deploy: regenerate compose from vibe-node main ad1b9236adf5

- haqq/scripts/init.sh: 7c153a83@peer.haqq.mainnet.dteam.tech:28656 is not a 40-hex node id;
  haqqd refuses to start with it in seeds/persistent_peers. Removed from both defaults.
- haqq/scripts/init.sh: ct_merge_seeds was given ADDRBOOK_URL (a JSON addrbook, hundreds of KB)
  as the official seed list; the resulting sed argument exceeded ARG_MAX on Alpine. The
  addrbook is already installed by ct_set_addrbook; pass no seeds URL.
- scripts/cometbft-common.sh (+ per-chain copies via update.sh sync): ct_valid_peers filters
  seeds and persistent_peers to <40-hex>@host:port and logs what it drops, so a bad upstream
  entry can never block startup again.

Replaces the runtime override /root/onsite-overrides/haqq-mainnet-skip-addrbook-as-seeds.yml
that the onsite agent left on rpc-de-31 on 2026-09-07.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KjqejYycVyVvrxV9aTDhgX

.gitignore

@@ -1,2 +1,17 @@
 .env
 peer-backups/
+
+# R-2 (fleet-audit): keep chaindata/snapshots/tarballs out of git status. Some land
+# in-tree via per-host _DATA overrides or snapshot staging; evict to /slowdisk at the
+# next maintenance window — see fleet-audit-2026-07-07.md §R-2.
+*.tar
+*.tar.*
+*.lz4
+*.zst
+snapshots/
+*.bak
+*.swp
+
+# Task C local peer capture state
+peer-state/
+

abcore/abcore.Dockerfile

@@ -0,0 +1,25 @@
+FROM rockylinux:9
+
+COPY ./scripts/init.sh /usr/local/bin/init.sh
+RUN chmod +x /usr/local/bin/init.sh
+
+ARG ABCORE_MAINNET_GETH_VERSION
+
+# Download and verify the geth binary from GitHub releases
+RUN set -eu; \
+    VERSION="${ABCORE_MAINNET_GETH_VERSION}"; \
+    BINARY="geth-${VERSION}"; \
+    URL="https://github.com/ABFoundationGlobal/abcore/releases/download/${VERSION}/${BINARY}"; \
+    SHA256_URL="${URL}.sha256"; \
+    echo "abcore: downloading geth binary from ${URL}"; \
+    curl -fsSL "${URL}" -o "/tmp/${BINARY}"; \
+    echo "abcore: downloading sha256 checksum from ${SHA256_URL}"; \
+    curl -fsSL "${SHA256_URL}" -o "/tmp/${BINARY}.sha256"; \
+    cd /tmp; \
+    sha256sum -c "${BINARY}.sha256" || (echo "abcore: SHA256 verification failed for ${BINARY}" >&2 && exit 1); \
+    chmod +x "${BINARY}"; \
+    mkdir -p /abcore/bin; \
+    mv "${BINARY}" /abcore/bin/geth; \
+    rm -f "${BINARY}" "${BINARY}.sha256"
+
+ENTRYPOINT [ "init.sh" ]

abcore/geth/abcore-mainnet-geth-pruned-pebble-hash.yml

@@ -0,0 +1,151 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+# ABFoundationGlobal/abcore geth-fork client
+# Distributed as release binaries from https://github.com/ABFoundationGlobal/abcore/releases
+# Version: v1.13.15-abcore-1.2
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:abcore/geth/abcore-mainnet-geth-pruned-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/abcore-mainnet-geth \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  abcore-mainnet-geth:
+    build:
+      context: ./abcore
+      dockerfile: abcore.Dockerfile
+      args:
+        ABCORE_MAINNET_GETH_VERSION: ${ABCORE_MAINNET_GETH_VERSION:-v1.13.15-abcore-1.2}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 13110:13110
+      - 13110:13110/udp
+    expose:
+      - 8545
+      - 6060
+    environment:
+      - CHAIN_NAME=mainnet
+    entrypoint: [/usr/local/bin/init.sh]
+    command:
+      - --config=/config/config.toml
+      - --datadir=/root/.ethereum
+      - --db.engine=pebble
+      - --gcmode=full
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,debug,admin,txpool,engine
+      - --http.port=8545
+      - --http.vhosts=*
+      - --maxpeers=50
+      - --metrics
+      - --metrics.addr=0.0.0.0
+      - --metrics.port=6060
+      - --nat=extip:${IP}
+      - --networkid=36888
+      - --port=13110
+      - --rpc.gascap=600000000
+      - --rpc.txfeecap=0
+      - --syncmode=full
+      - --ws
+      - --ws.addr=0.0.0.0
+      - --ws.api=eth,net,web3,debug,admin,txpool,engine
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ABCORE_MAINNET_GETH_PRUNED_PEBBLE_HASH_DATA:-abcore-mainnet-geth-pruned-pebble-hash}:/root/.ethereum
+      - ./abcore/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6060
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.abcore-mainnet-geth-pruned-pebble-hash-stripprefix.stripprefix.prefixes=/abcore-mainnet-geth
+      - traefik.http.services.abcore-mainnet-geth-pruned-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.abcore-mainnet-geth-pruned-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.abcore-mainnet-geth-pruned-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.abcore-mainnet-geth-pruned-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/abcore-mainnet-geth`) || Path(`/abcore-mainnet-geth/`))}
+      - ${NO_SSL:+traefik.http.routers.abcore-mainnet-geth-pruned-pebble-hash.rule=Path(`/abcore-mainnet-geth`) || Path(`/abcore-mainnet-geth/`)}
+      - traefik.http.routers.abcore-mainnet-geth-pruned-pebble-hash.middlewares=abcore-mainnet-geth-pruned-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  abcore-mainnet-geth-pruned-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: abcore
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

abcore/mainnet/config.toml

@@ -0,0 +1,33 @@
+[Eth]
+NetworkId = 36888
+SyncMode = "snap"
+NoPruning = false
+NoPrefetch = false
+
+[Eth.Miner]
+GasFloor = 0
+GasCeil = 63000000
+GasPrice = 50000000000000
+Recommit = 2000000000
+NewPayloadTimeout = 2000000000
+
+[Node]
+DataDir = "/root/.ethereum"
+HTTPHost = "0.0.0.0"
+HTTPPort = 8545
+HTTPVirtualHosts = ["*"]
+HTTPModules = ["eth", "net", "web3", "debug", "admin", "txpool", "engine"]
+WSHost = "0.0.0.0"
+WSPort = 8546
+WSModules = ["eth", "net", "web3", "debug", "admin", "txpool", "engine"]
+WSOrigins = ["*"]
+
+[Node.P2P]
+MaxPeers = 50
+NoDiscovery = false
+DiscoveryV4 = true
+ListenAddr = ":33333"
+
+[Metrics]
+HTTP = "127.0.0.1"
+Port = 6060

abcore/mainnet/genesis.json

@@ -0,0 +1,28 @@
+{
+  "config": {
+    "chainId": 36888,
+    "homesteadBlock": 0,
+    "eip150Block": 0,
+    "eip155Block": 0,
+    "eip158Block": 0,
+    "byzantiumBlock": 0,
+    "constantinopleBlock": 0,
+    "petersburgBlock": 0,
+    "istanbulBlock": 0,
+    "muirGlacierBlock": 0,
+    "berlinBlock": 0,
+    "clique": {
+      "period": 3,
+      "epoch": 30000
+    }
+  },
+  "timestamp": "0x67fda368",
+  "difficulty": "1",
+  "gasLimit": "63000000",
+  "extradata": "0x0000000000000000000000000000000000000000000000000000000000000000E9B95948d28EF808a9184d5fC98346EF3e56839c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
+  "alloc": {
+    "da8B88027Ac27532E1525DD67974c2377b450A08": {
+      "balance": "100000000000000000000000000000"
+    }
+  }
+}

abcore/scripts/init.sh

@@ -0,0 +1,22 @@
+#!/bin/sh
+
+set -e  # Exit on failure
+
+GETH_DATA_DIR="/root/.ethereum"
+CONFIG_FILE="/config/config.toml"
+GENESIS_FILE="/config/genesis.json"
+
+# Initialize geth from genesis if data directory is empty
+if [ -z "$(ls -A "$GETH_DATA_DIR")" ]; then
+    echo "abcore: data directory is empty, initializing from genesis..."
+    if [ -f "$GENESIS_FILE" ]; then
+        /abcore/bin/geth init --datadir "$GETH_DATA_DIR" --db.engine=pebble "$GENESIS_FILE"
+    else
+        echo "abcore: genesis file not found at $GENESIS_FILE" >&2
+        exit 1
+    fi
+else
+    echo "abcore: data directory not empty, continuing..."
+fi
+
+exec /abcore/bin/geth --config "$CONFIG_FILE" --datadir "$GETH_DATA_DIR" "$@"

abstract/external-node/abstract-mainnet-external-node-archive.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -54,7 +54,7 @@ services:
     environment:
       - DATABASE_POOL_SIZE=50
       - DATABASE_URL=postgres://postgres:notsecurepassword@abstract-mainnet-archive-db:5430/zksync_local_ext_node
-      - EN_API_NAMESAPCES=eth,net,web3,debug,pubsub,debug,zks
+      - EN_API_NAMESPACES=eth,net,web3,debug,pubsub,debug,zks
       - EN_ETH_CLIENT_URL=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - EN_HEALTHCHECK_PORT=3081
       - EN_HTTP_PORT=8545
@@ -98,6 +98,7 @@ services:
       - traefik.http.routers.abstract-mainnet-external-node-archive.service=abstract-mainnet-external-node-archive
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-mainnet-archive`) || Path(`/abstract-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.abstract-mainnet-external-node-archive-ws.rule=(Path(`/abstract-mainnet-archive`) || Path(`/abstract-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.abstract-mainnet-external-node-archive-ws.middlewares=abstract-mainnet-external-node-archive-stripprefix, ipallowlist

