --discovery.addr=0.0.0.0
+      - --discovery.port=11190
+      - --discovery.v5.addr=0.0.0.0
+      - --discovery.v5.port=11190
      - --engine.cross-block-cache-size=${UNICHAIN_SEPOLIA_RETH_STATE_CACHE:-4096}
      - --max-inbound-peers=50
      - --max-outbound-peers=50
@@ -107,7 +111,7 @@ services:
    shm_size: 2gb

  unichain-sepolia-op-reth-node:
-    image: ${UNICHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${UNICHAIN_SEPOLIA_NODE_VERSION:-v1.19.0}
+    image: ${UNICHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${UNICHAIN_SEPOLIA_NODE_VERSION:-v1.19.1}
    ports:
      - 16190:16190
      - 16190:16190/udp
@@ -134,14 +138,16 @@ services:
      - OP_NODE_P2P_LISTEN_UDP_PORT=16190
      - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
      - OP_NODE_RPC_ADDR=0.0.0.0
-      - OP_NODE_RPC_PORT=8545
+      - OP_NODE_RPC_PORT=9545
      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
      - OP_NODE_SYNCMODE=execution-layer
      - OP_NODE_VERIFIER_L1_CONFS=0
    entrypoint: [op-node]
    restart: unless-stopped
    depends_on:
-      - unichain-sepolia-op-reth
+      unichain-sepolia-op-reth:
+        condition: service_started
+        restart: true
    networks:
      - chains
    volumes:
@@ -153,7 +159,7 @@ services:
      - prometheus-scrape.path=/metrics
      - traefik.enable=true
      - traefik.http.middlewares.unichain-sepolia-op-reth-archive-trace-node-stripprefix.stripprefix.prefixes=/unichain-sepolia-op-reth/node
-      - traefik.http.services.unichain-sepolia-op-reth-archive-trace-node.loadbalancer.server.port=8547
+      - traefik.http.services.unichain-sepolia-op-reth-archive-trace-node.loadbalancer.server.port=9545
      - ${NO_SSL:-traefik.http.routers.unichain-sepolia-op-reth-archive-trace-node.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.unichain-sepolia-op-reth-archive-trace-node.tls.certresolver=myresolver}
      - ${NO_SSL:-traefik.http.routers.unichain-sepolia-op-reth-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/unichain-sepolia-op-reth/node`)}
--- a/sei/sei/sei-mainnet-sei-pruned.yml
+++ b/sei/sei/sei-mainnet-sei-pruned.yml
@@ -91,7 +91,7 @@ services:
      - traefik.http.routers.sei-mainnet-sei-pruned.service=sei-mainnet-sei-pruned
      - ${NO_SSL:-traefik.http.routers.sei-mainnet-sei-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.sei-mainnet-sei-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.sei-mainnet-sei-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/sei-mainnet-sei-pruned`) || Path(`/sei-mainnet-sei-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.sei-mainnet-sei-pruned-ws.rule=(Path(`/sei-mainnet-sei-pruned`) || Path(`/sei-mainnet-sei-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.sei-mainnet-sei-pruned-ws.middlewares=sei-mainnet-sei-pruned-stripprefix, ipallowlist
--- a/sei/sei/sei-testnet-sei-pruned.yml
+++ b/sei/sei/sei-testnet-sei-pruned.yml
@@ -91,7 +91,7 @@ services:
      - traefik.http.routers.sei-testnet-sei-pruned.service=sei-testnet-sei-pruned
      - ${NO_SSL:-traefik.http.routers.sei-testnet-sei-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.sei-testnet-sei-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.sei-testnet-sei-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/sei-testnet-sei-pruned`) || Path(`/sei-testnet-sei-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.sei-testnet-sei-pruned-ws.rule=(Path(`/sei-testnet-sei-pruned`) || Path(`/sei-testnet-sei-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.sei-testnet-sei-pruned-ws.middlewares=sei-testnet-sei-pruned-stripprefix, ipallowlist
--- a/sophon/external-node/sophon-mainnet-external-node-archive.yml
+++ b/sophon/external-node/sophon-mainnet-external-node-archive.yml
@@ -112,7 +112,7 @@ services:
      - traefik.http.routers.sophon-mainnet-external-node-archive.service=sophon-mainnet-external-node-archive
      - ${NO_SSL:-traefik.http.routers.sophon-mainnet-external-node-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.sophon-mainnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.sophon-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/sophon-mainnet-archive`) || Path(`/sophon-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.sophon-mainnet-external-node-archive-ws.rule=(Path(`/sophon-mainnet-archive`) || Path(`/sophon-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.sophon-mainnet-external-node-archive-ws.middlewares=sophon-mainnet-external-node-archive-stripprefix, ipallowlist