abstract/external-node/abstract-mainnet-external-node-pruned.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -54,7 +54,7 @@ services:
     environment:
       - DATABASE_POOL_SIZE=50
       - DATABASE_URL=postgres://postgres:notsecurepassword@abstract-mainnet-db:5430/zksync_local_ext_node
-      - EN_API_NAMESAPCES=eth,net,web3,debug,pubsub,debug,zks
+      - EN_API_NAMESPACES=eth,net,web3,debug,pubsub,debug,zks
       - EN_ETH_CLIENT_URL=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - EN_HEALTHCHECK_PORT=3081
       - EN_HTTP_PORT=8545
@@ -98,6 +98,7 @@ services:
       - traefik.http.routers.abstract-mainnet-external-node-pruned.service=abstract-mainnet-external-node-pruned
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-mainnet`) || Path(`/abstract-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.abstract-mainnet-external-node-pruned-ws.rule=(Path(`/abstract-mainnet`) || Path(`/abstract-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.abstract-mainnet-external-node-pruned-ws.middlewares=abstract-mainnet-external-node-pruned-stripprefix, ipallowlist

abstract/external-node/abstract-testnet-external-node-archive.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -54,7 +54,7 @@ services:
     environment:
       - DATABASE_POOL_SIZE=50
       - DATABASE_URL=postgres://postgres:notsecurepassword@abstract-testnet-archive-db:5430/zksync_local_ext_node
-      - EN_API_NAMESAPCES=eth,net,web3,debug,pubsub,debug,zks
+      - EN_API_NAMESPACES=eth,net,web3,debug,pubsub,debug,zks
       - EN_ETH_CLIENT_URL=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
       - EN_HEALTHCHECK_PORT=3081
       - EN_HTTP_PORT=8545
@@ -98,6 +98,7 @@ services:
       - traefik.http.routers.abstract-testnet-external-node-archive.service=abstract-testnet-external-node-archive
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-testnet-archive`) || Path(`/abstract-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.abstract-testnet-external-node-archive-ws.rule=(Path(`/abstract-testnet-archive`) || Path(`/abstract-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.abstract-testnet-external-node-archive-ws.middlewares=abstract-testnet-external-node-archive-stripprefix, ipallowlist

abstract/external-node/abstract-testnet-external-node-pruned.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -54,7 +54,7 @@ services:
     environment:
       - DATABASE_POOL_SIZE=50
       - DATABASE_URL=postgres://postgres:notsecurepassword@abstract-testnet-db:5430/zksync_local_ext_node
-      - EN_API_NAMESAPCES=eth,net,web3,debug,pubsub,debug,zks
+      - EN_API_NAMESPACES=eth,net,web3,debug,pubsub,debug,zks
       - EN_ETH_CLIENT_URL=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
       - EN_HEALTHCHECK_PORT=3081
       - EN_HTTP_PORT=8545
@@ -98,6 +98,7 @@ services:
       - traefik.http.routers.abstract-testnet-external-node-pruned.service=abstract-testnet-external-node-pruned
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-testnet`) || Path(`/abstract-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.abstract-testnet-external-node-pruned-ws.rule=(Path(`/abstract-testnet`) || Path(`/abstract-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.abstract-testnet-external-node-pruned-ws.middlewares=abstract-testnet-external-node-pruned-stripprefix, ipallowlist

accesslog-shipper.awk

@@ -0,0 +1,18 @@
+# Streams dshackle access-log lines unchanged, and every 1000 lines OR 30s
+# injects a __shipstat__ checkpoint carrying the cumulative sent-count for this
+# connection. The splits cruncher (claude host) filters these OUT of event
+# processing and uses them to reconcile shipped-vs-ingested per gateway per hour
+# — the completeness signal the time-based floor cannot see (event-loss-by-
+# rotation, 2026-07-10). `sess` = connection-start epoch so the cruncher detects
+# counter resets on shipper reconnect (retry loop resumes at file END).
+BEGIN { sess = systime(); last = sess; n = 0 }
+{
+    n++
+    print
+    now = systime()
+    if (n % 1000 == 0 || now - last >= 30) {
+        printf "{\"__shipstat__\":1,\"sess\":%d,\"sent\":%d,\"ts\":%d}\n", sess, n, now
+        fflush()
+        last = now
+    }
+}

apply-dshackle-overrides.py

@@ -0,0 +1,143 @@
+#!/usr/bin/env python3
+"""apply-dshackle-overrides.py - weave HOST-LOCAL dshackle upstream overrides into
+the generated main_configs/*.yaml so they survive every configure-drpc regeneration.
+
+Override file (NOT in the repo - host-local, like rpc-local/compose.d):
+    /root/rpc-local/dshackle-overrides.yaml
+
+Schema (match by upstream id OR by chain; id wins):
+    upstreams:
+      uk-4-base-mainnet-op-reth-pruned:        # or e.g. "chain:base"
+        method_groups_disabled: [trace, debug] # removed from enabled, added to disabled
+        methods_disabled: [eth_getFilterLogs]  # per-method disables (methods.disabled)
+        options:
+          disable-validation: true             # merged into upstream options
+
+Rationale: heavy methods at flat per-call pay poison the chain's latency scoring
+(operator method-eviction rule 2026-07-10; see method-economics.py). The disable
+decision is local to the gateway's market, so the config lives on the gateway.
+
+Called by reload_dshackle.sh before signaling dshackle - i.e. re-applied on every
+ansible config push. NOTE: dshackle only re-reads upstream method lists on RESTART;
+this keeps the on-disk config permanently correct, the next restart activates it.
+Idempotent. Silent no-op when the override file is absent.
+"""
+import glob
+import os
+import sys
+
+import yaml
+
+OVERRIDES = '/root/rpc-local/dshackle-overrides.yaml'
+CONFIG_DIR = '/root/rpc/main_configs'
+
+
+def apply(upstream, ov):
+    changed = False
+    mg = upstream.setdefault('method-groups', {}) or {}
+    for grp in ov.get('method_groups_disabled') or []:
+        en = mg.get('enabled') or []
+        if grp in en:
+            en.remove(grp)
+            mg['enabled'] = en
+            changed = True
+        dis = mg.get('disabled') or []
+        if grp not in dis:
+            dis.append(grp)
+            mg['disabled'] = dis
+            changed = True
+    if mg:
+        upstream['method-groups'] = mg
+    for meth in ov.get('methods_disabled') or []:
+        methods = upstream.setdefault('methods', {}) or {}
+        dis = methods.get('disabled') or []
+        if not any((d.get('name') if isinstance(d, dict) else d) == meth for d in dis):
+            dis.append({'name': meth})
+            methods['disabled'] = dis
+            upstream['methods'] = methods
+            changed = True
+    for k, v in (ov.get('options') or {}).items():
+        opts = upstream.setdefault('options', {}) or {}
+        if opts.get(k) != v:
+            opts[k] = v
+            upstream['options'] = opts
+            changed = True
+    return changed
+
+
+ENVFILE = '/root/rpc/.env'
+
+
+def env_overrides():
+    """Chain-level overrides from .env (rendered from host_vars env_overrides):
+        DSHACKLE_<CHAIN>_METHOD_GROUPS_DISABLED=trace,debug
+        DSHACKLE_<CHAIN>_METHODS_DISABLED=eth_getFilterLogs
+    <CHAIN> = dshackle chain name, upper, '-' -> '_' (e.g. BASE, ETH_BEACON_CHAIN)."""
+    spec = {}
+    if not os.path.exists(ENVFILE):
+        return spec
+    import re as _re
+    for line in open(ENVFILE):
+        m = _re.match(r'DSHACKLE_([A-Z0-9_]+)_(METHOD_GROUPS|METHODS)_DISABLED=(.*)', line.strip())
+        if not m:
+            continue
+        chain = m.group(1).lower().replace('_', '-')
+        key = 'method_groups_disabled' if m.group(2) == 'METHOD_GROUPS' else 'methods_disabled'
+        vals = [v.strip() for v in m.group(3).split(',') if v.strip()]
+        if vals:
+            spec.setdefault(f'chain:{chain}', {}).setdefault(key, []).extend(vals)
+    return spec
+
+
+def main():
+    spec = env_overrides()
+    if os.path.exists(OVERRIDES):
+        for k, v in ((yaml.safe_load(open(OVERRIDES)) or {}).get('upstreams') or {}).items():
+            cur = spec.setdefault(k, {})
+            for kk, vv in (v or {}).items():
+                if isinstance(vv, list):
+                    cur[kk] = sorted(set((cur.get(kk) or []) + vv))
+                else:
+                    cur.setdefault(kk, vv)
+    if not spec:
+        return
+    total = 0
+    for path in glob.glob(os.path.join(CONFIG_DIR, '*.yaml')):
+        try:
+            doc = yaml.safe_load(open(path))
+        except yaml.YAMLError:
+            continue
+        if not isinstance(doc, dict) or 'upstreams' not in doc:
+            continue
+        changed = False
+        for up in doc['upstreams'] or []:
+            if not isinstance(up, dict):
+                continue
+            ov = spec.get(up.get('id')) or spec.get(f"chain:{up.get('chain')}")
+            if ov and apply(up, ov):
+                changed = True
+        if changed:
+            text = yaml.safe_dump(doc, default_flow_style=False, sort_keys=False)
+            # dshackle silently refuses to hot-reload configs containing TABS
+            # (operator gotcha 2026-07-10) - fail loudly, never write a tabbed file.
+            if '\t' in text:
+                print(f'dshackle-overrides: REFUSING to write {path} - tab in output')
+                continue
+            with open(path, 'w') as f:
+                f.write(text)
+            total += 1
+            print(f'dshackle-overrides: rewove {path}')
+    # tab audit on ALL configs (even unchanged): a tabbed file silently fails
+    # dshackle's hot-reload, so disk and running state diverge invisibly.
+    for path in glob.glob(os.path.join(CONFIG_DIR, '*.yaml')):
+        try:
+            if '\t' in open(path, errors='replace').read():
+                print(f'dshackle-overrides: WARNING {path} contains TABS - dshackle will SILENTLY skip reloading it')
+        except OSError:
+            pass
+    if total:
+        print(f'dshackle-overrides: {total} file(s) rewoven (dshackle hot-reloads on the HUP that follows)')
+
+
+if __name__ == '__main__':
+    main()

arb/arbnode/arbitrum-one-arbnode-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #

arb/nitro-erigon/arbitrum-sepolia-nitro-erigon-archive-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #

arb/nitro-erigon/arbitrum-sepolia-nitro-erigon-minimal-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #

arb/nitro-erigon/arbitrum-sepolia-nitro-erigon-pruned-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #

arb/nitro/alephzero-mainnet-nitro-archive-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   alephzero-mainnet-archive:
-    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_MAINNET_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -74,6 +74,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/alephzero-mainnet-archive
       - --persistent.db-engine=pebble

arb/nitro/alephzero-mainnet-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   alephzero-mainnet:
-    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_MAINNET_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -74,6 +74,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/alephzero-mainnet
       - --persistent.db-engine=pebble

arb/nitro/alephzero-sepolia-nitro-archive-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   alephzero-sepolia-archive:
-    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_SEPOLIA_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -74,6 +74,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/alephzero-sepolia-archive
       - --persistent.db-engine=pebble

arb/nitro/alephzero-sepolia-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   alephzero-sepolia:
-    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_SEPOLIA_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -74,6 +74,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/alephzero-sepolia
       - --persistent.db-engine=pebble

arb/nitro/apechain-mainnet-nitro-archive-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   apechain-mainnet-archive:
-    image: ${APECHAIN_NITRO_IMAGE:-public.ecr.aws/i6b2w2n6/nitro-node}:${APECHAIN_MAINNET_NITRO_VERSION:-apechain-v3.5.6}
+    image: ${APECHAIN_NITRO_IMAGE:-public.ecr.aws/i6b2w2n6/nitro-node}:${APECHAIN_MAINNET_NITRO_VERSION:-apechain-3.9.9}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/apechain-mainnet-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   apechain-mainnet:
-    image: ${APECHAIN_NITRO_IMAGE:-public.ecr.aws/i6b2w2n6/nitro-node}:${APECHAIN_MAINNET_NITRO_VERSION:-apechain-v3.5.6}
+    image: ${APECHAIN_NITRO_IMAGE:-public.ecr.aws/i6b2w2n6/nitro-node}:${APECHAIN_MAINNET_NITRO_VERSION:-apechain-3.9.9}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/arbitrum-nova-nitro-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-nova-archive:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -69,6 +69,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-nova-archive
       - --ws.addr=0.0.0.0

arb/nitro/arbitrum-nova-nitro-archive-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-nova-archive:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -69,6 +69,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-nova-archive
       - --persistent.db-engine=pebble

arb/nitro/arbitrum-nova-nitro-minimal-pebble-hash.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-nova-minimal:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -70,6 +70,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-nova-minimal
       - --persistent.db-engine=pebble

arb/nitro/arbitrum-nova-nitro-minimal-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-nova-minimal:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -69,6 +69,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-nova-minimal
       - --persistent.db-engine=pebble

arb/nitro/arbitrum-nova-nitro-pruned-pebble-hash.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-nova:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -70,6 +70,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-nova
       - --persistent.db-engine=pebble

arb/nitro/arbitrum-nova-nitro-pruned-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-nova:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -69,6 +69,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-nova
       - --persistent.db-engine=pebble

arb/nitro/arbitrum-one-nitro-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-one-archive:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -70,6 +70,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-one-archive
       - --ws.addr=0.0.0.0

arb/nitro/arbitrum-one-nitro-archive-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-one-archive:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -70,6 +70,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-one-archive
       - --persistent.db-engine=pebble

arb/nitro/arbitrum-one-nitro-archive-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-one-archive:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -69,6 +69,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-one-archive
       - --persistent.db-engine=pebble

arb/nitro/arbitrum-one-nitro-minimal-pebble-hash.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-one-minimal:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -70,6 +70,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-one-minimal
       - --persistent.db-engine=pebble

arb/nitro/arbitrum-one-nitro-minimal-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-one-minimal:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -69,6 +69,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-one-minimal
       - --persistent.db-engine=pebble

arb/nitro/arbitrum-one-nitro-pruned-pebble-hash--fireeth.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -71,6 +71,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-one
       - --persistent.db-engine=pebble

arb/nitro/arbitrum-one-nitro-pruned-pebble-hash--fireeth.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -70,6 +70,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-one
       - --persistent.db-engine=pebble

arb/nitro/arbitrum-one-nitro-pruned-pebble-hash.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-one:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -70,6 +70,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-one
       - --persistent.db-engine=pebble

arb/nitro/arbitrum-one-nitro-pruned-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-one:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -69,6 +69,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-one
       - --persistent.db-engine=pebble

arb/nitro/arbitrum-sepolia-nitro-archive-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-sepolia-archive:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -70,6 +70,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-sepolia-archive
       - --persistent.db-engine=pebble

arb/nitro/arbitrum-sepolia-nitro-minimal-pebble-hash.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-sepolia-minimal:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -71,6 +71,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-sepolia-minimal
       - --persistent.db-engine=pebble

arb/nitro/arbitrum-sepolia-nitro-minimal-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-sepolia-minimal:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -70,6 +70,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-sepolia-minimal
       - --persistent.db-engine=pebble

arb/nitro/arbitrum-sepolia-nitro-pruned-pebble-hash.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-sepolia:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -71,6 +71,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-sepolia
       - --persistent.db-engine=pebble

arb/nitro/arbitrum-sepolia-nitro-pruned-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-sepolia:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -70,6 +70,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/arbitrum-sepolia
       - --persistent.db-engine=pebble

arb/nitro/connext-sepolia-nitro-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   connext-sepolia-archive:
-    image: ${CONNEXT_NITRO_IMAGE:-offchainlabs/nitro-node}:${CONNEXT_SEPOLIA_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${CONNEXT_NITRO_IMAGE:-offchainlabs/nitro-node}:${CONNEXT_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -74,6 +74,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/connext-sepolia-archive
       - --ws.addr=0.0.0.0
@@ -116,7 +117,7 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: everclear-sepolia
+    chain:
     method-groups:
       enabled:
         - debug

arb/nitro/connext-sepolia-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   connext-sepolia:
-    image: ${CONNEXT_NITRO_IMAGE:-offchainlabs/nitro-node}:${CONNEXT_SEPOLIA_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${CONNEXT_NITRO_IMAGE:-offchainlabs/nitro-node}:${CONNEXT_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -74,6 +74,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/connext-sepolia
       - --persistent.db-engine=pebble
@@ -117,7 +118,7 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: everclear-sepolia
+    chain:
     method-groups:
       enabled:
         - debug

arb/nitro/everclear-mainnet-nitro-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   everclear-mainnet-archive:
-    image: ${EVERCLEAR_NITRO_IMAGE:-offchainlabs/nitro-node}:${EVERCLEAR_MAINNET_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${EVERCLEAR_NITRO_IMAGE:-offchainlabs/nitro-node}:${EVERCLEAR_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -74,6 +74,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/everclear-mainnet-archive
       - --ws.addr=0.0.0.0

arb/nitro/everclear-mainnet-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   everclear-mainnet:
-    image: ${EVERCLEAR_NITRO_IMAGE:-offchainlabs/nitro-node}:${EVERCLEAR_MAINNET_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${EVERCLEAR_NITRO_IMAGE:-offchainlabs/nitro-node}:${EVERCLEAR_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -74,6 +74,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/everclear-mainnet
       - --persistent.db-engine=pebble

arb/nitro/humanity-mainnet-nitro-pruned-pebble-hash.prune.yml

@@ -0,0 +1,144 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/humanity-mainnet-nitro-pruned-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/humanity-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  humanity-mainnet:
+    image: ${HUMANITY_NITRO_IMAGE:-offchainlabs/nitro-node}:${HUMANITY_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${HUMANITY_MAINNET_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${HUMANITY_MAINNET_NITRO_PRUNED_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${HUMANITY_MAINNET_NITRO_PRUNED_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${HUMANITY_MAINNET_NITRO_PRUNED_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${HUMANITY_MAINNET_NITRO_PRUNED_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://humanity-main.g.alchemy.com/public
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --init.prune=full
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://humanity-main.g.alchemy.com/public
+      - --node.feed.input.url=wss://humanity-main.g.alchemy.com/public
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.connection.url=${ARBITRUM_ONE_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/humanity-mainnet
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${HUMANITY_MAINNET_NITRO_PRUNED_PEBBLE_HASH_DATA:-humanity-mainnet-nitro-pruned-pebble-hash}:/root/.arbitrum
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.humanity-mainnet-nitro-pruned-pebble-hash-stripprefix.stripprefix.prefixes=/humanity-mainnet
+      - traefik.http.services.humanity-mainnet-nitro-pruned-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.humanity-mainnet-nitro-pruned-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.humanity-mainnet-nitro-pruned-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.humanity-mainnet-nitro-pruned-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/humanity-mainnet`) || Path(`/humanity-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.humanity-mainnet-nitro-pruned-pebble-hash.rule=Path(`/humanity-mainnet`) || Path(`/humanity-mainnet/`)}
+      - traefik.http.routers.humanity-mainnet-nitro-pruned-pebble-hash.middlewares=humanity-mainnet-nitro-pruned-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  humanity-mainnet-nitro-pruned-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: humanity
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/humanity-mainnet-nitro-pruned-pebble-hash.yml

@@ -0,0 +1,143 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/humanity-mainnet-nitro-pruned-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/humanity-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  humanity-mainnet:
+    image: ${HUMANITY_NITRO_IMAGE:-offchainlabs/nitro-node}:${HUMANITY_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${HUMANITY_MAINNET_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${HUMANITY_MAINNET_NITRO_PRUNED_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${HUMANITY_MAINNET_NITRO_PRUNED_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${HUMANITY_MAINNET_NITRO_PRUNED_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${HUMANITY_MAINNET_NITRO_PRUNED_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://humanity-main.g.alchemy.com/public
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://humanity-main.g.alchemy.com/public
+      - --node.feed.input.url=wss://humanity-main.g.alchemy.com/public
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.connection.url=${ARBITRUM_ONE_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/humanity-mainnet
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${HUMANITY_MAINNET_NITRO_PRUNED_PEBBLE_HASH_DATA:-humanity-mainnet-nitro-pruned-pebble-hash}:/root/.arbitrum
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.humanity-mainnet-nitro-pruned-pebble-hash-stripprefix.stripprefix.prefixes=/humanity-mainnet
+      - traefik.http.services.humanity-mainnet-nitro-pruned-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.humanity-mainnet-nitro-pruned-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.humanity-mainnet-nitro-pruned-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.humanity-mainnet-nitro-pruned-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/humanity-mainnet`) || Path(`/humanity-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.humanity-mainnet-nitro-pruned-pebble-hash.rule=Path(`/humanity-mainnet`) || Path(`/humanity-mainnet/`)}
+      - traefik.http.routers.humanity-mainnet-nitro-pruned-pebble-hash.middlewares=humanity-mainnet-nitro-pruned-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  humanity-mainnet-nitro-pruned-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: humanity
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/humanity-testnet-nitro-pruned-pebble-hash.prune.yml