--- a/sophon/external-node/sophon-mainnet-external-node-pruned.yml
+++ b/sophon/external-node/sophon-mainnet-external-node-pruned.yml
@@ -112,7 +112,7 @@ services:
      - traefik.http.routers.sophon-mainnet-external-node-pruned.service=sophon-mainnet-external-node-pruned
      - ${NO_SSL:-traefik.http.routers.sophon-mainnet-external-node-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.sophon-mainnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.sophon-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/sophon-mainnet`) || Path(`/sophon-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.sophon-mainnet-external-node-pruned-ws.rule=(Path(`/sophon-mainnet`) || Path(`/sophon-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.sophon-mainnet-external-node-pruned-ws.middlewares=sophon-mainnet-external-node-pruned-stripprefix, ipallowlist
--- a/starknet/juno/starknet-mainnet-juno-archive.yml
+++ b/starknet/juno/starknet-mainnet-juno-archive.yml
@@ -95,7 +95,7 @@ services:
      - traefik.http.routers.starknet-mainnet-juno-archive.service=starknet-mainnet-juno-archive
      - ${NO_SSL:-traefik.http.routers.starknet-mainnet-juno-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.starknet-mainnet-juno-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.starknet-mainnet-juno-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-mainnet-juno-archive`) || Path(`/starknet-mainnet-juno-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.starknet-mainnet-juno-archive-ws.rule=(Path(`/starknet-mainnet-juno-archive`) || Path(`/starknet-mainnet-juno-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.starknet-mainnet-juno-archive-ws.middlewares=starknet-mainnet-juno-archive-stripprefix, starknet-mainnet-juno-archive-set-ws-path, ipallowlist
--- a/starknet/juno/starknet-sepolia-juno-archive.yml
+++ b/starknet/juno/starknet-sepolia-juno-archive.yml
@@ -95,7 +95,7 @@ services:
      - traefik.http.routers.starknet-sepolia-juno-archive.service=starknet-sepolia-juno-archive
      - ${NO_SSL:-traefik.http.routers.starknet-sepolia-juno-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.starknet-sepolia-juno-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.starknet-sepolia-juno-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-sepolia-juno-archive`) || Path(`/starknet-sepolia-juno-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.starknet-sepolia-juno-archive-ws.rule=(Path(`/starknet-sepolia-juno-archive`) || Path(`/starknet-sepolia-juno-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.starknet-sepolia-juno-archive-ws.middlewares=starknet-sepolia-juno-archive-stripprefix, starknet-sepolia-juno-archive-set-ws-path, ipallowlist
--- a/starknet/madara/starknet-mainnet-madara-archive.yml
+++ b/starknet/madara/starknet-mainnet-madara-archive.yml
@@ -78,7 +78,7 @@ services:
      - traefik.http.routers.starknet-mainnet-madara-archive.service=starknet-mainnet-madara-archive
      - ${NO_SSL:-traefik.http.routers.starknet-mainnet-madara-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.starknet-mainnet-madara-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.starknet-mainnet-madara-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-mainnet-madara-archive`) || Path(`/starknet-mainnet-madara-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.starknet-mainnet-madara-archive-ws.rule=(Path(`/starknet-mainnet-madara-archive`) || Path(`/starknet-mainnet-madara-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.starknet-mainnet-madara-archive-ws.middlewares=starknet-mainnet-madara-archive-stripprefix, starknet-mainnet-madara-archive-set-ws-path, ipallowlist
--- a/starknet/madara/starknet-mainnet-madara-pruned.yml
+++ b/starknet/madara/starknet-mainnet-madara-pruned.yml
@@ -78,7 +78,7 @@ services:
      - traefik.http.routers.starknet-mainnet-madara-pruned.service=starknet-mainnet-madara-pruned
      - ${NO_SSL:-traefik.http.routers.starknet-mainnet-madara-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.starknet-mainnet-madara-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.starknet-mainnet-madara-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-mainnet-madara-pruned`) || Path(`/starknet-mainnet-madara-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.starknet-mainnet-madara-pruned-ws.rule=(Path(`/starknet-mainnet-madara-pruned`) || Path(`/starknet-mainnet-madara-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.starknet-mainnet-madara-pruned-ws.middlewares=starknet-mainnet-madara-pruned-stripprefix, starknet-mainnet-madara-pruned-set-ws-path, ipallowlist