@@ -0,0 +1,144 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/humanity-testnet-nitro-pruned-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/humanity-testnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  humanity-testnet:
+    image: ${HUMANITY_NITRO_IMAGE:-offchainlabs/nitro-node}:${HUMANITY_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${HUMANITY_TESTNET_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${HUMANITY_TESTNET_NITRO_PRUNED_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${HUMANITY_TESTNET_NITRO_PRUNED_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${HUMANITY_TESTNET_NITRO_PRUNED_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${HUMANITY_TESTNET_NITRO_PRUNED_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.testnet.humanity.org
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --init.prune=full
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://rpc.testnet.humanity.org
+      - --node.feed.input.url=wss://rpc.testnet.humanity.org
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.connection.url=${ARBITRUM_ONE_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/humanity-testnet
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${HUMANITY_TESTNET_NITRO_PRUNED_PEBBLE_HASH_DATA:-humanity-testnet-nitro-pruned-pebble-hash}:/root/.arbitrum
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.humanity-testnet-nitro-pruned-pebble-hash-stripprefix.stripprefix.prefixes=/humanity-testnet
+      - traefik.http.services.humanity-testnet-nitro-pruned-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.humanity-testnet-nitro-pruned-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.humanity-testnet-nitro-pruned-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.humanity-testnet-nitro-pruned-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/humanity-testnet`) || Path(`/humanity-testnet/`))}
+      - ${NO_SSL:+traefik.http.routers.humanity-testnet-nitro-pruned-pebble-hash.rule=Path(`/humanity-testnet`) || Path(`/humanity-testnet/`)}
+      - traefik.http.routers.humanity-testnet-nitro-pruned-pebble-hash.middlewares=humanity-testnet-nitro-pruned-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  humanity-testnet-nitro-pruned-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: humanity-testnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/humanity-testnet-nitro-pruned-pebble-hash.yml

@@ -0,0 +1,143 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/humanity-testnet-nitro-pruned-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/humanity-testnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  humanity-testnet:
+    image: ${HUMANITY_NITRO_IMAGE:-offchainlabs/nitro-node}:${HUMANITY_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${HUMANITY_TESTNET_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${HUMANITY_TESTNET_NITRO_PRUNED_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${HUMANITY_TESTNET_NITRO_PRUNED_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${HUMANITY_TESTNET_NITRO_PRUNED_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${HUMANITY_TESTNET_NITRO_PRUNED_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.testnet.humanity.org
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://rpc.testnet.humanity.org
+      - --node.feed.input.url=wss://rpc.testnet.humanity.org
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.connection.url=${ARBITRUM_ONE_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/humanity-testnet
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${HUMANITY_TESTNET_NITRO_PRUNED_PEBBLE_HASH_DATA:-humanity-testnet-nitro-pruned-pebble-hash}:/root/.arbitrum
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.humanity-testnet-nitro-pruned-pebble-hash-stripprefix.stripprefix.prefixes=/humanity-testnet
+      - traefik.http.services.humanity-testnet-nitro-pruned-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.humanity-testnet-nitro-pruned-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.humanity-testnet-nitro-pruned-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.humanity-testnet-nitro-pruned-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/humanity-testnet`) || Path(`/humanity-testnet/`))}
+      - ${NO_SSL:+traefik.http.routers.humanity-testnet-nitro-pruned-pebble-hash.rule=Path(`/humanity-testnet`) || Path(`/humanity-testnet/`)}
+      - traefik.http.routers.humanity-testnet-nitro-pruned-pebble-hash.middlewares=humanity-testnet-nitro-pruned-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  humanity-testnet-nitro-pruned-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: humanity-testnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/opencampuscodex-sepolia-nitro-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   opencampuscodex-sepolia-archive:
-    image: ${OPENCAMPUSCODEX_NITRO_IMAGE:-offchainlabs/nitro-node}:${OPENCAMPUSCODEX_SEPOLIA_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${OPENCAMPUSCODEX_NITRO_IMAGE:-offchainlabs/nitro-node}:${OPENCAMPUSCODEX_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/opencampuscodex-sepolia-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   opencampuscodex-sepolia:
-    image: ${OPENCAMPUSCODEX_NITRO_IMAGE:-offchainlabs/nitro-node}:${OPENCAMPUSCODEX_SEPOLIA_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${OPENCAMPUSCODEX_NITRO_IMAGE:-offchainlabs/nitro-node}:${OPENCAMPUSCODEX_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/playblock-mainnet-nitro-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   playblock-mainnet-archive:
-    image: ${PLAYBLOCK_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLAYBLOCK_MAINNET_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${PLAYBLOCK_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLAYBLOCK_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/playblock-mainnet-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   playblock-mainnet:
-    image: ${PLAYBLOCK_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLAYBLOCK_MAINNET_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${PLAYBLOCK_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLAYBLOCK_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/plume-mainnet-nitro-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   plume-mainnet-archive:
-    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.11.1-8512b8c}
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -74,6 +74,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/plume-mainnet-archive
       - --ws.addr=0.0.0.0

arb/nitro/plume-mainnet-nitro-archive-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   plume-mainnet-archive:
-    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.11.1-8512b8c}
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -74,6 +74,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/plume-mainnet-archive
       - --persistent.db-engine=pebble

arb/nitro/plume-mainnet-nitro-pruned-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   plume-mainnet:
-    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.11.1-8512b8c}
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -74,6 +74,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/plume-mainnet
       - --ws.addr=0.0.0.0

arb/nitro/plume-mainnet-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   plume-mainnet:
-    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.11.1-8512b8c}
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -74,6 +74,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/plume-mainnet
       - --persistent.db-engine=pebble

arb/nitro/plume-testnet-nitro-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   plume-testnet-archive:
-    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -74,6 +74,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/plume-testnet-archive
       - --ws.addr=0.0.0.0

arb/nitro/plume-testnet-nitro-archive-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   plume-testnet-archive:
-    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -74,6 +74,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/plume-testnet-archive
       - --persistent.db-engine=pebble

arb/nitro/plume-testnet-nitro-pruned-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   plume-testnet:
-    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -74,6 +74,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/plume-testnet
       - --ws.addr=0.0.0.0

arb/nitro/plume-testnet-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   plume-testnet:
-    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -74,6 +74,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/plume-testnet
       - --persistent.db-engine=pebble

arb/nitro/real-mainnet-nitro-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   real-mainnet-archive:
-    image: ${REAL_NITRO_IMAGE:-offchainlabs/nitro-node}:${REAL_MAINNET_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${REAL_NITRO_IMAGE:-offchainlabs/nitro-node}:${REAL_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -74,6 +74,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/real-mainnet-archive
       - --ws.addr=0.0.0.0

arb/nitro/real-mainnet-nitro-archive-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   real-mainnet-archive:
-    image: ${REAL_NITRO_IMAGE:-offchainlabs/nitro-node}:${REAL_MAINNET_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${REAL_NITRO_IMAGE:-offchainlabs/nitro-node}:${REAL_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -74,6 +74,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/real-mainnet-archive
       - --persistent.db-engine=pebble

arb/nitro/real-mainnet-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   real-mainnet:
-    image: ${REAL_NITRO_IMAGE:-offchainlabs/nitro-node}:${REAL_MAINNET_NITRO_VERSION:-v3.11.0-a618155}
+    image: ${REAL_NITRO_IMAGE:-offchainlabs/nitro-node}:${REAL_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -74,6 +74,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/real-mainnet
       - --persistent.db-engine=pebble

arb/nitro/robinhood-mainnet-nitro-archive-pebble-hash.yml

@@ -0,0 +1,143 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/robinhood-mainnet-nitro-archive-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/robinhood-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  robinhood-mainnet-archive:
+    image: ${ROBINHOOD_NITRO_IMAGE:-offchainlabs/nitro-node}:${ROBINHOOD_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${ROBINHOOD_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ROBINHOOD_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ROBINHOOD_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ROBINHOOD_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.mainnet.chain.robinhood.com
+      - --execution.rpc.filter-log-cache-size=${ROBINHOOD_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_FILTER_LOG_CACHE:-32}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.feed.input.url=wss://feed.mainnet.chain.robinhood.com
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/robinhood-mainnet-archive
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ROBINHOOD_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_DATA:-robinhood-mainnet-nitro-archive-pebble-hash}:/root/.arbitrum
+      - ./arb/robinhood/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.robinhood-mainnet-nitro-archive-pebble-hash-stripprefix.stripprefix.prefixes=/robinhood-mainnet-archive
+      - traefik.http.services.robinhood-mainnet-nitro-archive-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.robinhood-mainnet-nitro-archive-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.robinhood-mainnet-nitro-archive-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.robinhood-mainnet-nitro-archive-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/robinhood-mainnet-archive`) || Path(`/robinhood-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.robinhood-mainnet-nitro-archive-pebble-hash.rule=Path(`/robinhood-mainnet-archive`) || Path(`/robinhood-mainnet-archive/`)}
+      - traefik.http.routers.robinhood-mainnet-nitro-archive-pebble-hash.middlewares=robinhood-mainnet-nitro-archive-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  robinhood-mainnet-nitro-archive-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: robinhood
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/robinhood-mainnet-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   robinhood-mainnet:
-    image: ${ROBINHOOD_NITRO_IMAGE:-offchainlabs/nitro-node}:${ROBINHOOD_MAINNET_NITRO_VERSION:-v3.11.1-8512b8c}
+    image: ${ROBINHOOD_NITRO_IMAGE:-offchainlabs/nitro-node}:${ROBINHOOD_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -71,6 +71,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_MAINNET_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/robinhood-mainnet
       - --persistent.db-engine=pebble