--- a/starknet/madara/starknet-sepolia-madara-archive.yml
+++ b/starknet/madara/starknet-sepolia-madara-archive.yml
@@ -78,7 +78,7 @@ services:
      - traefik.http.routers.starknet-sepolia-madara-archive.service=starknet-sepolia-madara-archive
      - ${NO_SSL:-traefik.http.routers.starknet-sepolia-madara-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.starknet-sepolia-madara-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.starknet-sepolia-madara-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-sepolia-madara-archive`) || Path(`/starknet-sepolia-madara-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.starknet-sepolia-madara-archive-ws.rule=(Path(`/starknet-sepolia-madara-archive`) || Path(`/starknet-sepolia-madara-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.starknet-sepolia-madara-archive-ws.middlewares=starknet-sepolia-madara-archive-stripprefix, starknet-sepolia-madara-archive-set-ws-path, ipallowlist
--- a/starknet/madara/starknet-sepolia-madara-pruned.yml
+++ b/starknet/madara/starknet-sepolia-madara-pruned.yml
@@ -78,7 +78,7 @@ services:
      - traefik.http.routers.starknet-sepolia-madara-pruned.service=starknet-sepolia-madara-pruned
      - ${NO_SSL:-traefik.http.routers.starknet-sepolia-madara-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.starknet-sepolia-madara-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.starknet-sepolia-madara-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-sepolia-madara-pruned`) || Path(`/starknet-sepolia-madara-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.starknet-sepolia-madara-pruned-ws.rule=(Path(`/starknet-sepolia-madara-pruned`) || Path(`/starknet-sepolia-madara-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.starknet-sepolia-madara-pruned-ws.middlewares=starknet-sepolia-madara-pruned-stripprefix, starknet-sepolia-madara-pruned-set-ws-path, ipallowlist
--- a/starknet/pathfinder/starknet-mainnet-pathfinder-archive.yml
+++ b/starknet/pathfinder/starknet-mainnet-pathfinder-archive.yml
@@ -81,7 +81,7 @@ services:
      - traefik.http.routers.starknet-mainnet-pathfinder-archive.service=starknet-mainnet-pathfinder-archive
      - ${NO_SSL:-traefik.http.routers.starknet-mainnet-pathfinder-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.starknet-mainnet-pathfinder-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.starknet-mainnet-pathfinder-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-mainnet-pathfinder-archive`) || Path(`/starknet-mainnet-pathfinder-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.starknet-mainnet-pathfinder-archive-ws.rule=(Path(`/starknet-mainnet-pathfinder-archive`) || Path(`/starknet-mainnet-pathfinder-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.starknet-mainnet-pathfinder-archive-ws.middlewares=starknet-mainnet-pathfinder-archive-stripprefix, starknet-mainnet-pathfinder-archive-set-ws-path, ipallowlist
--- a/starknet/pathfinder/starknet-mainnet-pathfinder-pruned-history.yml
+++ b/starknet/pathfinder/starknet-mainnet-pathfinder-pruned-history.yml
@@ -80,7 +80,7 @@ services:
      - traefik.http.routers.starknet-mainnet-pathfinder-pruned-history.service=starknet-mainnet-pathfinder-pruned-history
      - ${NO_SSL:-traefik.http.routers.starknet-mainnet-pathfinder-pruned-history-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.starknet-mainnet-pathfinder-pruned-history-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.starknet-mainnet-pathfinder-pruned-history-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-mainnet-pathfinder-pruned`) || Path(`/starknet-mainnet-pathfinder-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.starknet-mainnet-pathfinder-pruned-history-ws.rule=(Path(`/starknet-mainnet-pathfinder-pruned`) || Path(`/starknet-mainnet-pathfinder-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.starknet-mainnet-pathfinder-pruned-history-ws.middlewares=starknet-mainnet-pathfinder-pruned-history-stripprefix, starknet-mainnet-pathfinder-pruned-history-set-ws-path, ipallowlist
--- a/starknet/pathfinder/starknet-mainnet-pathfinder-pruned.yml