arb/nitro/robinhood-testnet-nitro-archive-pebble-hash.yml

@@ -0,0 +1,143 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/robinhood-testnet-nitro-archive-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/robinhood-testnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  robinhood-testnet-archive:
+    image: ${ROBINHOOD_NITRO_IMAGE:-offchainlabs/nitro-node}:${ROBINHOOD_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${ROBINHOOD_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ROBINHOOD_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ROBINHOOD_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ROBINHOOD_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.testnet.chain.robinhood.com
+      - --execution.rpc.filter-log-cache-size=${ROBINHOOD_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_FILTER_LOG_CACHE:-32}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.feed.input.url=wss://feed.testnet.chain.robinhood.com
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/robinhood-testnet-archive
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ROBINHOOD_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_DATA:-robinhood-testnet-nitro-archive-pebble-hash}:/root/.arbitrum
+      - ./arb/robinhood/testnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.robinhood-testnet-nitro-archive-pebble-hash-stripprefix.stripprefix.prefixes=/robinhood-testnet-archive
+      - traefik.http.services.robinhood-testnet-nitro-archive-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.robinhood-testnet-nitro-archive-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.robinhood-testnet-nitro-archive-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.robinhood-testnet-nitro-archive-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/robinhood-testnet-archive`) || Path(`/robinhood-testnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.robinhood-testnet-nitro-archive-pebble-hash.rule=Path(`/robinhood-testnet-archive`) || Path(`/robinhood-testnet-archive/`)}
+      - traefik.http.routers.robinhood-testnet-nitro-archive-pebble-hash.middlewares=robinhood-testnet-nitro-archive-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  robinhood-testnet-nitro-archive-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: robinhood-testnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/robinhood-testnet-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   robinhood-testnet:
-    image: ${ROBINHOOD_NITRO_IMAGE:-offchainlabs/nitro-node}:${ROBINHOOD_TESTNET_NITRO_VERSION:-v3.11.1-8512b8c}
+    image: ${ROBINHOOD_NITRO_IMAGE:-offchainlabs/nitro-node}:${ROBINHOOD_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -71,6 +71,7 @@ services:
       - --node.sequencer=false
       - --node.staker.enable=false
       - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.blob-client.secondary-beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST_FALLBACK}
       - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
       - --persistent.chain=/root/.arbitrum/robinhood-testnet
       - --persistent.db-engine=pebble

arc/reth/arc-mainnet-reth-archive-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -45,7 +45,7 @@ services:
   arc-mainnet-archive-sockets-init:
     image: debian:bookworm-slim
     entrypoint: [/bin/sh, -c]
-    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    command: [chown 999:999 /sockets]
     restart: no
     depends_on:
       arc-mainnet-archive-consensus-init:
@@ -82,7 +82,6 @@ services:
       - --auth-ipc.path=/sockets/auth.ipc
       - --chain=arc-mainnet
       - --datadir=/data/execution
-      - --debug
       - --disable-discovery
       - --enable-arc-rpc
       - --http
@@ -93,7 +92,6 @@ services:
       - --log.file.directory=/data/execution/logs
       - --metrics=0.0.0.0:9001
       - --rpc.forwarder=https://rpc.arc.network/
-      - --trace
     restart: unless-stopped
     stop_grace_period: 5m
     depends_on:
@@ -162,6 +160,9 @@ volumes:
   arc-mainnet-reth-archive-trace-execution:
   arc-mainnet-reth-archive-trace-sockets:
 
+x-ephemeral-volumes:
+  - arc-mainnet-reth-archive-trace-sockets
+
 x-upstreams:
   - id: $${ID}
     labels:

arc/reth/arc-mainnet-reth-pruned-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -45,7 +45,7 @@ services:
   arc-mainnet-sockets-init:
     image: debian:bookworm-slim
     entrypoint: [/bin/sh, -c]
-    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    command: [chown 999:999 /sockets]
     restart: no
     depends_on:
       arc-mainnet-consensus-init:
@@ -82,7 +82,6 @@ services:
       - --auth-ipc.path=/sockets/auth.ipc
       - --chain=arc-mainnet
       - --datadir=/data/execution
-      - --debug
       - --disable-discovery
       - --enable-arc-rpc
       - --full
@@ -93,8 +92,8 @@ services:
       - --ipcpath=/sockets/reth.ipc
       - --log.file.directory=/data/execution/logs
       - --metrics=0.0.0.0:9001
+      - --prune.block-interval=5000
       - --rpc.forwarder=https://rpc.arc.network/
-      - --trace
     restart: unless-stopped
     stop_grace_period: 5m
     depends_on:
@@ -163,6 +162,9 @@ volumes:
   arc-mainnet-reth-pruned-trace-execution:
   arc-mainnet-reth-pruned-trace-sockets:
 
+x-ephemeral-volumes:
+  - arc-mainnet-reth-pruned-trace-sockets
+
 x-upstreams:
   - id: $${ID}
     labels:

arc/reth/arc-testnet-reth-archive-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arc-testnet-archive-consensus-init:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-0.7.2}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-0.8.0}
     user: 0:0
     entrypoint: [/usr/local/bin/arc-node-consensus, init]
     command:
@@ -45,7 +45,7 @@ services:
   arc-testnet-archive-sockets-init:
     image: debian:bookworm-slim
     entrypoint: [/bin/sh, -c]
-    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    command: [chown 999:999 /sockets]
     restart: no
     depends_on:
       arc-testnet-archive-consensus-init:
@@ -57,7 +57,7 @@ services:
     logging: *logging-defaults
 
   arc-testnet-archive:
-    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_TESTNET_RETH_VERSION:-0.7.2}
+    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_TESTNET_RETH_VERSION:-0.8.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -82,7 +82,6 @@ services:
       - --auth-ipc.path=/sockets/auth.ipc
       - --chain=arc-testnet
       - --datadir=/data/execution
-      - --debug
       - --disable-discovery
       - --enable-arc-rpc
       - --http
@@ -93,7 +92,6 @@ services:
       - --log.file.directory=/data/execution/logs
       - --metrics=0.0.0.0:9001
       - --rpc.forwarder=https://rpc.quicknode.testnet.arc.network/
-      - --trace
     restart: unless-stopped
     stop_grace_period: 5m
     depends_on:
@@ -121,7 +119,7 @@ services:
     shm_size: 2gb
 
   arc-testnet-archive-node:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-0.7.2}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-0.8.0}
     user: 0:0
     expose:
       - 31000
@@ -134,7 +132,6 @@ services:
       - --execution-socket=/sockets/auth.ipc
       - --follow
       - --follow.endpoint=https://rpc.quicknode.testnet.arc.network,wss=rpc.quicknode.testnet.arc.network
-      - --follow.endpoint=https://rpc.drpc.testnet.arc.network,wss=rpc.drpc.testnet.arc.network
       - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
       - --full
       - --home=/data/consensus
@@ -163,6 +160,9 @@ volumes:
   arc-testnet-reth-archive-trace-execution:
   arc-testnet-reth-archive-trace-sockets:
 
+x-ephemeral-volumes:
+  - arc-testnet-reth-archive-trace-sockets
+
 x-upstreams:
   - id: $${ID}
     labels:

arc/reth/arc-testnet-reth-pruned-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arc-testnet-consensus-init:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-0.7.2}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-0.8.0}
     user: 0:0
     entrypoint: [/usr/local/bin/arc-node-consensus, init]
     command:
@@ -45,7 +45,7 @@ services:
   arc-testnet-sockets-init:
     image: debian:bookworm-slim
     entrypoint: [/bin/sh, -c]
-    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    command: [chown 999:999 /sockets]
     restart: no
     depends_on:
       arc-testnet-consensus-init:
@@ -57,7 +57,7 @@ services:
     logging: *logging-defaults
 
   arc-testnet:
-    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_TESTNET_RETH_VERSION:-0.7.2}
+    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_TESTNET_RETH_VERSION:-0.8.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -82,7 +82,6 @@ services:
       - --auth-ipc.path=/sockets/auth.ipc
       - --chain=arc-testnet
       - --datadir=/data/execution
-      - --debug
       - --disable-discovery
       - --enable-arc-rpc
       - --full
@@ -93,8 +92,8 @@ services:
       - --ipcpath=/sockets/reth.ipc
       - --log.file.directory=/data/execution/logs
       - --metrics=0.0.0.0:9001
+      - --prune.block-interval=5000
       - --rpc.forwarder=https://rpc.quicknode.testnet.arc.network/
-      - --trace
     restart: unless-stopped
     stop_grace_period: 5m
     depends_on:
@@ -122,7 +121,7 @@ services:
     shm_size: 2gb
 
   arc-testnet-node:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-0.7.2}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-0.8.0}
     user: 0:0
     expose:
       - 31000
@@ -135,7 +134,6 @@ services:
       - --execution-socket=/sockets/auth.ipc
       - --follow
       - --follow.endpoint=https://rpc.quicknode.testnet.arc.network,wss=rpc.quicknode.testnet.arc.network
-      - --follow.endpoint=https://rpc.drpc.testnet.arc.network,wss=rpc.drpc.testnet.arc.network
       - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
       - --full
       - --home=/data/consensus
@@ -164,6 +162,9 @@ volumes:
   arc-testnet-reth-pruned-trace-execution:
   arc-testnet-reth-pruned-trace-sockets:
 
+x-ephemeral-volumes:
+  - arc-testnet-reth-pruned-trace-sockets
+
 x-upstreams:
   - id: $${ID}
     labels:

arc/reth/arc-testnet-reth-pruned.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arc-testnet-consensus-init:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-0.7.2}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-0.8.0}
     user: 0:0
     entrypoint: [/usr/local/bin/arc-node-consensus, init]
     command:
@@ -45,7 +45,7 @@ services:
   arc-testnet-sockets-init:
     image: debian:bookworm-slim
     entrypoint: [/bin/sh, -c]
-    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    command: [chown 999:999 /sockets]
     restart: no
     depends_on:
       arc-testnet-consensus-init:
@@ -57,7 +57,7 @@ services:
     logging: *logging-defaults
 
   arc-testnet:
-    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_TESTNET_RETH_VERSION:-0.7.2}
+    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_TESTNET_RETH_VERSION:-0.8.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -92,6 +92,7 @@ services:
       - --ipcpath=/sockets/reth.ipc
       - --log.file.directory=/data/execution/logs
       - --metrics=0.0.0.0:9001
+      - --prune.block-interval=5000
       - --rpc.forwarder=https://rpc.quicknode.testnet.arc.network/
     restart: unless-stopped
     stop_grace_period: 5m
@@ -120,7 +121,7 @@ services:
     shm_size: 2gb
 
   arc-testnet-node:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-0.7.2}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-0.8.0}
     user: 0:0
     expose:
       - 31000
@@ -133,7 +134,6 @@ services:
       - --execution-socket=/sockets/auth.ipc
       - --follow
       - --follow.endpoint=https://rpc.quicknode.testnet.arc.network,wss=rpc.quicknode.testnet.arc.network
-      - --follow.endpoint=https://rpc.drpc.testnet.arc.network,wss=rpc.drpc.testnet.arc.network
       - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
       - --full
       - --home=/data/consensus
@@ -162,6 +162,9 @@ volumes:
   arc-testnet-reth-pruned-execution:
   arc-testnet-reth-pruned-sockets:
 
+x-ephemeral-volumes:
+  - arc-testnet-reth-pruned-sockets
+
 x-upstreams:
   - id: $${ID}
     labels:

avalanche/fuji/pruned/C/config.json

@@ -1,4 +1,6 @@
 {
     "rpc-gas-cap": 2500000000,
-    "eth-rpc-gas-limit": 2500000000
+    "eth-rpc-gas-limit": 2500000000,
+    "state-sync-enabled": true,
+    "state-sync-skip-resume": true
 }

avalanche/go/avalanche-fuji-go-archive-leveldb.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   avalanche-fuji-archive:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.15.0-fuji}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -87,6 +87,7 @@ services:
       - traefik.http.routers.avalanche-fuji-go-archive-leveldb.service=avalanche-fuji-go-archive-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji-archive`) || Path(`/avalanche-fuji-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.rule=(Path(`/avalanche-fuji-archive`) || Path(`/avalanche-fuji-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.middlewares=avalanche-fuji-go-archive-leveldb-stripprefix, avalanche-fuji-go-archive-leveldb-set-ws-path, ipallowlist
@@ -106,10 +107,9 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: avalanche
+    chain: avalanche-fuji
     method-groups:
       enabled:
-        - debug
         - filter
     methods:
       disabled:

avalanche/go/avalanche-fuji-go-pruned-leveldb.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   avalanche-fuji:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.15.0-fuji}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -87,6 +87,7 @@ services:
       - traefik.http.routers.avalanche-fuji-go-pruned-leveldb.service=avalanche-fuji-go-pruned-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.middlewares=avalanche-fuji-go-pruned-leveldb-stripprefix, avalanche-fuji-go-pruned-leveldb-set-ws-path, ipallowlist
@@ -106,10 +107,9 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: avalanche
+    chain: avalanche-fuji
     method-groups:
       enabled:
-        - debug
         - filter
     methods:
       disabled:

avalanche/go/avalanche-fuji-go-pruned-leveldb.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   avalanche-fuji:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.15.0-fuji}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -87,6 +87,7 @@ services:
       - traefik.http.routers.avalanche-fuji-go-pruned-leveldb.service=avalanche-fuji-go-pruned-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.middlewares=avalanche-fuji-go-pruned-leveldb-stripprefix, avalanche-fuji-go-pruned-leveldb-set-ws-path, ipallowlist
@@ -106,10 +107,9 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: avalanche
+    chain: avalanche-fuji
     method-groups:
       enabled:
-        - debug
         - filter
     methods:
       disabled:

avalanche/go/avalanche-fuji-go-pruned-pebbledb.prune.yml

@@ -1,118 +0,0 @@
----
-x-logging-defaults: &logging-defaults
-  driver: json-file
-  options:
-    max-size: "10m"
-    max-file: "3"
-
-# Usage:
-#
-# mkdir rpc && cd rpc
-#
-# git init
-# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
-# git fetch origin vibe
-# git checkout origin/vibe
-#
-# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
-#
-# env
-# ...
-# IP=$(curl ipinfo.io/ip)
-# DOMAIN=${IP}.traefik.me
-# COMPOSE_FILE=base.yml:rpc.yml:avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml
-#
-# docker compose up -d
-#
-# curl -X POST https://${IP}.traefik.me/avalanche-fuji \
-#   -H "Content-Type: application/json" \
-#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
-
-services:
-  avalanche-fuji:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
-    sysctls:
-      # TCP Performance
-      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
-      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
-      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
-      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
-      net.core.somaxconn: 32768                   # Higher connection queue
-      # Memory/Connection Management
-      # net.core.netdev_max_backlog: 50000          # Increase network buffer
-      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
-      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
-    ulimits:
-      nofile: 1048576    # Max open files (for RPC/WS connections)
-    user: root
-    ports:
-      - 10350:10350
-      - 10350:10350/udp
-    expose:
-      - 9650
-    entrypoint: [/bin/sh, -c, mkdir -p /root/.avalanchego/offline-pruning && exec /avalanchego/build/avalanchego "$@", --]
-    command:
-      - --chain-config-dir=/config/prune
-      - --db-type=pebbledb
-      - --http-allowed-hosts=*
-      - --http-host=
-      - --network-id=fuji
-      - --public-ip=${IP}
-      - --staking-port=10350
-    restart: unless-stopped
-    stop_grace_period: 5m
-    networks:
-      - chains
-    volumes:
-      - ${AVALANCHE_FUJI_GO_PRUNED_PEBBLEDB_DATA:-avalanche-fuji-go-pruned-pebbledb}:/root/.avalanchego
-      - ./avalanche/fuji:/config
-      - /slowdisk:/slowdisk
-    logging: *logging-defaults
-    labels:
-      - prometheus-scrape.enabled=false
-      - traefik.enable=true
-      - traefik.http.middlewares.avalanche-fuji-go-pruned-pebbledb-set-path.replacepath.path=/ext/bc/C/rpc
-      - traefik.http.middlewares.avalanche-fuji-go-pruned-pebbledb-stripprefix.stripprefix.prefixes=/avalanche-fuji
-      - traefik.http.services.avalanche-fuji-go-pruned-pebbledb.loadbalancer.server.port=9650
-      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`))}
-      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.rule=Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)}
-      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.middlewares=avalanche-fuji-go-pruned-pebbledb-stripprefix, avalanche-fuji-go-pruned-pebbledb-set-path, ipallowlist
-      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.priority=50   # gets any request that is not GET with UPGRADE header
-      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.priority=100   # answers GET requests first
-      - traefik.http.middlewares.avalanche-fuji-go-pruned-pebbledb-set-ws-path.replacepath.path=/ext/bc/C/ws
-      - traefik.http.services.avalanche-fuji-go-pruned-pebbledb-ws.loadbalancer.server.port=9650
-      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.service=avalanche-fuji-go-pruned-pebbledb-ws
-      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.service=avalanche-fuji-go-pruned-pebbledb
-      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.middlewares=avalanche-fuji-go-pruned-pebbledb-stripprefix, avalanche-fuji-go-pruned-pebbledb-set-ws-path, ipallowlist
-
-volumes:
-  avalanche-fuji-go-pruned-pebbledb:
-
-x-upstreams:
-  - id: $${ID}
-    labels:
-      provider: $${PROVIDER}
-    connection:
-      generic:
-        rpc:
-          url: $${RPC_URL}
-        ws:
-          frameSize: 20Mb
-          msgSize: 50Mb
-          url: $${WS_URL}
-    chain: avalanche
-    method-groups:
-      enabled:
-        - debug
-        - filter
-    methods:
-      disabled:
-      enabled:
-        - name: txpool_content # TODO: should be disabled for rollup nodes
-...

avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml

@@ -1,118 +0,0 @@
----
-x-logging-defaults: &logging-defaults
-  driver: json-file
-  options:
-    max-size: "10m"
-    max-file: "3"
-
-# Usage:
-#
-# mkdir rpc && cd rpc
-#
-# git init
-# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
-# git fetch origin vibe
-# git checkout origin/vibe
-#
-# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
-#
-# env
-# ...
-# IP=$(curl ipinfo.io/ip)
-# DOMAIN=${IP}.traefik.me
-# COMPOSE_FILE=base.yml:rpc.yml:avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml
-#
-# docker compose up -d
-#
-# curl -X POST https://${IP}.traefik.me/avalanche-fuji \
-#   -H "Content-Type: application/json" \
-#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
-
-services:
-  avalanche-fuji:
-    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
-    sysctls:
-      # TCP Performance
-      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
-      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
-      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
-      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
-      net.core.somaxconn: 32768                   # Higher connection queue
-      # Memory/Connection Management
-      # net.core.netdev_max_backlog: 50000          # Increase network buffer
-      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
-      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
-    ulimits:
-      nofile: 1048576    # Max open files (for RPC/WS connections)
-    user: root
-    ports:
-      - 10350:10350
-      - 10350:10350/udp
-    expose:
-      - 9650
-    entrypoint: [/avalanchego/build/avalanchego]
-    command:
-      - --chain-config-dir=/config/pruned
-      - --db-type=pebbledb
-      - --http-allowed-hosts=*
-      - --http-host=
-      - --network-id=fuji
-      - --public-ip=${IP}
-      - --staking-port=10350
-    restart: unless-stopped
-    stop_grace_period: 5m
-    networks:
-      - chains
-    volumes:
-      - ${AVALANCHE_FUJI_GO_PRUNED_PEBBLEDB_DATA:-avalanche-fuji-go-pruned-pebbledb}:/root/.avalanchego
-      - ./avalanche/fuji:/config
-      - /slowdisk:/slowdisk
-    logging: *logging-defaults
-    labels:
-      - prometheus-scrape.enabled=false
-      - traefik.enable=true
-      - traefik.http.middlewares.avalanche-fuji-go-pruned-pebbledb-set-path.replacepath.path=/ext/bc/C/rpc
-      - traefik.http.middlewares.avalanche-fuji-go-pruned-pebbledb-stripprefix.stripprefix.prefixes=/avalanche-fuji
-      - traefik.http.services.avalanche-fuji-go-pruned-pebbledb.loadbalancer.server.port=9650
-      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`))}
-      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.rule=Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)}
-      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.middlewares=avalanche-fuji-go-pruned-pebbledb-stripprefix, avalanche-fuji-go-pruned-pebbledb-set-path, ipallowlist
-      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.priority=50   # gets any request that is not GET with UPGRADE header
-      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.priority=100   # answers GET requests first
-      - traefik.http.middlewares.avalanche-fuji-go-pruned-pebbledb-set-ws-path.replacepath.path=/ext/bc/C/ws
-      - traefik.http.services.avalanche-fuji-go-pruned-pebbledb-ws.loadbalancer.server.port=9650
-      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.service=avalanche-fuji-go-pruned-pebbledb-ws
-      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.service=avalanche-fuji-go-pruned-pebbledb
-      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.middlewares=avalanche-fuji-go-pruned-pebbledb-stripprefix, avalanche-fuji-go-pruned-pebbledb-set-ws-path, ipallowlist
-
-volumes:
-  avalanche-fuji-go-pruned-pebbledb:
-
-x-upstreams:
-  - id: $${ID}
-    labels:
-      provider: $${PROVIDER}
-    connection:
-      generic:
-        rpc:
-          url: $${RPC_URL}
-        ws:
-          frameSize: 20Mb
-          msgSize: 50Mb
-          url: $${WS_URL}
-    chain: avalanche
-    method-groups:
-      enabled:
-        - debug
-        - filter
-    methods:
-      disabled:
-      enabled:
-        - name: txpool_content # TODO: should be disabled for rollup nodes
-...