+++ b/starknet/pathfinder/starknet-mainnet-pathfinder-pruned.yml
@@ -81,7 +81,7 @@ services:
      - traefik.http.routers.starknet-mainnet-pathfinder-pruned.service=starknet-mainnet-pathfinder-pruned
      - ${NO_SSL:-traefik.http.routers.starknet-mainnet-pathfinder-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.starknet-mainnet-pathfinder-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.starknet-mainnet-pathfinder-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-mainnet-pathfinder-pruned`) || Path(`/starknet-mainnet-pathfinder-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.starknet-mainnet-pathfinder-pruned-ws.rule=(Path(`/starknet-mainnet-pathfinder-pruned`) || Path(`/starknet-mainnet-pathfinder-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.starknet-mainnet-pathfinder-pruned-ws.middlewares=starknet-mainnet-pathfinder-pruned-stripprefix, starknet-mainnet-pathfinder-pruned-set-ws-path, ipallowlist
--- a/starknet/pathfinder/starknet-sepolia-pathfinder-archive.yml
+++ b/starknet/pathfinder/starknet-sepolia-pathfinder-archive.yml
@@ -81,7 +81,7 @@ services:
      - traefik.http.routers.starknet-sepolia-pathfinder-archive.service=starknet-sepolia-pathfinder-archive
      - ${NO_SSL:-traefik.http.routers.starknet-sepolia-pathfinder-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.starknet-sepolia-pathfinder-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.starknet-sepolia-pathfinder-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-sepolia-pathfinder-archive`) || Path(`/starknet-sepolia-pathfinder-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.starknet-sepolia-pathfinder-archive-ws.rule=(Path(`/starknet-sepolia-pathfinder-archive`) || Path(`/starknet-sepolia-pathfinder-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.starknet-sepolia-pathfinder-archive-ws.middlewares=starknet-sepolia-pathfinder-archive-stripprefix, starknet-sepolia-pathfinder-archive-set-ws-path, ipallowlist
--- a/starknet/pathfinder/starknet-sepolia-pathfinder-pruned-history.yml
+++ b/starknet/pathfinder/starknet-sepolia-pathfinder-pruned-history.yml
@@ -80,7 +80,7 @@ services:
      - traefik.http.routers.starknet-sepolia-pathfinder-pruned-history.service=starknet-sepolia-pathfinder-pruned-history
      - ${NO_SSL:-traefik.http.routers.starknet-sepolia-pathfinder-pruned-history-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.starknet-sepolia-pathfinder-pruned-history-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.starknet-sepolia-pathfinder-pruned-history-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-sepolia-pathfinder-pruned`) || Path(`/starknet-sepolia-pathfinder-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.starknet-sepolia-pathfinder-pruned-history-ws.rule=(Path(`/starknet-sepolia-pathfinder-pruned`) || Path(`/starknet-sepolia-pathfinder-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.starknet-sepolia-pathfinder-pruned-history-ws.middlewares=starknet-sepolia-pathfinder-pruned-history-stripprefix, starknet-sepolia-pathfinder-pruned-history-set-ws-path, ipallowlist
--- a/starknet/pathfinder/starknet-sepolia-pathfinder-pruned.yml
+++ b/starknet/pathfinder/starknet-sepolia-pathfinder-pruned.yml
@@ -81,7 +81,7 @@ services:
      - traefik.http.routers.starknet-sepolia-pathfinder-pruned.service=starknet-sepolia-pathfinder-pruned
      - ${NO_SSL:-traefik.http.routers.starknet-sepolia-pathfinder-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.starknet-sepolia-pathfinder-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.starknet-sepolia-pathfinder-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/starknet-sepolia-pathfinder-pruned`) || Path(`/starknet-sepolia-pathfinder-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.starknet-sepolia-pathfinder-pruned-ws.rule=(Path(`/starknet-sepolia-pathfinder-pruned`) || Path(`/starknet-sepolia-pathfinder-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.starknet-sepolia-pathfinder-pruned-ws.middlewares=starknet-sepolia-pathfinder-pruned-stripprefix, starknet-sepolia-pathfinder-pruned-set-ws-path, ipallowlist
--- a/tac/tacchaind/tac-mainnet-tacchaind-pruned.yml
+++ b/tac/tacchaind/tac-mainnet-tacchaind-pruned.yml
@@ -95,7 +95,7 @@ services:
      - traefik.http.routers.tac-mainnet-tacchaind-pruned.service=tac-mainnet-tacchaind-pruned
      - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/tac-mainnet`) || Path(`/tac-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.rule=(Path(`/tac-mainnet`) || Path(`/tac-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.tac-mainnet-tacchaind-pruned-ws.middlewares=tac-mainnet-tacchaind-pruned-stripprefix, tac-mainnet-tacchaind-pruned-set-ws-path, ipallowlist
--- a/tac/tacchaind/tac-spb-tacchaind-pruned.yml
+++ b/tac/tacchaind/tac-spb-tacchaind-pruned.yml
@@ -94,7 +94,7 @@ services:
      - traefik.http.routers.tac-spb-tacchaind-pruned.service=tac-spb-tacchaind-pruned
      - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.tac-spb-tacchaind-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/tac-spb`) || Path(`/tac-spb/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.tac-spb-tacchaind-pruned-ws.rule=(Path(`/tac-spb`) || Path(`/tac-spb/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.tac-spb-tacchaind-pruned-ws.middlewares=tac-spb-tacchaind-pruned-stripprefix, tac-spb-tacchaind-pruned-set-ws-path, ipallowlist
--- a/viction/node/viction-mainnet-node-archive-leveldb-hash.yml
+++ b/viction/node/viction-mainnet-node-archive-leveldb-hash.yml
@@ -82,7 +82,7 @@ services:
      - traefik.http.routers.viction-mainnet-node-archive-leveldb-hash.service=viction-mainnet-node-archive-leveldb-hash
      - ${NO_SSL:-traefik.http.routers.viction-mainnet-node-archive-leveldb-hash-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.viction-mainnet-node-archive-leveldb-hash-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.viction-mainnet-node-archive-leveldb-hash-ws.rule=Host(`$DOMAIN`) && (Path(`/viction-mainnet-node-archive`) || Path(`/viction-mainnet-node-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.viction-mainnet-node-archive-leveldb-hash-ws.rule=(Path(`/viction-mainnet-node-archive`) || Path(`/viction-mainnet-node-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.viction-mainnet-node-archive-leveldb-hash-ws.middlewares=viction-mainnet-node-archive-leveldb-hash-stripprefix, ipallowlist
--- a/viction/node/viction-mainnet-node-pruned-leveldb-hash.yml
+++ b/viction/node/viction-mainnet-node-pruned-leveldb-hash.yml
@@ -82,7 +82,7 @@ services:
      - traefik.http.routers.viction-mainnet-node-pruned-leveldb-hash.service=viction-mainnet-node-pruned-leveldb-hash
      - ${NO_SSL:-traefik.http.routers.viction-mainnet-node-pruned-leveldb-hash-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.viction-mainnet-node-pruned-leveldb-hash-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.viction-mainnet-node-pruned-leveldb-hash-ws.rule=Host(`$DOMAIN`) && (Path(`/viction-mainnet-node`) || Path(`/viction-mainnet-node/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.viction-mainnet-node-pruned-leveldb-hash-ws.rule=(Path(`/viction-mainnet-node`) || Path(`/viction-mainnet-node/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.viction-mainnet-node-pruned-leveldb-hash-ws.middlewares=viction-mainnet-node-pruned-leveldb-hash-stripprefix, ipallowlist
--- a/viction/node/viction-testnet-node-archive-leveldb-hash.yml
+++ b/viction/node/viction-testnet-node-archive-leveldb-hash.yml
@@ -82,7 +82,7 @@ services:
      - traefik.http.routers.viction-testnet-node-archive-leveldb-hash.service=viction-testnet-node-archive-leveldb-hash
      - ${NO_SSL:-traefik.http.routers.viction-testnet-node-archive-leveldb-hash-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.viction-testnet-node-archive-leveldb-hash-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.viction-testnet-node-archive-leveldb-hash-ws.rule=Host(`$DOMAIN`) && (Path(`/viction-testnet-node-archive`) || Path(`/viction-testnet-node-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.viction-testnet-node-archive-leveldb-hash-ws.rule=(Path(`/viction-testnet-node-archive`) || Path(`/viction-testnet-node-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.viction-testnet-node-archive-leveldb-hash-ws.middlewares=viction-testnet-node-archive-leveldb-hash-stripprefix, ipallowlist
--- a/viction/node/viction-testnet-node-pruned-leveldb-hash.yml
+++ b/viction/node/viction-testnet-node-pruned-leveldb-hash.yml
@@ -82,7 +82,7 @@ services:
      - traefik.http.routers.viction-testnet-node-pruned-leveldb-hash.service=viction-testnet-node-pruned-leveldb-hash
      - ${NO_SSL:-traefik.http.routers.viction-testnet-node-pruned-leveldb-hash-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.viction-testnet-node-pruned-leveldb-hash-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.viction-testnet-node-pruned-leveldb-hash-ws.rule=Host(`$DOMAIN`) && (Path(`/viction-testnet-node`) || Path(`/viction-testnet-node/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.viction-testnet-node-pruned-leveldb-hash-ws.rule=(Path(`/viction-testnet-node`) || Path(`/viction-testnet-node/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.viction-testnet-node-pruned-leveldb-hash-ws.middlewares=viction-testnet-node-pruned-leveldb-hash-stripprefix, ipallowlist
--- a/zksync-era/external-node/zksync-era-boojnet-external-node-archive.yml
+++ b/zksync-era/external-node/zksync-era-boojnet-external-node-archive.yml
@@ -96,7 +96,7 @@ services:
      - traefik.http.routers.zksync-era-boojnet-external-node-archive.service=zksync-era-boojnet-external-node-archive
      - ${NO_SSL:-traefik.http.routers.zksync-era-boojnet-external-node-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.zksync-era-boojnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.zksync-era-boojnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/zksync-era-boojnet-archive`) || Path(`/zksync-era-boojnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.zksync-era-boojnet-external-node-archive-ws.rule=(Path(`/zksync-era-boojnet-archive`) || Path(`/zksync-era-boojnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.zksync-era-boojnet-external-node-archive-ws.middlewares=zksync-era-boojnet-external-node-archive-stripprefix, ipallowlist
--- a/zksync-era/external-node/zksync-era-boojnet-external-node-pruned.yml
+++ b/zksync-era/external-node/zksync-era-boojnet-external-node-pruned.yml
@@ -96,7 +96,7 @@ services:
      - traefik.http.routers.zksync-era-boojnet-external-node-pruned.service=zksync-era-boojnet-external-node-pruned
      - ${NO_SSL:-traefik.http.routers.zksync-era-boojnet-external-node-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.zksync-era-boojnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.zksync-era-boojnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/zksync-era-boojnet`) || Path(`/zksync-era-boojnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.zksync-era-boojnet-external-node-pruned-ws.rule=(Path(`/zksync-era-boojnet`) || Path(`/zksync-era-boojnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.zksync-era-boojnet-external-node-pruned-ws.middlewares=zksync-era-boojnet-external-node-pruned-stripprefix, ipallowlist
--- a/zksync-era/external-node/zksync-era-mainnet-external-node-archive.yml
+++ b/zksync-era/external-node/zksync-era-mainnet-external-node-archive.yml
@@ -98,7 +98,7 @@ services:
      - traefik.http.routers.zksync-era-mainnet-external-node-archive.service=zksync-era-mainnet-external-node-archive
      - ${NO_SSL:-traefik.http.routers.zksync-era-mainnet-external-node-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.zksync-era-mainnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.zksync-era-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/zksync-era-mainnet-archive`) || Path(`/zksync-era-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.zksync-era-mainnet-external-node-archive-ws.rule=(Path(`/zksync-era-mainnet-archive`) || Path(`/zksync-era-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.zksync-era-mainnet-external-node-archive-ws.middlewares=zksync-era-mainnet-external-node-archive-stripprefix, ipallowlist
--- a/zksync-era/external-node/zksync-era-mainnet-external-node-pruned.yml
+++ b/zksync-era/external-node/zksync-era-mainnet-external-node-pruned.yml
@@ -98,7 +98,7 @@ services:
      - traefik.http.routers.zksync-era-mainnet-external-node-pruned.service=zksync-era-mainnet-external-node-pruned
      - ${NO_SSL:-traefik.http.routers.zksync-era-mainnet-external-node-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.zksync-era-mainnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.zksync-era-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/zksync-era-mainnet`) || Path(`/zksync-era-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.zksync-era-mainnet-external-node-pruned-ws.rule=(Path(`/zksync-era-mainnet`) || Path(`/zksync-era-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.zksync-era-mainnet-external-node-pruned-ws.middlewares=zksync-era-mainnet-external-node-pruned-stripprefix, ipallowlist