avalanche/go/avalanche-mainnet-go-archive-leveldb.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -87,6 +87,7 @@ services:
       - traefik.http.routers.avalanche-mainnet-go-archive-leveldb.service=avalanche-mainnet-go-archive-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet-archive`) || Path(`/avalanche-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.rule=(Path(`/avalanche-mainnet-archive`) || Path(`/avalanche-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.middlewares=avalanche-mainnet-go-archive-leveldb-stripprefix, avalanche-mainnet-go-archive-leveldb-set-ws-path, ipallowlist
@@ -109,7 +110,6 @@ x-upstreams:
     chain: avalanche
     method-groups:
       enabled:
-        - debug
         - filter
     methods:
       disabled:

avalanche/go/avalanche-mainnet-go-firewood-firewood.yml

@@ -0,0 +1,119 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:avalanche/go/avalanche-mainnet-go-firewood-firewood.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/avalanche-mainnet-firewood \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  avalanche-mainnet-firewood:
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_MAINNET_GO_VERSION:-v1.14.2}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 13144:13144
+      - 13144:13144/udp
+    expose:
+      - 9650
+    entrypoint: [/avalanchego/build/avalanchego]
+    command:
+      - --chain-config-dir=/config/firewood
+      - --coreth-state-scheme=firewood
+      - --db-type=firewood
+      - --http-allowed-hosts=*
+      - --http-host=
+      - --network-id=mainnet
+      - --public-ip=${IP}
+      - --staking-port=13144
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${AVALANCHE_MAINNET_GO_FIREWOOD_FIREWOOD_DATA:-avalanche-mainnet-go-firewood-firewood}:/root/.avalanchego
+      - ./avalanche/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
+      - traefik.enable=true
+      - traefik.http.middlewares.avalanche-mainnet-go-firewood-firewood-set-path.replacepath.path=/ext/bc/C/rpc
+      - traefik.http.middlewares.avalanche-mainnet-go-firewood-firewood-stripprefix.stripprefix.prefixes=/avalanche-mainnet-firewood
+      - traefik.http.services.avalanche-mainnet-go-firewood-firewood.loadbalancer.server.port=9650
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-firewood-firewood.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-firewood-firewood.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-firewood-firewood.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet-firewood`) || Path(`/avalanche-mainnet-firewood/`))}
+      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-firewood-firewood.rule=Path(`/avalanche-mainnet-firewood`) || Path(`/avalanche-mainnet-firewood/`)}
+      - traefik.http.routers.avalanche-mainnet-go-firewood-firewood.middlewares=avalanche-mainnet-go-firewood-firewood-stripprefix, avalanche-mainnet-go-firewood-firewood-set-path, ipallowlist
+      - traefik.http.routers.avalanche-mainnet-go-firewood-firewood.priority=50   # gets any request that is not GET with UPGRADE header
+      - traefik.http.routers.avalanche-mainnet-go-firewood-firewood-ws.priority=100   # answers GET requests first
+      - traefik.http.middlewares.avalanche-mainnet-go-firewood-firewood-set-ws-path.replacepath.path=/ext/bc/C/ws
+      - traefik.http.services.avalanche-mainnet-go-firewood-firewood-ws.loadbalancer.server.port=9650
+      - traefik.http.routers.avalanche-mainnet-go-firewood-firewood-ws.service=avalanche-mainnet-go-firewood-firewood-ws
+      - traefik.http.routers.avalanche-mainnet-go-firewood-firewood.service=avalanche-mainnet-go-firewood-firewood
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-firewood-firewood-ws.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-firewood-firewood-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-firewood-firewood-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet-firewood`) || Path(`/avalanche-mainnet-firewood/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-firewood-firewood-ws.rule=(Path(`/avalanche-mainnet-firewood`) || Path(`/avalanche-mainnet-firewood/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - traefik.http.routers.avalanche-mainnet-go-firewood-firewood-ws.middlewares=avalanche-mainnet-go-firewood-firewood-stripprefix, avalanche-mainnet-go-firewood-firewood-set-ws-path, ipallowlist
+
+volumes:
+  avalanche-mainnet-go-firewood-firewood:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: avalanche
+    method-groups:
+      enabled:
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...

avalanche/go/avalanche-mainnet-go-pruned-leveldb.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -87,6 +87,7 @@ services:
       - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb.service=avalanche-mainnet-go-pruned-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.middlewares=avalanche-mainnet-go-pruned-leveldb-stripprefix, avalanche-mainnet-go-pruned-leveldb-set-ws-path, ipallowlist
@@ -109,7 +110,6 @@ x-upstreams:
     chain: avalanche
     method-groups:
       enabled:
-        - debug
         - filter
     methods:
       disabled:

avalanche/go/avalanche-mainnet-go-pruned-leveldb.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -87,6 +87,7 @@ services:
       - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb.service=avalanche-mainnet-go-pruned-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.middlewares=avalanche-mainnet-go-pruned-leveldb-stripprefix, avalanche-mainnet-go-pruned-leveldb-set-ws-path, ipallowlist
@@ -109,7 +110,6 @@ x-upstreams:
     chain: avalanche
     method-groups:
       enabled:
-        - debug
         - filter
     methods:
       disabled:

avalanche/go/avalanche-mainnet-go-pruned-pebbledb.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -87,6 +87,7 @@ services:
       - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb.service=avalanche-mainnet-go-pruned-pebbledb
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.middlewares=avalanche-mainnet-go-pruned-pebbledb-stripprefix, avalanche-mainnet-go-pruned-pebbledb-set-ws-path, ipallowlist
@@ -109,7 +110,6 @@ x-upstreams:
     chain: avalanche
     method-groups:
       enabled:
-        - debug
         - filter
     methods:
       disabled:

avalanche/go/avalanche-mainnet-go-pruned-pebbledb.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -87,6 +87,7 @@ services:
       - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb.service=avalanche-mainnet-go-pruned-pebbledb
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.middlewares=avalanche-mainnet-go-pruned-pebbledb-stripprefix, avalanche-mainnet-go-pruned-pebbledb-set-ws-path, ipallowlist
@@ -109,7 +110,6 @@ x-upstreams:
     chain: avalanche
     method-groups:
       enabled:
-        - debug
         - filter
     methods:
       disabled:

avalanche/mainnet/firewood/C/config.json

@@ -0,0 +1,24 @@
+{
+    "snowman-api-enabled": false,
+    "coreth-admin-api-enabled": false,
+    "net-api-enabled": true,
+    "rpc-gas-cap": 2500000000,
+    "rpc-tx-fee-cap": 100,
+    "eth-rpc-gas-limit": 2500000000,
+    "eth-api-enabled": true,
+    "personal-api-enabled": false,
+    "tx-pool-api-enabled": false,
+    "debug-api-enabled": false,
+    "web3-api-enabled": true,
+    "local-txs-enabled": false,
+    "pruning-enabled": false,
+    "api-max-duration": 0,
+    "api-max-blocks-per-request": 0,
+    "allow-unfinalized-queries": false,
+    "log-level": "info",
+    "state-sync-enabled": true,
+    "state-sync-skip-resume": true,
+    "state-scheme": "firewood",
+    "populate-missing-tries": null,
+    "snapshot-cache": 0
+}

avalanche/mainnet/prune/C/config.json

@@ -1,23 +1,6 @@
 {
-    "snowman-api-enabled": false,
-    "coreth-admin-api-enabled": false,
-    "net-api-enabled": true,
     "rpc-gas-cap": 2500000000,
-    "rpc-tx-fee-cap": 100,
     "eth-rpc-gas-limit": 2500000000,
-    "eth-api-enabled": true,
-    "personal-api-enabled": false,
-    "tx-pool-api-enabled": false,
-    "debug-api-enabled": false,
-    "web3-api-enabled": true,
-    "local-txs-enabled": false,
-    "pruning-enabled": true,
-    "api-max-duration": 0,
-    "api-max-blocks-per-request": 0,
-    "allow-unfinalized-queries": false,
-    "log-level": "info",
-    "state-sync-enabled": false,
-    "state-sync-skip-resume": true,
     "offline-pruning-enabled": true,
     "offline-pruning-data-directory": "/root/.avalanchego/offline-pruning"
 }

avalanche/mainnet/pruned/C/config.json

@@ -16,6 +16,6 @@
     "api-max-blocks-per-request": 0,
     "allow-unfinalized-queries": false,
     "log-level": "info",
-    "state-sync-enabled": false,
+    "state-sync-enabled": true,
     "state-sync-skip-resume": true
 }

aztec/aztec/aztec-mainnet-aztec-pruned.yml

@@ -0,0 +1,112 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+# Aztec full node. See https://docs.aztec.network/network/setup/running_a_node
+# Admin port (8880) is not exposed; use docker exec for admin API.
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:aztec/aztec/aztec-mainnet-aztec-pruned.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/aztec-mainnet-pruned \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  aztec-mainnet-pruned:
+    image: ${AZTEC_AZTEC_IMAGE:-aztecprotocol/aztec}:${AZTEC_MAINNET_AZTEC_VERSION:-5.0.1}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 13840:13840
+      - 13840:13840/udp
+    expose:
+      - 8545
+    environment:
+      AZTEC_ADMIN_PORT: '8880'
+      AZTEC_PORT: '8545'
+      DATA_DIRECTORY: /var/lib/data
+      ETHEREUM_DEBUG_HOSTS: ${ETHEREUM_MAINNET_DEBUG_HOSTS:-${ETHEREUM_MAINNET_EXECUTION_RPC}}
+      ETHEREUM_HOSTS: ${ETHEREUM_MAINNET_EXECUTION_RPC}
+      L1_CONSENSUS_HOST_URLS: ${ETHEREUM_MAINNET_BEACON_REST}
+      LOG_LEVEL: ${AZTEC_LOG_LEVEL:-info}
+      P2P_IP: ${IP}
+      P2P_PORT: '13840'
+    entrypoint: [node, --no-warnings, /usr/src/yarn-project/aztec/dest/bin/index.js, start]
+    command:
+      - --node
+      - --network=mainnet
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${AZTEC_MAINNET_AZTEC_PRUNED_DATA:-aztec-mainnet-aztec-pruned}:/var/lib/data
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
+      - traefik.enable=true
+      - traefik.http.middlewares.aztec-mainnet-aztec-pruned-stripprefix.stripprefix.prefixes=/aztec-mainnet-pruned
+      - traefik.http.services.aztec-mainnet-aztec-pruned.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.aztec-mainnet-aztec-pruned.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.aztec-mainnet-aztec-pruned.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.aztec-mainnet-aztec-pruned.rule=Host(`$DOMAIN`) && (Path(`/aztec-mainnet-pruned`) || Path(`/aztec-mainnet-pruned/`))}
+      - ${NO_SSL:+traefik.http.routers.aztec-mainnet-aztec-pruned.rule=Path(`/aztec-mainnet-pruned`) || Path(`/aztec-mainnet-pruned/`)}
+      - traefik.http.routers.aztec-mainnet-aztec-pruned.middlewares=aztec-mainnet-aztec-pruned-stripprefix, ipallowlist
+
+volumes:
+  aztec-mainnet-aztec-pruned:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: aztec-mainnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...

aztec/aztec/aztec-testnet-aztec-pruned.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 # Aztec full node. See https://docs.aztec.network/network/setup/running_a_node
 # Admin port (8880) is not exposed; use docker exec for admin API.
 
@@ -32,7 +32,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   aztec-testnet-pruned:
-    image: ${AZTEC_AZTEC_IMAGE:-aztecprotocol/aztec}:${AZTEC_TESTNET_AZTEC_VERSION:-5.0.0-rc.1}
+    image: ${AZTEC_AZTEC_IMAGE:-aztecprotocol/aztec}:${AZTEC_TESTNET_AZTEC_VERSION:-5.0.1}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -56,6 +56,7 @@ services:
       AZTEC_ADMIN_PORT: '8880'
       AZTEC_PORT: '8545'
       DATA_DIRECTORY: /var/lib/data
+      ETHEREUM_DEBUG_HOSTS: ${ETHEREUM_SEPOLIA_DEBUG_HOSTS:-${ETHEREUM_SEPOLIA_EXECUTION_RPC}}
       ETHEREUM_HOSTS: ${ETHEREUM_SEPOLIA_EXECUTION_RPC}
       L1_CONSENSUS_HOST_URLS: ${ETHEREUM_SEPOLIA_BEACON_REST}
       LOG_LEVEL: ${AZTEC_LOG_LEVEL:-info}

babylon/babylond/babylon-mainnet-babylond-pruned.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -96,6 +96,7 @@ services:
       - traefik.http.routers.babylon-mainnet-babylond-pruned.service=babylon-mainnet-babylond-pruned
       - ${NO_SSL:-traefik.http.routers.babylon-mainnet-babylond-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.babylon-mainnet-babylond-pruned-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.babylon-mainnet-babylond-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/babylon-mainnet-pruned`) || Path(`/babylon-mainnet-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.babylon-mainnet-babylond-pruned-ws.rule=(Path(`/babylon-mainnet-pruned`) || Path(`/babylon-mainnet-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.babylon-mainnet-babylond-pruned-ws.middlewares=babylon-mainnet-babylond-pruned-stripprefix, babylon-mainnet-babylond-pruned-set-ws-path, ipallowlist

babylon/scripts/cometbft-common.sh

@@ -68,11 +68,28 @@ ct_merge_seeds() {
       ct_log "no official seeds fetched from $_url (continuing with configured)"
     fi
   fi
+  _seeds=$(ct_valid_peers "$_seeds")
   if [ -n "$_seeds" ]; then
     sed -i "s/^seeds = \".*\"/seeds = \"${_seeds}\"/" "$_cfg"
   fi
 }
 
+# ct_valid_peers LIST
+#   Keep only well-formed CometBFT peer entries (<40-hex node id>@<host>:<port>), drop and
+#   log the rest. A truncated id such as 7c153a83@peer.haqq.mainnet.dteam.tech:28656 makes
+#   haqqd refuse to start ("invalid node ID"), 2026-09-07 rpc-de-31.
+ct_valid_peers() {
+  _in="$1"; _out=""
+  for _p in $(echo "$_in" | tr ',' ' '); do
+    if echo "$_p" | grep -Eqi '^[0-9a-f]{40}@[^@,:]+:[0-9]+$'; then
+      _out="${_out:+$_out,}$_p"
+    else
+      ct_log "dropping malformed peer entry: $_p"
+    fi
+  done
+  echo "$_out"
+}
+
 # ct_set_persistent_peers CONFIG_TOML PEERS
 #   Handles both cometbft-classic `persistent_peers` (underscore) and forks that use
 #   `persistent-peers` (hyphen, e.g. sei) — patches whichever key is present.
@@ -80,6 +97,8 @@ ct_set_persistent_peers() {
   _cfg="$1"; _peers="$2"
   [ -f "$_cfg" ] || return 0
   [ -n "$_peers" ] || return 0
+  _peers=$(ct_valid_peers "$_peers")
+  [ -n "$_peers" ] || return 0
   sed -i "s/^persistent_peers = \".*\"/persistent_peers = \"${_peers}\"/" "$_cfg"
   sed -i "s/^persistent-peers = \".*\"/persistent-peers = \"${_peers}\"/" "$_cfg"
   return 0

backup-node.sh

@@ -157,9 +157,16 @@ for key in $keys; do
     folder_size_gb=$(printf "%.0f" "$folder_size")
 
     if (( folder_size_gb < 1 )) && [[ "$FORCE_SMALL" != true ]]; then
+	# The torn-backup floor applies to the MAIN data volume only (key == compose
+	# basename). Sidecar volumes (eigenda-proxy, configs, ...) are legitimately
+	# tiny — a 0G sidecar aborting the whole backup left no manifest and blocked
+	# the refresh lane on every ronin bench-retire (4 cycles, 2026-07).
+	if [[ "$key" == "$(basename "$compose_name")" ]]; then
 	    echo "FATAL: existing datadir too small for backup (${folder_size_gb}G at $source_folder); use --force if intentional" >&2
 	    exit 1
 	fi
+	echo "NOTE: sidecar volume rpc_$key is ${folder_size_gb}G — allowing small backup (floor guards the main data volume only)"
+    fi
     
     timestamp=$(date +'%Y-%m-%d-%H-%M-%S')
     target_file="rpc_$key-${timestamp}-${folder_size_gb}G.tar.zst"

berachain/geth/berachain-bepolia-geth-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #

berachain/geth/berachain-mainnet-geth-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 
 # Usage:
 #
@@ -112,7 +112,7 @@ services:
       context: ./berachain
       dockerfile: beacon-kit.Dockerfile
       args:
-        BEACONKIT_VERSION: ${BERACHAIN_MAINNET_BEACON_KIT_VERSION:-v1.4.0-rc3}
+        BEACONKIT_VERSION: ${BERACHAIN_MAINNET_BEACON_KIT_VERSION:-v1.4.1}
         BEACONKIT_IMAGE: ${BERACHAIN_MAINNET_BEACON_KIT_IMAGE:-ghcr.io/berachain/beacon-kit}
     ports:
       - 16562:16562

berachain/reth/berachain-bartio-reth-archive-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 # you should backup the peers of your beacond node frequently.
 # docker exec -it rpc-berachain-bartio-reth-node-1 curl http://localhost:26657/net_info | jq -r '
 #  .result.peers[]
@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   berachain-bartio-reth:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BARTIO_RETH_VERSION:-v1.4.0}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BARTIO_RETH_VERSION:-v1.4.4}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

berachain/reth/berachain-bartio-reth-pruned-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 # you should backup the peers of your beacond node frequently.
 # docker exec -it rpc-berachain-bartio-reth-pruned-node-1 curl http://localhost:26657/net_info | jq -r '
 #  .result.peers[]
@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   berachain-bartio-reth-pruned:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BARTIO_RETH_VERSION:-v1.4.0}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BARTIO_RETH_VERSION:-v1.4.4}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

berachain/reth/berachain-bepolia-reth-archive-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 # you should backup the peers of your beacond node frequently.
 # docker exec -it rpc-berachain-bepolia-reth-node-1 curl http://localhost:26657/net_info | jq -r '
 #  .result.peers[]
@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   berachain-bepolia-reth:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BEPOLIA_RETH_VERSION:-v1.4.2}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BEPOLIA_RETH_VERSION:-v1.4.4}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

berachain/reth/berachain-bepolia-reth-pruned-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
+    max-size: "512m"
-    max-file: "3"
+    max-file: "2"
 # you should backup the peers of your beacond node frequently.
 # docker exec -it rpc-berachain-bepolia-reth-pruned-node-1 curl http://localhost:26657/net_info | jq -r '
 #  .result.peers[]
@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   berachain-bepolia-reth-pruned:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BEPOLIA_RETH_VERSION:-v1.4.2}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BEPOLIA_RETH_VERSION:-v1.4.4}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle