ink-mainnet: remove orphaned op-geth compose files

Source already dropped ink-mainnet op-geth from config.yml, but update.sh never prunes orphans — stale op/geth/ink-mainnet-op-geth-*.yml files stayed in COMPOSE_FILE and fought op-reth for Traefik /ink-mainnet (404). Delete the four orphans so only op-reth remains for that path.
2026-07-28 05:44:48 +00:00
116 changed files with 1522 additions and 1693 deletions
--- a/arc/reth/arc-mainnet-reth-archive-trace.yml
+++ b/arc/reth/arc-mainnet-reth-archive-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  arc-mainnet-archive-consensus-init:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-v0.7.3}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-0.7.2}
    user: 0:0
    entrypoint: [/usr/local/bin/arc-node-consensus, init]
    command:
@@ -57,7 +57,7 @@ services:
    logging: *logging-defaults

  arc-mainnet-archive:
-    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_MAINNET_RETH_VERSION:-v0.7.3}
+    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_MAINNET_RETH_VERSION:-0.7.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -119,7 +119,7 @@ services:
    shm_size: 2gb

  arc-mainnet-archive-node:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-v0.7.3}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-0.7.2}
    user: 0:0
    expose:
      - 31000
@@ -160,9 +160,6 @@ volumes:
  arc-mainnet-reth-archive-trace-execution:
  arc-mainnet-reth-archive-trace-sockets:

-x-ephemeral-volumes:
-  - arc-mainnet-reth-archive-trace-sockets
-
 x-upstreams:
  - id: $${ID}
    labels:
--- a/arc/reth/arc-mainnet-reth-pruned-trace.yml
+++ b/arc/reth/arc-mainnet-reth-pruned-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  arc-mainnet-consensus-init:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-v0.7.3}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-0.7.2}
    user: 0:0
    entrypoint: [/usr/local/bin/arc-node-consensus, init]
    command:
@@ -57,7 +57,7 @@ services:
    logging: *logging-defaults

  arc-mainnet:
-    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_MAINNET_RETH_VERSION:-v0.7.3}
+    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_MAINNET_RETH_VERSION:-0.7.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -120,7 +120,7 @@ services:
    shm_size: 2gb

  arc-mainnet-node:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-v0.7.3}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-0.7.2}
    user: 0:0
    expose:
      - 31000
@@ -161,9 +161,6 @@ volumes:
  arc-mainnet-reth-pruned-trace-execution:
  arc-mainnet-reth-pruned-trace-sockets:

-x-ephemeral-volumes:
-  - arc-mainnet-reth-pruned-trace-sockets
-
 x-upstreams:
  - id: $${ID}
    labels:
--- a/arc/reth/arc-testnet-reth-archive-trace.yml
+++ b/arc/reth/arc-testnet-reth-archive-trace.yml
@@ -160,9 +160,6 @@ volumes:
  arc-testnet-reth-archive-trace-execution:
  arc-testnet-reth-archive-trace-sockets:

-x-ephemeral-volumes:
-  - arc-testnet-reth-archive-trace-sockets
-
 x-upstreams:
  - id: $${ID}
    labels:
--- a/arc/reth/arc-testnet-reth-pruned-trace.yml
+++ b/arc/reth/arc-testnet-reth-pruned-trace.yml
@@ -161,9 +161,6 @@ volumes:
  arc-testnet-reth-pruned-trace-execution:
  arc-testnet-reth-pruned-trace-sockets:

-x-ephemeral-volumes:
-  - arc-testnet-reth-pruned-trace-sockets
-
 x-upstreams:
  - id: $${ID}
    labels:
--- a/arc/reth/arc-testnet-reth-pruned.yml
+++ b/arc/reth/arc-testnet-reth-pruned.yml
@@ -161,9 +161,6 @@ volumes:
  arc-testnet-reth-pruned-execution:
  arc-testnet-reth-pruned-sockets:

-x-ephemeral-volumes:
-  - arc-testnet-reth-pruned-sockets
-
 x-upstreams:
  - id: $${ID}
    labels:
--- a/backup-node.sh
+++ b/backup-node.sh
@@ -157,15 +157,8 @@ for key in $keys; do
    folder_size_gb=$(printf "%.0f" "$folder_size")

    if (( folder_size_gb < 1 )) && [[ "$FORCE_SMALL" != true ]]; then
-	# The torn-backup floor applies to the MAIN data volume only (key == compose
-	# basename). Sidecar volumes (eigenda-proxy, configs, ...) are legitimately
-	# tiny — a 0G sidecar aborting the whole backup left no manifest and blocked
-	# the refresh lane on every ronin bench-retire (4 cycles, 2026-07).
-	if [[ "$key" == "$(basename "$compose_name")" ]]; then
-	    echo "FATAL: existing datadir too small for backup (${folder_size_gb}G at $source_folder); use --force if intentional" >&2
-	    exit 1
-	fi
-	echo "NOTE: sidecar volume rpc_$key is ${folder_size_gb}G — allowing small backup (floor guards the main data volume only)"
+	echo "FATAL: existing datadir too small for backup (${folder_size_gb}G at $source_folder); use --force if intentional" >&2
+	exit 1
    fi
    
    timestamp=$(date +'%Y-%m-%d-%H-%M-%S')
--- a/clone-backup.sh
+++ b/clone-backup.sh
@@ -298,7 +298,6 @@ cleanup_all_ports() {
 # Transfer backup file using screen method with better error handling
 transfer_backup() {
    local key=$1
-    local compose_file=$2
    local volume_name="rpc_$key"
    
    # Find the newest restorable backup file (skip near-empty artifacts)
@@ -310,13 +309,6 @@ transfer_backup() {
            echo "Note: no backup for secrets/jwt volume $volume_name (regenerated at create-node), skipping"
            return 2
        fi
-        # Check if this volume is optional or ephemeral - if so, skip gracefully
-        if [[ -n "$compose_file" && -f "$compose_file" ]]; then
-            if is_ephemeral_volume_key "$key" "$compose_file" || is_optional_volume_key "$key" "$compose_file"; then
-                echo "Note: no backup for optional/ephemeral volume $volume_name (will be created empty at destination), skipping"
-                return 2
-            fi
-        fi
        echo "Warning: No restorable backup file found for $volume_name, skipping"
        return 1
    fi
@@ -510,7 +502,6 @@ LISTENER
 # Fallback: Direct SSH pipe
 transfer_backup_ssh() {
    local key=$1
-    local compose_file=$2
    local volume_name="rpc_$key"
    
    # Find the newest restorable backup file (skip near-empty artifacts)
@@ -522,13 +513,6 @@ transfer_backup_ssh() {
            echo "Note: no backup for secrets/jwt volume $volume_name (regenerated at create-node), skipping"
            return 2
        fi
-        # Check if this volume is optional or ephemeral - if so, skip gracefully
-        if [[ -n "$compose_file" && -f "$compose_file" ]]; then
-            if is_ephemeral_volume_key "$key" "$compose_file" || is_optional_volume_key "$key" "$compose_file"; then
-                echo "Note: no backup for optional/ephemeral volume $volume_name (will be created empty at destination), skipping"
-                return 2
-            fi
-        fi
        echo "Warning: No restorable backup file found for $volume_name, skipping"
        return 1
    fi
@@ -658,7 +642,7 @@ main() {

    for key in $keys; do
        # Try nc method first
-        transfer_backup "$key" "$dir/$1.yml"
+        transfer_backup "$key"
        rc=$?

        if [[ $rc -eq 2 ]]; then
@@ -666,7 +650,7 @@ main() {
            skipped_volumes="$skipped_volumes $key"
        elif [[ $rc -ne 0 ]]; then
            echo "NC transfer failed, trying direct SSH..."
-            transfer_backup_ssh "$key" "$dir/$1.yml"
+            transfer_backup_ssh "$key"
            rc=$?

            if [[ $rc -eq 0 ]]; then
--- a/compose_registry.json
+++ b/compose_registry.json
--- a/drpc-free.yml
+++ b/drpc-free.yml
@@ -1,6 +1,6 @@
 services:
  dshackle-free:
-    image: ${DSHACKLE_IMAGE:-stakesquid/dshackle:0.79.11-ss2@sha256:624866381b672e051042f4f383fb19af1d9d4e508929ac92b2d70db3212ead92}
+    image: drpcorg/dshackle:0.79.10
    restart: unless-stopped
    volumes:
      - ./free_configs:/etc/dshackle
--- a/drpc.yml
+++ b/drpc.yml
@@ -23,7 +23,7 @@ services:
      sleep 10; done'

  dshackle:
-    image: ${DSHACKLE_IMAGE:-stakesquid/dshackle:0.79.11-ss2@sha256:624866381b672e051042f4f383fb19af1d9d4e508929ac92b2d70db3212ead92}
+    image: drpcorg/dshackle:0.79.10
    restart: unless-stopped
    volumes:
      - ./main_configs:/etc/dshackle
--- a/erigon3.Dockerfile
+++ b/erigon3.Dockerfile
@@ -1,6 +1,6 @@
 # syntax = docker/dockerfile:1.2
 ARG REPO=https://github.com/erigontech/erigon.git
-ARG VERSION=v3.5.3
+ARG VERSION=v3.4.4
 ARG COMMIT=${COMMIT:-${VERSION}}

 FROM docker.io/library/golang:1.24.1-alpine3.20 AS builder
--- a/ethereum/besu/ethereum-mainnet-besu-pruned-bonsai--nimbus.yml
+++ b/ethereum/besu/ethereum-mainnet-besu-pruned-bonsai--nimbus.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ethereum-mainnet-besu:
-    image: ${ETHEREUM_BESU_IMAGE:-hyperledger/besu}:${ETHEREUM_MAINNET_BESU_VERSION:-26.7.1}
+    image: ${ETHEREUM_BESU_IMAGE:-hyperledger/besu}:${ETHEREUM_MAINNET_BESU_VERSION:-26.7.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -189,15 +189,8 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-mainnet-besu-pruned-bonsai_nimbus]
 ...
--- a/ethereum/erigon3/ethereum-hoodi-erigon3-archive-trace.yml
+++ b/ethereum/erigon3/ethereum-hoodi-erigon3-archive-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ethereum-hoodi-erigon3-archive:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.5.3}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/ethereum/erigon3/ethereum-hoodi-erigon3-minimal-trace.yml
+++ b/ethereum/erigon3/ethereum-hoodi-erigon3-minimal-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ethereum-hoodi-erigon3-minimal:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.5.3}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/ethereum/erigon3/ethereum-hoodi-erigon3-pruned-trace.yml
+++ b/ethereum/erigon3/ethereum-hoodi-erigon3-pruned-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ethereum-hoodi-erigon3:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.5.3}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_HOODI_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/ethereum/erigon3/ethereum-mainnet-erigon3-archive-trace.yml
+++ b/ethereum/erigon3/ethereum-mainnet-erigon3-archive-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ethereum-mainnet-erigon3-archive:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.5.3}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/ethereum/erigon3/ethereum-mainnet-erigon3-minimal-trace.yml
+++ b/ethereum/erigon3/ethereum-mainnet-erigon3-minimal-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ethereum-mainnet-erigon3-minimal:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.5.3}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/ethereum/erigon3/ethereum-mainnet-erigon3-pruned-trace.yml
+++ b/ethereum/erigon3/ethereum-mainnet-erigon3-pruned-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ethereum-mainnet-erigon3:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.5.3}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_MAINNET_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/ethereum/erigon3/ethereum-sepolia-erigon3-archive-trace.yml
+++ b/ethereum/erigon3/ethereum-sepolia-erigon3-archive-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ethereum-sepolia-erigon3-archive:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.5.3}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/ethereum/erigon3/ethereum-sepolia-erigon3-minimal-trace.yml
+++ b/ethereum/erigon3/ethereum-sepolia-erigon3-minimal-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ethereum-sepolia-erigon3-minimal:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.5.3}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/ethereum/erigon3/ethereum-sepolia-erigon3-pruned-trace.yml
+++ b/ethereum/erigon3/ethereum-sepolia-erigon3-pruned-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ethereum-sepolia-erigon3:
-    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.5.3}
+    image: ${ETHEREUM_ERIGON3_IMAGE:-erigontech/erigon}:${ETHEREUM_SEPOLIA_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/ethereum/geth/ethereum-hoodi-geth-pruned-pebble-path--nimbus.yml
+++ b/ethereum/geth/ethereum-hoodi-geth-pruned-pebble-path--nimbus.yml
@@ -195,15 +195,8 @@ x-upstreams:
    chain: eth-beacon-chain-hoodi
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-hoodi-geth-pruned-pebble-path_nimbus]
 ...
--- a/ethereum/geth/ethereum-hoodi-geth-pruned-pebble-path.yml
+++ b/ethereum/geth/ethereum-hoodi-geth-pruned-pebble-path.yml
@@ -196,15 +196,8 @@ x-upstreams:
    chain: eth-beacon-chain-hoodi
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-hoodi-geth-pruned-pebble-path_prysm]
 ...
--- a/ethereum/geth/ethereum-mainnet-geth-minimal-pebble-path.yml
+++ b/ethereum/geth/ethereum-mainnet-geth-minimal-pebble-path.yml
@@ -200,15 +200,8 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-mainnet-geth-minimal-pebble-path_prysm]
 ...
--- a/ethereum/geth/ethereum-mainnet-geth-pruned-leveldb-hash--nimbus--fireeth.yml
+++ b/ethereum/geth/ethereum-mainnet-geth-pruned-leveldb-hash--nimbus--fireeth.yml
@@ -259,15 +259,8 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-mainnet-geth-pruned-leveldb-hash_nimbus]
 ...
--- a/ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path--nimbus--fireeth.yml
+++ b/ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path--nimbus--fireeth.yml
@@ -261,15 +261,8 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-mainnet-geth-pruned-pebble-path_nimbus]
 ...
--- a/ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path--nimbus.yml
+++ b/ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path--nimbus.yml
@@ -195,15 +195,8 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-mainnet-geth-pruned-pebble-path_nimbus]
 ...
--- a/ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path.yml
+++ b/ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path.yml
@@ -196,15 +196,8 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-mainnet-geth-pruned-pebble-path_prysm]
 ...
--- a/ethereum/geth/ethereum-sepolia-geth-pruned-pebble-path--nimbus.yml
+++ b/ethereum/geth/ethereum-sepolia-geth-pruned-pebble-path--nimbus.yml
@@ -195,15 +195,8 @@ x-upstreams:
    chain: eth-beacon-chain-sepolia
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-sepolia-geth-pruned-pebble-path_nimbus]
 ...
--- a/ethereum/geth/ethereum-sepolia-geth-pruned-pebble-path.yml
+++ b/ethereum/geth/ethereum-sepolia-geth-pruned-pebble-path.yml
@@ -196,15 +196,8 @@ x-upstreams:
    chain: eth-beacon-chain-sepolia
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-sepolia-geth-pruned-pebble-path_prysm]
 ...
--- a/ethereum/nethermind/ethereum-hoodi-nethermind-pruned-rocksdb-trace--nimbus.yml
+++ b/ethereum/nethermind/ethereum-hoodi-nethermind-pruned-rocksdb-trace--nimbus.yml
@@ -169,15 +169,8 @@ x-upstreams:
    chain: eth-beacon-chain-hoodi
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-hoodi-nethermind-pruned-rocksdb-trace_nimbus]
 ...
--- a/ethereum/nethermind/ethereum-mainnet-nethermind-pruned-rocksdb-trace--nimbus.yml
+++ b/ethereum/nethermind/ethereum-mainnet-nethermind-pruned-rocksdb-trace--nimbus.yml
@@ -169,15 +169,8 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-mainnet-nethermind-pruned-rocksdb-trace_nimbus]
 ...
--- a/ethereum/nethermind/ethereum-sepolia-nethermind-pruned-rocksdb-trace--nimbus.yml
+++ b/ethereum/nethermind/ethereum-sepolia-nethermind-pruned-rocksdb-trace--nimbus.yml
@@ -169,15 +169,8 @@ x-upstreams:
    chain: eth-beacon-chain-sepolia
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-sepolia-nethermind-pruned-rocksdb-trace_nimbus]
 ...
--- a/ethereum/reth/ethereum-hoodi-reth-archive-trace.yml
+++ b/ethereum/reth/ethereum-hoodi-reth-archive-trace.yml
@@ -184,15 +184,8 @@ x-upstreams:
    chain: eth-beacon-chain-hoodi
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-hoodi-reth-archive-trace_prysm]
 ...
--- a/ethereum/reth/ethereum-hoodi-reth-pruned-trace.yml
+++ b/ethereum/reth/ethereum-hoodi-reth-pruned-trace.yml
@@ -185,15 +185,8 @@ x-upstreams:
    chain: eth-beacon-chain-hoodi
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-hoodi-reth-pruned-trace_prysm]
 ...
--- a/ethereum/reth/ethereum-mainnet-reth-archive-trace--lighthouse-pruned-blobs.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-archive-trace--lighthouse-pruned-blobs.yml
@@ -191,15 +191,8 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-mainnet-reth-archive-trace_lighthouse-pruned-blobs]
 ...
--- a/ethereum/reth/ethereum-mainnet-reth-archive-trace--nimbus.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-archive-trace--nimbus.yml
@@ -183,15 +183,8 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-mainnet-reth-archive-trace_nimbus]
 ...
--- a/ethereum/reth/ethereum-mainnet-reth-archive-trace.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-archive-trace.yml
@@ -184,15 +184,8 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-mainnet-reth-archive-trace_prysm]
 ...
--- a/ethereum/reth/ethereum-mainnet-reth-minimal-trace--nimbus.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-minimal-trace--nimbus.yml
@@ -242,15 +242,8 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-mainnet-reth-minimal-trace_nimbus]
 ...
--- a/ethereum/reth/ethereum-mainnet-reth-pruned-trace--lighthouse.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-pruned-trace--lighthouse.yml
@@ -190,15 +190,8 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-mainnet-reth-pruned-trace_lighthouse]
 ...
--- a/ethereum/reth/ethereum-mainnet-reth-pruned-trace--nimbus.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-pruned-trace--nimbus.yml
@@ -184,15 +184,8 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-mainnet-reth-pruned-trace_nimbus]
 ...
--- a/ethereum/reth/ethereum-mainnet-reth-pruned-trace.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-pruned-trace.yml
@@ -185,15 +185,8 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-mainnet-reth-pruned-trace_prysm]
 ...
--- a/ethereum/reth/ethereum-sepolia-reth-archive-trace--nimbus.yml
+++ b/ethereum/reth/ethereum-sepolia-reth-archive-trace--nimbus.yml
@@ -183,15 +183,8 @@ x-upstreams:
    chain: eth-beacon-chain-sepolia
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-sepolia-reth-archive-trace_nimbus]
 ...
--- a/ethereum/reth/ethereum-sepolia-reth-archive-trace.yml
+++ b/ethereum/reth/ethereum-sepolia-reth-archive-trace.yml
@@ -184,15 +184,8 @@ x-upstreams:
    chain: eth-beacon-chain-sepolia
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-sepolia-reth-archive-trace_prysm]
 ...
--- a/ethereum/reth/ethereum-sepolia-reth-pruned-trace--nimbus.yml
+++ b/ethereum/reth/ethereum-sepolia-reth-pruned-trace--nimbus.yml
@@ -184,15 +184,8 @@ x-upstreams:
    chain: eth-beacon-chain-sepolia
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-sepolia-reth-pruned-trace_nimbus]
 ...
--- a/ethereum/reth/ethereum-sepolia-reth-pruned-trace.yml
+++ b/ethereum/reth/ethereum-sepolia-reth-pruned-trace.yml
@@ -185,15 +185,8 @@ x-upstreams:
    chain: eth-beacon-chain-sepolia
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [ethereum-sepolia-reth-pruned-trace_prysm]
 ...
--- a/gnosis/erigon3/gnosis-chiado-erigon3-archive-trace.yml
+++ b/gnosis/erigon3/gnosis-chiado-erigon3-archive-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  gnosis-chiado-erigon3-archive:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.5.3}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/gnosis/erigon3/gnosis-chiado-erigon3-minimal-trace.yml
+++ b/gnosis/erigon3/gnosis-chiado-erigon3-minimal-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  gnosis-chiado-erigon3-minimal:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.5.3}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/gnosis/erigon3/gnosis-chiado-erigon3-pruned-trace.yml
+++ b/gnosis/erigon3/gnosis-chiado-erigon3-pruned-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  gnosis-chiado-erigon3:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.5.3}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_CHIADO_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/gnosis/erigon3/gnosis-mainnet-erigon3-archive-trace.yml
+++ b/gnosis/erigon3/gnosis-mainnet-erigon3-archive-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  gnosis-mainnet-erigon3-archive:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.5.3}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/gnosis/erigon3/gnosis-mainnet-erigon3-minimal-trace.yml
+++ b/gnosis/erigon3/gnosis-mainnet-erigon3-minimal-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  gnosis-mainnet-erigon3-minimal:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.5.3}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/gnosis/erigon3/gnosis-mainnet-erigon3-pruned-trace.yml
+++ b/gnosis/erigon3/gnosis-mainnet-erigon3-pruned-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  gnosis-mainnet-erigon3:
-    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.5.3}
+    image: ${GNOSIS_ERIGON3_IMAGE:-erigontech/erigon}:${GNOSIS_MAINNET_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/gnosis/nethermind/gnosis-chiado-nethermind-archive-rocksdb-trace.yml
+++ b/gnosis/nethermind/gnosis-chiado-nethermind-archive-rocksdb-trace.yml
@@ -171,15 +171,8 @@ x-upstreams:
    chain: gnosis-beacon-chain-chiado
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [gnosis-chiado-nethermind-archive-rocksdb-trace_nimbus]
 ...
--- a/gnosis/nethermind/gnosis-chiado-nethermind-minimal-rocksdb-trace.yml
+++ b/gnosis/nethermind/gnosis-chiado-nethermind-minimal-rocksdb-trace.yml
@@ -174,15 +174,8 @@ x-upstreams:
    chain: gnosis-beacon-chain-chiado
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [gnosis-chiado-nethermind-minimal-rocksdb-trace_nimbus]
 ...
--- a/gnosis/nethermind/gnosis-chiado-nethermind-pruned-rocksdb-trace.yml
+++ b/gnosis/nethermind/gnosis-chiado-nethermind-pruned-rocksdb-trace.yml
@@ -169,15 +169,8 @@ x-upstreams:
    chain: gnosis-beacon-chain-chiado
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [gnosis-chiado-nethermind-pruned-rocksdb-trace_nimbus]
 ...
--- a/gnosis/nethermind/gnosis-mainnet-nethermind-archive-rocksdb-trace.yml
+++ b/gnosis/nethermind/gnosis-mainnet-nethermind-archive-rocksdb-trace.yml
@@ -171,15 +171,8 @@ x-upstreams:
    chain: gnosis-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [gnosis-mainnet-nethermind-archive-rocksdb-trace_nimbus]
 ...
--- a/gnosis/nethermind/gnosis-mainnet-nethermind-minimal-rocksdb-trace.yml
+++ b/gnosis/nethermind/gnosis-mainnet-nethermind-minimal-rocksdb-trace.yml
@@ -174,15 +174,8 @@ x-upstreams:
    chain: gnosis-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [gnosis-mainnet-nethermind-minimal-rocksdb-trace_nimbus]
 ...
--- a/gnosis/nethermind/gnosis-mainnet-nethermind-pruned-rocksdb-trace.yml
+++ b/gnosis/nethermind/gnosis-mainnet-nethermind-pruned-rocksdb-trace.yml
@@ -169,15 +169,8 @@ x-upstreams:
    chain: gnosis-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [gnosis-mainnet-nethermind-pruned-rocksdb-trace_nimbus]
 ...
--- a/gnosis/reth/gnosis-chiado-reth-archive-trace.yml
+++ b/gnosis/reth/gnosis-chiado-reth-archive-trace.yml
@@ -183,15 +183,8 @@ x-upstreams:
    chain: gnosis-beacon-chain-chiado
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [gnosis-chiado-reth-archive-trace_nimbus]
 ...
--- a/gnosis/reth/gnosis-chiado-reth-pruned-trace.yml
+++ b/gnosis/reth/gnosis-chiado-reth-pruned-trace.yml
@@ -184,15 +184,8 @@ x-upstreams:
    chain: gnosis-beacon-chain-chiado
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [gnosis-chiado-reth-pruned-trace_nimbus]
 ...
--- a/gnosis/reth/gnosis-mainnet-reth-archive-trace.yml
+++ b/gnosis/reth/gnosis-mainnet-reth-archive-trace.yml
@@ -183,15 +183,8 @@ x-upstreams:
    chain: gnosis-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [gnosis-mainnet-reth-archive-trace_nimbus]
 ...
--- a/gnosis/reth/gnosis-mainnet-reth-pruned-trace.yml
+++ b/gnosis/reth/gnosis-mainnet-reth-pruned-trace.yml
@@ -184,15 +184,8 @@ x-upstreams:
    chain: gnosis-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
-    options:
-      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
-      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
-      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
-      # still governs health with validation off. 2026-07-10, dRPC incident.
-      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
-x-optional-volumes: [gnosis-mainnet-reth-pruned-trace_nimbus]
 ...
--- a/haqq/scripts/cometbft-common.sh
+++ b/haqq/scripts/cometbft-common.sh
@@ -1,223 +0,0 @@
-#!/bin/sh
-# cometbft-common.sh — reusable CometBFT-node bootstrap helpers (family C).
-#
-# Source this from a chain-specific init.sh. It encapsulates the operations every
-# CometBFT-consensus node needs (init, fetch config artifacts, patch config.toml /
-# app.toml, seed priv_validator_state), extracted verbatim from the proven berachain
-# beacon-kit entrypoint so callers inherit known-good behavior.
-#
-# Each function takes explicit arguments (paths/values) — it is binary-agnostic. The
-# caller owns the binary name, the `<binary> init` invocation, the artifact URLs, and
-# the final `exec <binary> start ...`. EL-driven chains (beacon-kit, morph) also call
-# the JWT / engine-dial helpers; pure-consensus chains (gaiad) skip them.
-#
-# Conventions: POSIX sh (alpine). Config dir is conventionally $HOME_DIR/config.
-# Used by: morph-node, gaiad (cosmos batch), and any future family-C chain.
-# beacon-kit (berachain) keeps its own bespoke init.sh on purpose — do not retrofit it.
-
-set -e
-
-ct_log() { echo "[cometbft-init] $*"; }
-
-# Ensure curl exists (alpine base images often omit it). Idempotent.
-ct_require_curl() {
-  if ! command -v curl >/dev/null 2>&1; then
-    ct_log "installing curl"
-    apk add --no-cache curl
-  fi
-}
-
-# ct_fetch URL DEST [required]
-#   Download URL -> DEST. If the 3rd arg is "required", a failure is fatal;
-#   otherwise a missing/failed fetch is logged and skipped (returns 0).
-ct_fetch() {
-  _url="$1"; _dest="$2"; _req="${3:-optional}"
-  [ -n "$_url" ] || { [ "$_req" = required ] && { ct_log "FATAL: empty URL for $_dest"; exit 1; }; return 0; }
-  if curl -fsSL "$_url" -o "$_dest"; then
-    ct_log "fetched $_url -> $_dest"
-  else
-    if [ "$_req" = required ]; then
-      ct_log "FATAL: failed to fetch required $_url"; exit 1
-    fi
-    ct_log "skip: could not fetch optional $_url"
-  fi
-}
-
-# ct_patch_p2p CONFIG_TOML IP P2P_PORT
-#   Bind p2p to 0.0.0.0:PORT and advertise IP:PORT (only within the [p2p] section).
-ct_patch_p2p() {
-  _cfg="$1"; _ip="$2"; _port="$3"
-  [ -f "$_cfg" ] || { ct_log "patch_p2p: $_cfg missing, skipping"; return 0; }
-  _laddr="tcp:\\/\\/0\\.0\\.0\\.0\\:${_port}"
-  sed -i "/^\[p2p\]/,/^\[/{s|^laddr = .*|laddr = \"$_laddr\"|}" "$_cfg"
-  sed -i "/^\[p2p\]/,/^\[/{s|^external_address = .*|external_address = \"${_ip}:${_port}\"|}" "$_cfg"
-}
-
-# ct_merge_seeds CONFIG_TOML CONFIGURED_SEEDS [SEEDS_URL]
-#   Merge operator-configured seeds with an optional official seed list (1 entry per
-#   line, first line skipped like the berachain cl-seeds.txt header), dedupe, write.
-ct_merge_seeds() {
-  _cfg="$1"; _seeds="$2"; _url="$3"
-  [ -f "$_cfg" ] || return 0
-  if [ -n "$_url" ]; then
-    _official=$(curl -f -s "$_url" | tail -n +2 | tr '\n' ',' | sed 's/,$//' || true)
-    if [ -n "$_official" ]; then
-      ct_log "merging official seeds from $_url"
-      _seeds=$(echo "${_seeds},${_official}" | tr ',' '\n' | sed '/^$/d' | sort -u | paste -sd,)
-    else
-      ct_log "no official seeds fetched from $_url (continuing with configured)"
-    fi
-  fi
-  if [ -n "$_seeds" ]; then
-    sed -i "s/^seeds = \".*\"/seeds = \"${_seeds}\"/" "$_cfg"
-  fi
-}
-
-# ct_set_persistent_peers CONFIG_TOML PEERS
-#   Handles both cometbft-classic `persistent_peers` (underscore) and forks that use
-#   `persistent-peers` (hyphen, e.g. sei) — patches whichever key is present.
-ct_set_persistent_peers() {
-  _cfg="$1"; _peers="$2"
-  [ -f "$_cfg" ] || return 0
-  [ -n "$_peers" ] || return 0
-  sed -i "s/^persistent_peers = \".*\"/persistent_peers = \"${_peers}\"/" "$_cfg"
-  sed -i "s/^persistent-peers = \".*\"/persistent-peers = \"${_peers}\"/" "$_cfg"
-  return 0
-}
-
-# ct_set_moniker CONFIG_TOML MONIKER
-ct_set_moniker() {
-  _cfg="$1"; _mon="$2"
-  [ -f "$_cfg" ] || return 0
-  [ -n "$_mon" ] && sed -i "s/^moniker = \".*\"/moniker = \"$_mon\"/" "$_cfg"
-  return 0
-}
-
-# ct_set_addrbook CONFIG_DIR ADDRBOOK_URL
-#   Optional: cosmos chains often seed an addrbook.json for faster peer discovery.
-ct_set_addrbook() {
-  _dir="$1"; _url="$2"
-  [ -n "$_url" ] || return 0
-  ct_fetch "$_url" "$_dir/addrbook.json" optional
-}
-
-# ct_write_jwt CONFIG_DIR  [JWT_SRC]
-#   EL-driven chains: copy the shared engine JWT (default /jwtsecret) into the config
-#   dir as jwt.hex so the CL can authenticate to the EL engine API.
-ct_write_jwt() {
-  _dir="$1"; _src="${2:-/jwtsecret}"
-  [ -f "$_src" ] || { ct_log "write_jwt: $_src missing, skipping"; return 0; }
-  cat "$_src" > "$_dir/jwt.hex"
-}
-
-# ct_set_rpc_dial_url APP_TOML AUTH_RPC
-#   beacon-kit / app.toml-style EL engine endpoint (e.g. http://<el>:8551).
-ct_set_rpc_dial_url() {
-  _app="$1"; _rpc="$2"
-  [ -f "$_app" ] || return 0
-  [ -n "$_rpc" ] && sed -i "s|^rpc-dial-url = \".*\"|rpc-dial-url = \"$_rpc\"|" "$_app"
-  return 0
-}
-
-# ct_seed_priv_validator_state HOME_DIR
-#   Ensure data/priv_validator_state.json exists (cometbft refuses to start without it
-#   when one is present in config/). Mirrors the berachain init.sh behavior.
-ct_seed_priv_validator_state() {
-  _home="$1"
-  if [ -e "$_home/config/priv_validator_state.json" ] && [ ! -e "$_home/data/priv_validator_state.json" ]; then
-    mkdir -p "$_home/data"
-    cp "$_home/config/priv_validator_state.json" "$_home/data/priv_validator_state.json"
-  fi
-  return 0
-}
-
-# ct_apk PKG...
-#   Install alpine packages idempotently (most cosmos init scripts need curl, some jq).
-ct_apk() {
-  apk add --no-cache "$@"
-}
-
-# ct_localize_home CONFIG_DIR
-#   Rewrite `~/` to `/root/` in config.toml + app.toml. Cosmos `init` writes home-relative
-#   paths; the container runs as root with a static home, so make paths absolute.
-ct_localize_home() {
-  _dir="$1"
-  [ -f "$_dir/config.toml" ] && sed -i 's|~/|/root/|g' "$_dir/config.toml"
-  [ -f "$_dir/app.toml" ]    && sed -i 's|~/|/root/|g' "$_dir/app.toml"
-  return 0
-}
-
-# ct_set_min_gas_prices APP_TOML PRICE
-#   Cosmos chains reject txs (and sometimes refuse to start) with an empty
-#   minimum-gas-prices. PRICE e.g. "0.01usei", "0.0025uatom", "0.01hqq".
-ct_set_min_gas_prices() {
-  _app="$1"; _price="$2"
-  [ -f "$_app" ] || return 0
-  [ -n "$_price" ] || return 0
-  sed -i "s/minimum-gas-prices = \"\"/minimum-gas-prices = \"${_price}\"/g" "$_app"
-  return 0
-}
-
-# ct_configure_statesync CONFIG_TOML RPC_SERVERS [TRUST_OFFSET]
-#   Enable cometbft state-sync so a fresh node bootstraps near chainhead instead of
-#   replaying from genesis — the single biggest lever for "can't keep it at chainhead"
-#   chains. RPC_SERVERS = comma list of trusted RPC endpoints (>=2 recommended; a single
-#   endpoint is duplicated). TRUST_OFFSET = blocks below head to trust (default 2000).
-#   Requires jq + curl. No-op (logged) if head height can't be fetched.
-ct_configure_statesync() {
-  _cfg="$1"; _rpc="$2"; _offset="${3:-2000}"
-  [ -f "$_cfg" ] || return 0
-  # NEVER re-arm statesync on a node that already has application state (a restored
-  # snapshot or a prior sync). Re-statesyncing over it leaves a broken/partial datadir and,
-  # for wasm chains, drops the wasm files -> startup panic. _cfg is $HOME/config/config.toml,
-  # so application state lives at $HOME/data/application.db.
-  _home=$(dirname "$(dirname "$_cfg")")
-  if [ -e "$_home/data/application.db" ]; then
-    ct_log "statesync: existing data dir, skipping"
-    return 0
-  fi
-  [ -n "$_rpc" ] || { ct_log "statesync: no RPC servers given, skipping"; return 0; }
-  _primary=$(echo "$_rpc" | cut -d, -f1)
-  _latest=$(curl -s "$_primary/block" | jq -r '.result.block.header.height // .block.header.height' 2>/dev/null || true)
-  if [ -z "$_latest" ] || [ "$_latest" = null ]; then
-    ct_log "statesync: could not read head height from $_primary, skipping"; return 0
-  fi
-  _trust_h=$((_latest - _offset))
-  _trust_hash=$(curl -s "$_primary/block?height=$_trust_h" | jq -r '.result.block_id.hash // .block_id.hash' 2>/dev/null || true)
-  [ -n "$_trust_hash" ] && [ "$_trust_hash" != null ] || { ct_log "statesync: no trust hash, skipping"; return 0; }
-  # second server defaults to the first (cometbft wants >=2 for light-client cross-check)
-  echo "$_rpc" | grep -q ',' || _rpc="$_rpc,$_rpc"
-  ct_log "statesync: enable trust_height=$_trust_h trust_hash=$_trust_hash"
-  # Patch ONLY the [statesync] section. CometBFT config.toml uses underscore keys
-  # (rpc_servers/trust_height/trust_hash); tolerate hyphen variants with [_-].
-  sed -i.bak -E "/^\[statesync\]/,/^\[/{
-    s|^([[:space:]]*enable[[:space:]]*=[[:space:]]*).*|\1true|
-    s|^([[:space:]]*rpc[_-]servers[[:space:]]*=[[:space:]]*).*|\1\"$_rpc\"|
-    s|^([[:space:]]*trust[_-]height[[:space:]]*=[[:space:]]*).*|\1$_trust_h|
-    s|^([[:space:]]*trust[_-]hash[[:space:]]*=[[:space:]]*).*|\1\"$_trust_hash\"|
-  }" "$_cfg"
-  return 0
-}
-
-# ct_ensure_wasm HOME_DIR WASM_SNAPSHOT_URL
-#   CosmWasm + IBC 08-wasm bytecode are FILES on disk that state-sync does NOT restore, so
-#   a state-synced wasm chain panics at startup ("wasmlckeeper failed initialize pinned codes
-#   / Error opening Wasm file"). Seed them from a wasm-only snapshot (e.g. polkachu
-#   cosmos_wasmonly.tar.lz4) when the wasm dir is missing/empty. No-op if URL unset or wasm
-#   already present. Best-effort (logs on failure); the fully robust path for wasm chains is a
-#   FULL snapshot restore. Requires lz4 + tar (installed here).
-ct_ensure_wasm() {
-  _home="$1"; _url="$2"
-  [ -n "$_url" ] || return 0
-  if [ -d "$_home/wasm" ] && [ -n "$(ls -A "$_home/wasm" 2>/dev/null)" ]; then
-    return 0   # wasm already present
-  fi
-  ct_log "wasm: empty, fetching snapshot $_url"
-  ct_apk lz4 tar
-  if curl -sL "$_url" | lz4 -dc | tar -xf - -C "$_home"; then
-    ct_log "wasm: extracted into $_home"
-  else
-    ct_log "WARN wasm: fetch/extract failed ($_url)"
-  fi
-  return 0
-}
--- a/haqq/scripts/init.sh
+++ b/haqq/scripts/init.sh
@@ -1,65 +1,64 @@
 #!/bin/sh
-# haqq (haqqd) entrypoint — family C, pure CometBFT (no EL). Thin: sources the
-# shared cometbft-common.sh and orchestrates init + statesync bootstrap + start.
-# Serves CometBFT RPC :26657 (the dshackle/traefik upstream).
-# Genesis replay across ~25 Haqq network upgrades is impractical, so we statesync
-# near head with the current binary.
-set -e
-. /usr/local/bin/cometbft-common.sh

-HOME_DIR="/root/.haqqd"
-CONFIG_DIR="$HOME_DIR/config"
-CHAIN_ID="${CHAINID:-haqq_11235-1}"
-CHAINNAME="${CHAINNAME:-mainnet}"
-GENESIS_URL="${GENESIS_URL:-https://raw.githubusercontent.com/haqq-network/${CHAINNAME}/master/genesis.json}"
-ADDRBOOK_URL="${ADDRBOOK_URL:-https://snapshots.polkachu.com/addrbook/haqq/addrbook.json}"
-STATESYNC_RPC="${STATESYNC_RPC:-https://haqq-rpc.polkachu.com:443}"
-MIN_GAS="${MIN_GAS:-0.01hqq}"
-MONIKER="${MONIKER:-rpc-node}"
+set -e  # Exit on failure

-# Polkachu seeds + official Haqq network seeds for reliable peer discovery
-SEEDS="${SEEDS:-936e27a05f3cfb090507dd810395cbbd8efbffb0@65.109.115.172:24056,f4675b63b8872fb9216efa99428eb5b1fb297393@65.109.104.118:61256,6c9a6fc0e0d94bf303075e46560832e652cffc14@65.108.71.137:24056,7c153a83@peer.haqq.mainnet.dteam.tech:28656}"
+echo "MONIKER: $MONIKER"

-# Optional persistent peers for additional bootstrap reliability
-PERSISTENT_PEERS="${PERSISTENT_PEERS:-17e0fd08f04e062d18412808b8bf134e9ad34508@65.109.109.189:10656,e000b992a0066eae9e87c66e0d65229a76647509@198.96.92.242:32656,7c153a83@peer.haqq.mainnet.dteam.tech:28656,235ac65359582357b04754e838496545b3ba6429@haqq-seed-1.allnodes.me:26656,9573a569016378765444095484840d7f543d2800@haqq-seed-2.allnodes.me:26656}"
+CHAINID=${CHAINID:-haqq_11235-1}
+CHAINNAME=${CHAINNAME:-mainnet}
+API=${API:-eth,net,web3}

-ct_apk curl jq
+CONFIG_DIR="/root/.haqqd/config"

-if haqqd init "$MONIKER" --chain-id "$CHAIN_ID" --home "$HOME_DIR" >/dev/null 2>&1; then
-  ct_log "fresh init; fetching genesis and addrbook"
-  ct_fetch "$GENESIS_URL" "$CONFIG_DIR/genesis.json" required
-  ct_set_addrbook "$CONFIG_DIR" "$ADDRBOOK_URL"
-  ct_localize_home "$CONFIG_DIR"
-  ct_set_min_gas_prices "$CONFIG_DIR/app.toml" "$MIN_GAS"
+# Create config directory
+mkdir -p "$CONFIG_DIR"
+
+P2P_STRING="tcp:\\/\\/0\\.0\\.0\\.0\\:${P2P_PORT:-10465}"
+NAT_STRING="${IP}:${P2P_PORT:-10465}"
+
+env
+
+# this goes first because it won't overwrite shit
+apk add curl
+if [ $? -ne 0 ]; then exit 1; fi
+
+if haqqd init ${MONIKER} --chain-id ${CHAINID} --home /root/.haqqd/; then
+    # Define variables
+    GENESIS_URL="https://raw.githubusercontent.com/haqq-network/${CHAINNAME}/master/genesis.json"    
+    ADDRESSBOOK_URL="https://raw.githubusercontent.com/haqq-network/${CHAINNAME}/master/addrbook.json"
+    
+    # Download config files
+    curl -sL "$GENESIS_URL" -o "$CONFIG_DIR/genesis.json"    
+    curl -sL "$ADDRESSBOOK_URL" -o "$CONFIG_DIR/addressbook.json"
+
+    # somehow it's better to make home static to /root
+    sed -i 's|~/|/root/|g' "$CONFIG_DIR/config.toml"
+    sed -i 's|~/|/root/|g' "$CONFIG_DIR/app.toml"
 else
-  ct_log "already initialized, continuing"
-  # Auto-refresh addrbook from Polkachu when empty on startup
-  if [ ! -s "$CONFIG_DIR/addrbook.json" ]; then
-    ct_log "addrbook.json is empty, refreshing from Polkachu"
-    ct_set_addrbook "$CONFIG_DIR" "$ADDRBOOK_URL"
-  fi
+    echo "Already initialized, continuing!" >&2
 fi

-# Serve RPC on all interfaces (dshackle/traefik upstream); default is 127.0.0.1.
-sed -i '/^\[rpc\]/,/^\[/{s|^laddr = .*|laddr = "tcp://0.0.0.0:8545"|}' "$CONFIG_DIR/config.toml"

-ct_patch_p2p             "$CONFIG_DIR/config.toml" "$IP" "${P2P_PORT:-10465}"
-ct_merge_seeds           "$CONFIG_DIR/config.toml" "$SEEDS" "$ADDRBOOK_URL"
-ct_set_persistent_peers  "$CONFIG_DIR/config.toml" "$PERSISTENT_PEERS"
-ct_set_moniker           "$CONFIG_DIR/config.toml" "$MONIKER"
-ct_configure_statesync   "$CONFIG_DIR/config.toml" "$STATESYNC_RPC"
-ct_seed_priv_validator_state "$HOME_DIR"
+# apply a port change to the config
+sed -i "/^\[p2p\]/,/^\[/{s|^laddr = .*|laddr = \"$P2P_STRING\"|}" "$CONFIG_DIR/config.toml"
+#sed -i "s/^laddr = \".*\"/laddr = \"$P2P_STRING\"/" "$CONFIG_DIR/config.toml"
+sed -i "/^\[p2p\]/,/^\[/{s|^external_address = .*|external_address = \"$NAT_STRING\"|}" "$CONFIG_DIR/config.toml"
+
+#sed -i 's/minimum-gas-prices = ""/minimum-gas-prices = "0.01hqq"/g' $CONFIG_DIR/app.toml
+
+sed -i -e "s/^pruning *=.*/pruning = \"custom\"/" $CONFIG_DIR/app.toml
+sed -i -e "s/^pruning-keep-recent *=.*/pruning-keep-recent = \"100\"/" $CONFIG_DIR/app.toml
+sed -i -e "s/^pruning-interval *=.*/pruning-interval = \"19\"/" $CONFIG_DIR/app.toml
+sed -i -e "s/^indexer *=.*/indexer = \"null\"/" $CONFIG_DIR/config.toml

-# Haqq-specific config: enable API endpoints
 sed -i "/^\[json-rpc\]/,/^\[/{s|^address = .*|address = \"0.0.0.0:8545\"|}" "$CONFIG_DIR/app.toml"
 sed -i "/^\[json-rpc\]/,/^\[/{s|^ws-address = .*|ws-address = \"0.0.0.0:8546\"|}" "$CONFIG_DIR/app.toml"
 sed -i "/^\[json-rpc\]/,/^\[/{s|^metrics-address = .*|metrics-address = \"0.0.0.0:6065\"|}" "$CONFIG_DIR/app.toml"
 sed -i "/^\[json-rpc\]/,/^\[/{s|^api = .*|api = \"$API\"|}" "$CONFIG_DIR/app.toml"

-# Custom pruning settings for RPC node
-sed -i -e "s/^pruning *=.*/pruning = \"custom\"/" "$CONFIG_DIR/app.toml"
-sed -i -e "s/^pruning-keep-recent *=.*/pruning-keep-recent = \"100\"/" "$CONFIG_DIR/app.toml"
-sed -i -e "s/^pruning-interval *=.*/pruning-interval = \"19\"/" "$CONFIG_DIR/app.toml"
-sed -i -e "s/^indexer *=.*/indexer = \"null\"/" "$CONFIG_DIR/config.toml"
+# Update moniker if set
+if [ -n "$MONIKER" ] && [ -f "$CONFIG_DIR/config.toml" ]; then
+    sed -i "s/^moniker = \".*\"/moniker = \"$MONIKER\"/" "$CONFIG_DIR/config.toml"
+fi

-exec haqqd start --chain-id "$CHAIN_ID" --home "$HOME_DIR" $@
+exec haqqd start --chain-id ${CHAINID} $@
--- a/linea/erigon3/linea-mainnet-erigon3-archive-trace.yml
+++ b/linea/erigon3/linea-mainnet-erigon3-archive-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  linea-mainnet-erigon3-archive:
-    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.5.3}
+    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/linea/erigon3/linea-mainnet-erigon3-minimal-trace.yml
+++ b/linea/erigon3/linea-mainnet-erigon3-minimal-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  linea-mainnet-erigon3-minimal:
-    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.5.3}
+    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/linea/erigon3/linea-mainnet-erigon3-pruned-trace.yml
+++ b/linea/erigon3/linea-mainnet-erigon3-pruned-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  linea-mainnet-erigon3:
-    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.5.3}
+    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_MAINNET_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/linea/erigon3/linea-sepolia-erigon3-archive-trace.yml
+++ b/linea/erigon3/linea-sepolia-erigon3-archive-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  linea-sepolia-erigon3-archive:
-    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_SEPOLIA_ERIGON3_VERSION:-v3.5.3}
+    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_SEPOLIA_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/linea/erigon3/linea-sepolia-erigon3-minimal-trace.yml
+++ b/linea/erigon3/linea-sepolia-erigon3-minimal-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  linea-sepolia-erigon3-minimal:
-    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_SEPOLIA_ERIGON3_VERSION:-v3.5.3}
+    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_SEPOLIA_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/linea/erigon3/linea-sepolia-erigon3-pruned-trace.yml
+++ b/linea/erigon3/linea-sepolia-erigon3-pruned-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  linea-sepolia-erigon3:
-    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_SEPOLIA_ERIGON3_VERSION:-v3.5.3}
+    image: ${LINEA_ERIGON3_IMAGE:-erigontech/erigon}:${LINEA_SEPOLIA_ERIGON3_VERSION:-v3.5.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/linea/mainnet/maru/config.toml.template
+++ b/linea/mainnet/maru/config.toml.template
@@ -1,14 +1,10 @@
-# [linea] finalization provider DISABLED (2026-07-31): Maru CL stuck at slot
-# 6764022 with EL head ~24k behind tip; Maru sent FCU finalized ahead of EL
-# head → Besu -38002 Invalid forkchoice. Maru has no linea.enabled flag —
-# presence of [linea] enables the provider; comment out to disable. Re-enable
-# (uncomment) once EL has caught tip.
-# [linea]
-# contract-address = "0xd19d4B5d358258f05D7B411E21A1460D11B0876F"
-# l1-eth-api = { endpoint = "${L1_RPC}" }
-# l1-polling-interval = "6 seconds"
-# l1-highest-block-tag = "finalized"
-# l2-eth-api-endpoint = { endpoint = "${SEQUENCER}" }
+# Uncomment the below [linea] section for finalized L2 block tag
+[linea]
+contract-address = "0xd19d4B5d358258f05D7B411E21A1460D11B0876F"
+l1-eth-api = { endpoint = "${L1_RPC}" }
+l1-polling-interval = "6 seconds"
+l1-highest-block-tag = "finalized"
+l2-eth-api-endpoint = { endpoint = "${SEQUENCER}" }

 [persistence]
 data-path = "/opt/maru/data"
--- a/list-restorable.sh
+++ b/list-restorable.sh
@@ -13,20 +13,6 @@

 dir="$(dirname "$0")"
 source "$dir/volume-utils.sh"
-
-# Get required persistent volume keys (all volumes minus ephemeral minus optional)
-get_required_volume_keys() {
-  local compose_file=$1
-  local key
-  
-  while IFS= read -r key; do
-    [[ -z "$key" ]] && continue
-    # Skip if ephemeral or optional
-    if ! is_ephemeral_volume_key "$key" "$compose_file" && ! is_optional_volume_key "$key" "$compose_file"; then
-      echo "$key"
-    fi
-  done < <(get_volume_keys "$compose_file")
-}
 registry_file="${dir}/compose_registry.json"
 backup_dir="/backup"

@@ -129,14 +115,12 @@ while IFS= read -r entry; do
        continue
    fi
    
-    # Check each required volume for backup file
+    # Check each volume for backup file
    all_backups_exist=true
    missing_volumes=()
    backup_info=()
    
-    # Get required persistent volumes (excluding ephemeral and optional)
-    # Use process substitution to avoid subshell issues
-    while IFS= read -r volume < <(get_required_volume_keys "$compose_path"); do
+    while IFS= read -r volume; do
        volume_name="rpc_${volume}"
        # jwt/secrets volumes are regenerated at create-node — never backed up by
        # design, so they must not gate restorability (kept plasma marked
--- a/op/erigon/hashkeychain-mainnet-op-erigon-archive-trace.yml
+++ b/op/erigon/hashkeychain-mainnet-op-erigon-archive-trace.yml
@@ -128,9 +128,6 @@ services:
      - OP_NODE_METRICS_ADDR=0.0.0.0
      - OP_NODE_METRICS_ENABLED=true
      - OP_NODE_METRICS_PORT=7300
-      - OP_NODE_OVERRIDE_HOLOCENE=1785306600
-      - OP_NODE_OVERRIDE_ISTHMUS=1785306900
-      - OP_NODE_OVERRIDE_JOVIAN=1785307200
      - OP_NODE_P2P_ADVERTISE_IP=${IP}
      - OP_NODE_P2P_LISTEN_IP=0.0.0.0
      - OP_NODE_P2P_LISTEN_TCP_PORT=16378
--- a/op/erigon/ink-mainnet-op-erigon-archive-trace--kona.yml
+++ b/op/erigon/ink-mainnet-op-erigon-archive-trace--kona.yml
@@ -0,0 +1,206 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:op/erigon/ink-mainnet-op-erigon-archive-trace--kona.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/ink-mainnet-op-erigon \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  ink-mainnet-op-erigon:
+    image: ${INK_ERIGON_IMAGE:-testinprod/op-erigon}:${INK_MAINNET_ERIGON_VERSION:-v2.61.3-0.10.1}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: root
+    ports:
+      - 11990:11990
+      - 11990:11990/udp
+      - 31990:31990
+      - 31990:31990/udp
+      - 36990:36990
+      - 36990:36990/udp
+    expose:
+      - 8545
+      - 6060
+      - 8551
+    entrypoint: /bin/sh -c '[ ! -d /root/.local/share/erigon/chaindata/mdbx.dat ] && erigon init --datadir /root/.local/share/erigon /config/genesis.json; exec erigon "$@"' --
+    command:
+      - --datadir=/root/.local/share/erigon
+      - --maxpeers=50
+      - --metrics
+      - --metrics.addr=0.0.0.0
+      - --metrics.port=6060
+      - --nat=extip:${IP}
+      - --networkid=57073
+      - --p2p.allowed-ports=31990
+      - --p2p.allowed-ports=36990
+      - --port=11990
+      - --rollup.sequencerhttp=https://rpc-gel.inkonchain.com
+      - --rpc.gascap=6000000000
+      - --rpc.returndata.limit=1500000
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,erigon,web3,net,debug,trace,txpool,admin,engine
+      - --http.port=8545
+      - --http.vhosts=*
+      - --ws
+      - --ws.port=8545
+      - --authrpc.addr=0.0.0.0
+      - --authrpc.jwtsecret=/jwtsecret
+      - --authrpc.vhosts=*
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${INK_MAINNET_OP_ERIGON_ARCHIVE_TRACE_DATA:-ink-mainnet-op-erigon-archive-trace}:/root/.local/share/erigon
+      - ./op/ink/mainnet:/config
+      - .jwtsecret:/jwtsecret:ro
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6060
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.ink-mainnet-op-erigon-archive-trace-stripprefix.stripprefix.prefixes=/ink-mainnet-op-erigon
+      - traefik.http.services.ink-mainnet-op-erigon-archive-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-erigon-archive-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-erigon-archive-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-erigon-archive-trace.rule=Host(`$DOMAIN`) && (Path(`/ink-mainnet-op-erigon`) || Path(`/ink-mainnet-op-erigon/`))}
+      - ${NO_SSL:+traefik.http.routers.ink-mainnet-op-erigon-archive-trace.rule=Path(`/ink-mainnet-op-erigon`) || Path(`/ink-mainnet-op-erigon/`)}
+      - traefik.http.routers.ink-mainnet-op-erigon-archive-trace.middlewares=ink-mainnet-op-erigon-archive-trace-stripprefix, ipallowlist
+    shm_size: 2gb
+
+  ink-mainnet-op-erigon-node:
+    image: ${INK_KONA_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/kona-node}:${INK_MAINNET_KONA_VERSION:-v1.6.2}
+    ports:
+      - 16990:16990
+      - 16990:16990/udp
+    environment:
+      - KONA_METRICS_ADDR=0.0.0.0
+      - KONA_NODE_L1_BEACON=${ETHEREUM_MAINNET_BEACON_REST}
+      - KONA_NODE_L1_ETH_RPC=${INK_MAINNET_L1_EXECUTION_RPC:-${ETHEREUM_MAINNET_EXECUTION_RPC}}
+      - KONA_NODE_L1_TRUST_RPC=${ETHEREUM_MAINNET_EXECUTION_TRUST:-false}
+      - KONA_NODE_L2_CHAIN_ID=57073
+      - KONA_NODE_L2_ENGINE_AUTH=/jwtsecret
+      - KONA_NODE_L2_ENGINE_RPC=http://ink-mainnet-op-erigon:8551
+      - KONA_NODE_L2_ENGINE_TIMEOUT=120000
+      - KONA_NODE_L2_TRUST_RPC=true
+      - KONA_NODE_METRICS_PORT=7300
+      - KONA_NODE_MODE=Validator
+      - KONA_NODE_P2P_ADVERTISE_IP=${IP}
+      - KONA_NODE_P2P_BOOTNODES=enode://92534205dd72a8787df902c89a775d9a45882739a973a7030d4d338c9b65387cfb77629907f9b6afb4e2bd98d9e6d2ccfde02d8a968b4fbccb68f0f4db5f4d83@34.13.199.202:30305?discport=30305,enode://26b0306725a78a8d193c2074bfd9e71233dbd3b75ab74be0ab555f72865fd88a285774526243f36653844eb95d62108c35f8c2723656b2c9568716ee2463f8d7@34.7.48.80:30305?discport=30305,enode://0c7bbb6bca9ce80952d8d8f8ba966e6b9e80faf75a165f320a53722f32b51c4b1da16ba59ab14f5194e51095a2755d8d3086a0220e34d88729cc8f4cc5499116@35.204.27.165:30305?discport=30305,enode://869d07b5932f17e8490990f75a3f94195e9504ddb6b85f7189e5a9c0a8fff8b00aecf6f3ac450ecba6cdabdb5858788a94bde2b613e0f2d82e9b395355f76d1a@34.65.67.101:30305?discport=30305,enode://2d4e7e9d48f4dd4efe9342706dd1b0024681bd4c3300d021f86fc75eab7865d4e0cbec6fbc883f011cfd6a57423e7e2f6e104baad2b744c3cafaec6bc7dc92c1@34.65.43.171:30305?discport=30305,enode://9d7a3efefe442351217e73b3a593bcb8efffb55b4807699972145324eab5e6b382152f8d24f6301baebbfb5ecd4127bd3faab2842c04cd432bdf50ba092f6645@34.65.109.126:30305?discport=30305
+      - KONA_NODE_P2P_LISTEN_IP=0.0.0.0
+      - KONA_NODE_P2P_LISTEN_TCP_PORT=16990
+      - KONA_NODE_P2P_LISTEN_UDP_PORT=16990
+      - KONA_NODE_RPC_ADDR=0.0.0.0
+      - KONA_NODE_RPC_PORT=9545
+      - OP_NODE_SYNCMODE=execution-layer
+    entrypoint: [kona-node, node]
+    restart: unless-stopped
+    depends_on:
+      ink-mainnet-op-erigon:
+        condition: service_started
+        restart: true
+    networks:
+      - chains
+    volumes:
+      - ./op/ink/mainnet:/config
+      - .jwtsecret:/jwtsecret:ro
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=7300
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.ink-mainnet-op-erigon-archive-trace-node-stripprefix.stripprefix.prefixes=/ink-mainnet-op-erigon/node
+      - traefik.http.services.ink-mainnet-op-erigon-archive-trace-node.loadbalancer.server.port=9545
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-erigon-archive-trace-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-erigon-archive-trace-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-erigon-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/ink-mainnet-op-erigon/node`)}
+      - ${NO_SSL:+traefik.http.routers.ink-mainnet-op-erigon-archive-trace-node.rule=PathPrefix(`/ink-mainnet-op-erigon/node`)}
+      - traefik.http.routers.ink-mainnet-op-erigon-archive-trace-node.middlewares=ink-mainnet-op-erigon-archive-trace-node-stripprefix, ipallowlist
+
+volumes:
+  ink-mainnet-op-erigon-archive-trace:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: ink
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+        # non standard erigon only
+        - name: eth_getBlockReceipts
+        - name: eth_protocolVersion
+        - name: eth_callMany
+        - name: eth_callBundle
+        - name: debug_accountAt
+        - name: debug_traceCallMany
+        - name: erigon_getHeaderByHash
+        - name: erigon_getBlockReceiptsByBlockHash
+        - name: erigon_getHeaderByNumber
+        - name: erigon_getLogsByHash
+        - name: erigon_forks
+        - name: erigon_getBlockByTimestamp
+        - name: erigon_BlockNumber
+        - name: erigon_getLatestLogs
+...
--- a/op/erigon/ink-mainnet-op-erigon-archive-trace.yml
+++ b/op/erigon/ink-mainnet-op-erigon-archive-trace.yml
@@ -0,0 +1,214 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:op/erigon/ink-mainnet-op-erigon-archive-trace.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/ink-mainnet-op-erigon \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  ink-mainnet-op-erigon:
+    image: ${INK_ERIGON_IMAGE:-testinprod/op-erigon}:${INK_MAINNET_ERIGON_VERSION:-v2.61.3-0.10.1}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: root
+    ports:
+      - 11990:11990
+      - 11990:11990/udp
+      - 31990:31990
+      - 31990:31990/udp
+      - 36990:36990
+      - 36990:36990/udp
+    expose:
+      - 8545
+      - 6060
+      - 8551
+    entrypoint: /bin/sh -c '[ ! -d /root/.local/share/erigon/chaindata/mdbx.dat ] && erigon init --datadir /root/.local/share/erigon /config/genesis.json; exec erigon "$@"' --
+    command:
+      - --datadir=/root/.local/share/erigon
+      - --maxpeers=50
+      - --metrics
+      - --metrics.addr=0.0.0.0
+      - --metrics.port=6060
+      - --nat=extip:${IP}
+      - --networkid=57073
+      - --p2p.allowed-ports=31990
+      - --p2p.allowed-ports=36990
+      - --port=11990
+      - --rollup.sequencerhttp=https://rpc-gel.inkonchain.com
+      - --rpc.gascap=6000000000
+      - --rpc.returndata.limit=1500000
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,erigon,web3,net,debug,trace,txpool,admin,engine
+      - --http.port=8545
+      - --http.vhosts=*
+      - --ws
+      - --ws.port=8545
+      - --authrpc.addr=0.0.0.0
+      - --authrpc.jwtsecret=/jwtsecret
+      - --authrpc.vhosts=*
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${INK_MAINNET_OP_ERIGON_ARCHIVE_TRACE_DATA:-ink-mainnet-op-erigon-archive-trace}:/root/.local/share/erigon
+      - ./op/ink/mainnet:/config
+      - .jwtsecret:/jwtsecret:ro
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6060
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.ink-mainnet-op-erigon-archive-trace-stripprefix.stripprefix.prefixes=/ink-mainnet-op-erigon
+      - traefik.http.services.ink-mainnet-op-erigon-archive-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-erigon-archive-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-erigon-archive-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-erigon-archive-trace.rule=Host(`$DOMAIN`) && (Path(`/ink-mainnet-op-erigon`) || Path(`/ink-mainnet-op-erigon/`))}
+      - ${NO_SSL:+traefik.http.routers.ink-mainnet-op-erigon-archive-trace.rule=Path(`/ink-mainnet-op-erigon`) || Path(`/ink-mainnet-op-erigon/`)}
+      - traefik.http.routers.ink-mainnet-op-erigon-archive-trace.middlewares=ink-mainnet-op-erigon-archive-trace-stripprefix, ipallowlist
+    shm_size: 2gb
+
+  ink-mainnet-op-erigon-node:
+    image: ${INK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${INK_MAINNET_NODE_VERSION:-v1.19.2}
+    ports:
+      - 16990:16990
+      - 16990:16990/udp
+    environment:
+      - OP_NODE_L1_BEACON=${ETHEREUM_MAINNET_BEACON_REST}
+      - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_MAINNET_BEACON_ARCHIVER}
+      - OP_NODE_L1_ETH_RPC=${INK_MAINNET_L1_EXECUTION_RPC:-${ETHEREUM_MAINNET_EXECUTION_RPC}}
+      - OP_NODE_L1_RPC_KIND=${ETHEREUM_MAINNET_EXECUTION_KIND:-standard}
+      - OP_NODE_L1_TRUST_RPC=${ETHEREUM_MAINNET_EXECUTION_TRUST:-false}
+      - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
+      - OP_NODE_L2_ENGINE_KIND=erigon
+      - OP_NODE_L2_ENGINE_RPC=http://ink-mainnet-op-erigon:8551
+      - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
+      - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
+      - OP_NODE_LOG_LEVEL=info
+      - OP_NODE_METRICS_ADDR=0.0.0.0
+      - OP_NODE_METRICS_ENABLED=true
+      - OP_NODE_METRICS_PORT=7300
+      - OP_NODE_NETWORK=ink-mainnet
+      - OP_NODE_P2P_ADVERTISE_IP=${IP}
+      - OP_NODE_P2P_BOOTNODES=enode://92534205dd72a8787df902c89a775d9a45882739a973a7030d4d338c9b65387cfb77629907f9b6afb4e2bd98d9e6d2ccfde02d8a968b4fbccb68f0f4db5f4d83@34.13.199.202:30305?discport=30305,enode://26b0306725a78a8d193c2074bfd9e71233dbd3b75ab74be0ab555f72865fd88a285774526243f36653844eb95d62108c35f8c2723656b2c9568716ee2463f8d7@34.7.48.80:30305?discport=30305,enode://0c7bbb6bca9ce80952d8d8f8ba966e6b9e80faf75a165f320a53722f32b51c4b1da16ba59ab14f5194e51095a2755d8d3086a0220e34d88729cc8f4cc5499116@35.204.27.165:30305?discport=30305,enode://869d07b5932f17e8490990f75a3f94195e9504ddb6b85f7189e5a9c0a8fff8b00aecf6f3ac450ecba6cdabdb5858788a94bde2b613e0f2d82e9b395355f76d1a@34.65.67.101:30305?discport=30305,enode://2d4e7e9d48f4dd4efe9342706dd1b0024681bd4c3300d021f86fc75eab7865d4e0cbec6fbc883f011cfd6a57423e7e2f6e104baad2b744c3cafaec6bc7dc92c1@34.65.43.171:30305?discport=30305,enode://9d7a3efefe442351217e73b3a593bcb8efffb55b4807699972145324eab5e6b382152f8d24f6301baebbfb5ecd4127bd3faab2842c04cd432bdf50ba092f6645@34.65.109.126:30305?discport=30305
+      - OP_NODE_P2P_LISTEN_IP=0.0.0.0
+      - OP_NODE_P2P_LISTEN_TCP_PORT=16990
+      - OP_NODE_P2P_LISTEN_UDP_PORT=16990
+      - OP_NODE_P2P_STATIC=/ip4/34.6.118.237/tcp/9003/p2p/16Uiu2HAmKjbznKezrhsXMXVT3tSwviv8jojmfLeY9Zd53VvLmGsn,/ip4/34.178.43.233/tcp/9003/p2p/16Uiu2HAm27U7EgvM6C7N2Y3152ysiEd7K3YGXVzZ2ypsnu5ZE4cY,/ip4/34.6.162.247/tcp/9003/p2p/16Uiu2HAmDhreSpDkx8F78jiJPRV9Npm6VoNB2trgNBNWBreLsBmH
+      - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
+      - OP_NODE_RPC_ADDR=0.0.0.0
+      - OP_NODE_RPC_PORT=9545
+      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
+      - OP_NODE_SYNCMODE=execution-layer
+      - OP_NODE_VERIFIER_L1_CONFS=0
+    entrypoint: [op-node]
+    restart: unless-stopped
+    depends_on:
+      ink-mainnet-op-erigon:
+        condition: service_started
+        restart: true
+    networks:
+      - chains
+    volumes:
+      - ./op/ink/mainnet:/config
+      - .jwtsecret:/jwtsecret:ro
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=7300
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.ink-mainnet-op-erigon-archive-trace-node-stripprefix.stripprefix.prefixes=/ink-mainnet-op-erigon/node
+      - traefik.http.services.ink-mainnet-op-erigon-archive-trace-node.loadbalancer.server.port=9545
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-erigon-archive-trace-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-erigon-archive-trace-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-erigon-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/ink-mainnet-op-erigon/node`)}
+      - ${NO_SSL:+traefik.http.routers.ink-mainnet-op-erigon-archive-trace-node.rule=PathPrefix(`/ink-mainnet-op-erigon/node`)}
+      - traefik.http.routers.ink-mainnet-op-erigon-archive-trace-node.middlewares=ink-mainnet-op-erigon-archive-trace-node-stripprefix, ipallowlist
+
+volumes:
+  ink-mainnet-op-erigon-archive-trace:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: ink
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+        # non standard erigon only
+        - name: eth_getBlockReceipts
+        - name: eth_protocolVersion
+        - name: eth_callMany
+        - name: eth_callBundle
+        - name: debug_accountAt
+        - name: debug_traceCallMany
+        - name: erigon_getHeaderByHash
+        - name: erigon_getBlockReceiptsByBlockHash
+        - name: erigon_getHeaderByNumber
+        - name: erigon_getLogsByHash
+        - name: erigon_forks
+        - name: erigon_getBlockByTimestamp
+        - name: erigon_BlockNumber
+        - name: erigon_getLatestLogs
+...
--- a/op/erigon/mode-sepolia-op-erigon-archive-trace--kona.yml
+++ b/op/erigon/mode-sepolia-op-erigon-archive-trace--kona.yml
@@ -65,10 +65,9 @@ services:
      - --metrics
      - --metrics.addr=0.0.0.0
      - --metrics.port=6060
-      - --nat=extip:${IP}
+      - --nodiscover
      - --p2p.allowed-ports=33212
      - --p2p.allowed-ports=38212
-      - --port=13212
      - --rollup.sequencerhttp=https://sepolia.mode.network
      - --rpc.gascap=6000000000
      - --rpc.returndata.limit=1500000
@@ -129,7 +128,7 @@ services:
      - KONA_NODE_P2P_LISTEN_UDP_PORT=18212
      - KONA_NODE_RPC_ADDR=0.0.0.0
      - KONA_NODE_RPC_PORT=9545
-      - OP_NODE_SYNCMODE=execution-layer
+      - OP_NODE_SYNCMODE=consensus-layer
    entrypoint: [kona-node, node]
    restart: unless-stopped
    depends_on:
--- a/op/erigon/mode-sepolia-op-erigon-archive-trace.yml
+++ b/op/erigon/mode-sepolia-op-erigon-archive-trace.yml
@@ -65,10 +65,9 @@ services:
      - --metrics
      - --metrics.addr=0.0.0.0
      - --metrics.port=6060
-      - --nat=extip:${IP}
+      - --nodiscover
      - --p2p.allowed-ports=33212
      - --p2p.allowed-ports=38212
-      - --port=13212
      - --rollup.sequencerhttp=https://sepolia.mode.network
      - --rpc.gascap=6000000000
      - --rpc.returndata.limit=1500000
@@ -136,7 +135,7 @@ services:
      - OP_NODE_RPC_ADDR=0.0.0.0
      - OP_NODE_RPC_PORT=9545
      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
-      - OP_NODE_SYNCMODE=execution-layer
+      - OP_NODE_SYNCMODE=consensus-layer
      - OP_NODE_VERIFIER_L1_CONFS=0
    entrypoint: [op-node]
    restart: unless-stopped
--- a/op/erigon/soneium-miniato-sepolia-op-erigon-archive-trace.yml
+++ b/op/erigon/soneium-miniato-sepolia-op-erigon-archive-trace.yml
@@ -20,17 +20,17 @@ x-logging-defaults: &logging-defaults
 # ...
 # IP=$(curl ipinfo.io/ip)
 # DOMAIN=${IP}.traefik.me
-# COMPOSE_FILE=base.yml:rpc.yml:op/erigon/soneium-miniato-sepolia-op-erigon-archive-trace.yml
+# COMPOSE_FILE=base.yml:rpc.yml:op/erigon/soneium-minato-sepolia-op-erigon-archive-trace.yml
 #
 # docker compose up -d
 #
-# curl -X POST https://${IP}.traefik.me/soneium-miniato-sepolia-op-erigon \
+# curl -X POST https://${IP}.traefik.me/soneium-minato-sepolia-op-erigon \
 #   -H "Content-Type: application/json" \
 #   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'

 services:
-  soneium-miniato-sepolia-op-erigon:
-    image: ${SONEIUM_ERIGON_IMAGE:-testinprod/op-erigon}:${SONEIUM_MINIATO_SEPOLIA_ERIGON_VERSION:-v2.61.3-0.10.1}
+  soneium-minato-sepolia-op-erigon:
+    image: ${SONEIUM_ERIGON_IMAGE:-testinprod/op-erigon}:${SONEIUM_MINATO_SEPOLIA_ERIGON_VERSION:-v2.61.3-0.10.1}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -47,28 +47,28 @@ services:
      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
    user: root
    ports:
-      - 14735:14735
-      - 14735:14735/udp
-      - 34735:34735
-      - 34735:34735/udp
-      - 39735:39735
-      - 39735:39735/udp
+      - 12283:12283
+      - 12283:12283/udp
+      - 32283:32283
+      - 32283:32283/udp
+      - 37283:37283
+      - 37283:37283/udp
    expose:
      - 8545
      - 6060
      - 8551
    entrypoint: [erigon]
    command:
-      - --chain=soneium-miniato-sepolia
+      - --chain=soneium-minato-sepolia
      - --datadir=/root/.local/share/erigon
      - --maxpeers=50
      - --metrics
      - --metrics.addr=0.0.0.0
      - --metrics.port=6060
      - --nat=extip:${IP}
-      - --p2p.allowed-ports=34735
-      - --p2p.allowed-ports=39735
-      - --port=14735
+      - --p2p.allowed-ports=32283
+      - --p2p.allowed-ports=37283
+      - --port=12283
      - --rollup.sequencerhttp=https://rpc.soneium.org
      - --rpc.gascap=6000000000
      - --rpc.returndata.limit=1500000
@@ -87,7 +87,7 @@ services:
    networks:
      - chains
    volumes:
-      - ${SONEIUM_MINIATO_SEPOLIA_OP_ERIGON_ARCHIVE_TRACE_DATA:-soneium-miniato-sepolia-op-erigon-archive-trace}:/root/.local/share/erigon
+      - ${SONEIUM_MINATO_SEPOLIA_OP_ERIGON_ARCHIVE_TRACE_DATA:-soneium-minato-sepolia-op-erigon-archive-trace}:/root/.local/share/erigon
      - .jwtsecret:/jwtsecret:ro
      - /slowdisk:/slowdisk
    logging: *logging-defaults
@@ -96,41 +96,41 @@ services:
      - prometheus-scrape.port=6060
      - prometheus-scrape.path=/debug/metrics/prometheus
      - traefik.enable=true
-      - traefik.http.middlewares.soneium-miniato-sepolia-op-erigon-archive-trace-stripprefix.stripprefix.prefixes=/soneium-miniato-sepolia-op-erigon
-      - traefik.http.services.soneium-miniato-sepolia-op-erigon-archive-trace.loadbalancer.server.port=8545
-      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace.rule=Host(`$DOMAIN`) && (Path(`/soneium-miniato-sepolia-op-erigon`) || Path(`/soneium-miniato-sepolia-op-erigon/`))}
-      - ${NO_SSL:+traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace.rule=Path(`/soneium-miniato-sepolia-op-erigon`) || Path(`/soneium-miniato-sepolia-op-erigon/`)}
-      - traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace.middlewares=soneium-miniato-sepolia-op-erigon-archive-trace-stripprefix, ipallowlist
+      - traefik.http.middlewares.soneium-minato-sepolia-op-erigon-archive-trace-stripprefix.stripprefix.prefixes=/soneium-minato-sepolia-op-erigon
+      - traefik.http.services.soneium-minato-sepolia-op-erigon-archive-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace.rule=Host(`$DOMAIN`) && (Path(`/soneium-minato-sepolia-op-erigon`) || Path(`/soneium-minato-sepolia-op-erigon/`))}
+      - ${NO_SSL:+traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace.rule=Path(`/soneium-minato-sepolia-op-erigon`) || Path(`/soneium-minato-sepolia-op-erigon/`)}
+      - traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace.middlewares=soneium-minato-sepolia-op-erigon-archive-trace-stripprefix, ipallowlist
    shm_size: 2gb

-  soneium-miniato-sepolia-op-erigon-node:
-    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MINIATO_SEPOLIA_NODE_VERSION:-v1.19.2}
+  soneium-minato-sepolia-op-erigon-node:
+    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MINATO_SEPOLIA_NODE_VERSION:-v1.19.2}
    ports:
-      - 19735:19735
-      - 19735:19735/udp
+      - 17283:17283
+      - 17283:17283/udp
    environment:
      - OP_NODE_L1_BEACON=${ETHEREUM_SEPOLIA_BEACON_REST}
      - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_SEPOLIA_BEACON_ARCHIVER}
-      - OP_NODE_L1_ETH_RPC=${SONEIUM_MINIATO_SEPOLIA_L1_EXECUTION_RPC:-${ETHEREUM_SEPOLIA_EXECUTION_RPC}}
+      - OP_NODE_L1_ETH_RPC=${SONEIUM_MINATO_SEPOLIA_L1_EXECUTION_RPC:-${ETHEREUM_SEPOLIA_EXECUTION_RPC}}
      - OP_NODE_L1_RPC_KIND=${ETHEREUM_SEPOLIA_EXECUTION_KIND:-standard}
      - OP_NODE_L1_TRUST_RPC=${ETHEREUM_SEPOLIA_EXECUTION_TRUST:-false}
      - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
      - OP_NODE_L2_ENGINE_KIND=erigon
-      - OP_NODE_L2_ENGINE_RPC=http://soneium-miniato-sepolia-op-erigon:8551
+      - OP_NODE_L2_ENGINE_RPC=http://soneium-minato-sepolia-op-erigon:8551
      - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
      - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
      - OP_NODE_LOG_LEVEL=info
      - OP_NODE_METRICS_ADDR=0.0.0.0
      - OP_NODE_METRICS_ENABLED=true
      - OP_NODE_METRICS_PORT=7300
-      - OP_NODE_NETWORK=soneium-miniato-sepolia
+      - OP_NODE_NETWORK=soneium-minato-sepolia
      - OP_NODE_OVERRIDE_PECTRABLOBSCHEDULE=1742486400
      - OP_NODE_P2P_ADVERTISE_IP=${IP}
      - OP_NODE_P2P_LISTEN_IP=0.0.0.0
-      - OP_NODE_P2P_LISTEN_TCP_PORT=19735
-      - OP_NODE_P2P_LISTEN_UDP_PORT=19735
+      - OP_NODE_P2P_LISTEN_TCP_PORT=17283
+      - OP_NODE_P2P_LISTEN_UDP_PORT=17283
      - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
      - OP_NODE_RPC_ADDR=0.0.0.0
      - OP_NODE_RPC_PORT=9545
@@ -140,7 +140,7 @@ services:
    entrypoint: [op-node]
    restart: unless-stopped
    depends_on:
-      soneium-miniato-sepolia-op-erigon:
+      soneium-minato-sepolia-op-erigon:
        condition: service_started
        restart: true
    networks:
@@ -153,16 +153,16 @@ services:
      - prometheus-scrape.port=7300
      - prometheus-scrape.path=/metrics
      - traefik.enable=true
-      - traefik.http.middlewares.soneium-miniato-sepolia-op-erigon-archive-trace-node-stripprefix.stripprefix.prefixes=/soneium-miniato-sepolia-op-erigon/node
-      - traefik.http.services.soneium-miniato-sepolia-op-erigon-archive-trace-node.loadbalancer.server.port=9545
-      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace-node.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace-node.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/soneium-miniato-sepolia-op-erigon/node`)}
-      - ${NO_SSL:+traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace-node.rule=PathPrefix(`/soneium-miniato-sepolia-op-erigon/node`)}
-      - traefik.http.routers.soneium-miniato-sepolia-op-erigon-archive-trace-node.middlewares=soneium-miniato-sepolia-op-erigon-archive-trace-node-stripprefix, ipallowlist
+      - traefik.http.middlewares.soneium-minato-sepolia-op-erigon-archive-trace-node-stripprefix.stripprefix.prefixes=/soneium-minato-sepolia-op-erigon/node
+      - traefik.http.services.soneium-minato-sepolia-op-erigon-archive-trace-node.loadbalancer.server.port=9545
+      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/soneium-minato-sepolia-op-erigon/node`)}
+      - ${NO_SSL:+traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace-node.rule=PathPrefix(`/soneium-minato-sepolia-op-erigon/node`)}
+      - traefik.http.routers.soneium-minato-sepolia-op-erigon-archive-trace-node.middlewares=soneium-minato-sepolia-op-erigon-archive-trace-node-stripprefix, ipallowlist

 volumes:
-  soneium-miniato-sepolia-op-erigon-archive-trace:
+  soneium-minato-sepolia-op-erigon-archive-trace:

 x-upstreams:
  - id: $${ID}
--- a/op/geth/hashkeychain-mainnet-op-geth-archive-leveldb-hash--kona.yml
+++ b/op/geth/hashkeychain-mainnet-op-geth-archive-leveldb-hash--kona.yml
@@ -54,9 +54,6 @@ services:
      - 8551
    environment:
      - GETH_BOOTNODES=enode://5ecd6d2054a58fa00729b73396044a35e6aceeafe58373d2f26b3f50a3934175fb56f8efa538381430889771613beaabf1177805910bbd34e4b4840320914690@mainnet-bootnodes.hsk.xyz:30615,enode://bd244da2a066e15f82d4bfb7f2732c5b5bac44cefb36cefef01a4c0e87e72b42004d012c9a294b8402ebf67491777f280ffbcc93a71157921d6d358b19ddac67@mainnet-bootnodes.hsk.xyz:30616,enode://a5bba6459ac3a075a4a8941478a4ef8d167460191c89632004b17e4b2d7beea52cdc1a2d376f35e996ad44ccac8db25f900700aad6991d015bdc4db072832063@mainnet-bootnodes.hsk.xyz:30617
-      - GETH_OVERRIDE_HOLOCENE=1785306600
-      - GETH_OVERRIDE_ISTHMUS=1785306900
-      - GETH_OVERRIDE_JOVIAN=1785307200
      - GETH_ROLLUP_DISABLETXPOOLGOSSIP=true
      - GETH_ROLLUP_SEQUENCERHTTP=https://mainnet.hsk.xyz
    entrypoint: /bin/sh -c '[ -f /config/genesis.json ] && geth --db.engine=leveldb --gcmode=archive --datadir /data init --state.scheme=hash /config/genesis.json; [ -f /config/static-nodes.json ] && cp -f /config/static-nodes.json /data/static-nodes.json; exec geth "$@"' --
--- a/op/geth/hashkeychain-mainnet-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/hashkeychain-mainnet-op-geth-archive-leveldb-hash.yml
@@ -54,9 +54,6 @@ services:
      - 8551
    environment:
      - GETH_BOOTNODES=enode://5ecd6d2054a58fa00729b73396044a35e6aceeafe58373d2f26b3f50a3934175fb56f8efa538381430889771613beaabf1177805910bbd34e4b4840320914690@mainnet-bootnodes.hsk.xyz:30615,enode://bd244da2a066e15f82d4bfb7f2732c5b5bac44cefb36cefef01a4c0e87e72b42004d012c9a294b8402ebf67491777f280ffbcc93a71157921d6d358b19ddac67@mainnet-bootnodes.hsk.xyz:30616,enode://a5bba6459ac3a075a4a8941478a4ef8d167460191c89632004b17e4b2d7beea52cdc1a2d376f35e996ad44ccac8db25f900700aad6991d015bdc4db072832063@mainnet-bootnodes.hsk.xyz:30617
-      - GETH_OVERRIDE_HOLOCENE=1785306600
-      - GETH_OVERRIDE_ISTHMUS=1785306900
-      - GETH_OVERRIDE_JOVIAN=1785307200
      - GETH_ROLLUP_DISABLETXPOOLGOSSIP=true
      - GETH_ROLLUP_SEQUENCERHTTP=https://mainnet.hsk.xyz
    entrypoint: /bin/sh -c '[ -f /config/genesis.json ] && geth --db.engine=leveldb --gcmode=archive --datadir /data init --state.scheme=hash /config/genesis.json; [ -f /config/static-nodes.json ] && cp -f /config/static-nodes.json /data/static-nodes.json; exec geth "$@"' --
@@ -131,9 +128,6 @@ services:
      - OP_NODE_METRICS_ADDR=0.0.0.0
      - OP_NODE_METRICS_ENABLED=true
      - OP_NODE_METRICS_PORT=7300
-      - OP_NODE_OVERRIDE_HOLOCENE=1785306600
-      - OP_NODE_OVERRIDE_ISTHMUS=1785306900
-      - OP_NODE_OVERRIDE_JOVIAN=1785307200
      - OP_NODE_P2P_ADVERTISE_IP=${IP}
      - OP_NODE_P2P_LISTEN_IP=0.0.0.0
      - OP_NODE_P2P_LISTEN_TCP_PORT=19113
--- a/op/geth/hashkeychain-mainnet-op-geth-pruned-pebble-path--kona.yml
+++ b/op/geth/hashkeychain-mainnet-op-geth-pruned-pebble-path--kona.yml
@@ -54,9 +54,6 @@ services:
      - 8551
    environment:
      - GETH_BOOTNODES=enode://5ecd6d2054a58fa00729b73396044a35e6aceeafe58373d2f26b3f50a3934175fb56f8efa538381430889771613beaabf1177805910bbd34e4b4840320914690@mainnet-bootnodes.hsk.xyz:30615,enode://bd244da2a066e15f82d4bfb7f2732c5b5bac44cefb36cefef01a4c0e87e72b42004d012c9a294b8402ebf67491777f280ffbcc93a71157921d6d358b19ddac67@mainnet-bootnodes.hsk.xyz:30616,enode://a5bba6459ac3a075a4a8941478a4ef8d167460191c89632004b17e4b2d7beea52cdc1a2d376f35e996ad44ccac8db25f900700aad6991d015bdc4db072832063@mainnet-bootnodes.hsk.xyz:30617
-      - GETH_OVERRIDE_HOLOCENE=1785306600
-      - GETH_OVERRIDE_ISTHMUS=1785306900
-      - GETH_OVERRIDE_JOVIAN=1785307200
      - GETH_ROLLUP_DISABLETXPOOLGOSSIP=true
      - GETH_ROLLUP_SEQUENCERHTTP=https://mainnet.hsk.xyz
    entrypoint: /bin/sh -c '[ -f /config/genesis.json ] && geth --db.engine=pebble --gcmode=full --datadir /data init --state.scheme=path /config/genesis.json; [ -f /config/static-nodes.json ] && cp -f /config/static-nodes.json /data/static-nodes.json; exec geth "$@"' --
--- a/op/geth/hashkeychain-mainnet-op-geth-pruned-pebble-path.yml
+++ b/op/geth/hashkeychain-mainnet-op-geth-pruned-pebble-path.yml
@@ -54,9 +54,6 @@ services:
      - 8551
    environment:
      - GETH_BOOTNODES=enode://5ecd6d2054a58fa00729b73396044a35e6aceeafe58373d2f26b3f50a3934175fb56f8efa538381430889771613beaabf1177805910bbd34e4b4840320914690@mainnet-bootnodes.hsk.xyz:30615,enode://bd244da2a066e15f82d4bfb7f2732c5b5bac44cefb36cefef01a4c0e87e72b42004d012c9a294b8402ebf67491777f280ffbcc93a71157921d6d358b19ddac67@mainnet-bootnodes.hsk.xyz:30616,enode://a5bba6459ac3a075a4a8941478a4ef8d167460191c89632004b17e4b2d7beea52cdc1a2d376f35e996ad44ccac8db25f900700aad6991d015bdc4db072832063@mainnet-bootnodes.hsk.xyz:30617
-      - GETH_OVERRIDE_HOLOCENE=1785306600
-      - GETH_OVERRIDE_ISTHMUS=1785306900
-      - GETH_OVERRIDE_JOVIAN=1785307200
      - GETH_ROLLUP_DISABLETXPOOLGOSSIP=true
      - GETH_ROLLUP_SEQUENCERHTTP=https://mainnet.hsk.xyz
    entrypoint: /bin/sh -c '[ -f /config/genesis.json ] && geth --db.engine=pebble --gcmode=full --datadir /data init --state.scheme=path /config/genesis.json; [ -f /config/static-nodes.json ] && cp -f /config/static-nodes.json /data/static-nodes.json; exec geth "$@"' --
@@ -131,9 +128,6 @@ services:
      - OP_NODE_METRICS_ADDR=0.0.0.0
      - OP_NODE_METRICS_ENABLED=true
      - OP_NODE_METRICS_PORT=7300
-      - OP_NODE_OVERRIDE_HOLOCENE=1785306600
-      - OP_NODE_OVERRIDE_ISTHMUS=1785306900
-      - OP_NODE_OVERRIDE_JOVIAN=1785307200
      - OP_NODE_P2P_ADVERTISE_IP=${IP}
      - OP_NODE_P2P_LISTEN_IP=0.0.0.0
      - OP_NODE_P2P_LISTEN_TCP_PORT=17188
--- a/op/geth/metal-sepolia-op-geth-archive-leveldb-hash--kona.yml
+++ b/op/geth/metal-sepolia-op-geth-archive-leveldb-hash--kona.yml
@@ -45,9 +45,6 @@ services:
    ulimits:
      nofile: 1048576    # Max open files (for RPC/WS connections)
    user: root
-    ports:
-      - 14770:14770
-      - 14770:14770/udp
    expose:
      - 8545
      - 6060
@@ -65,8 +62,7 @@ services:
      - --metrics
      - --metrics.addr=0.0.0.0
      - --metrics.port=6060
-      - --nat=extip:${IP}
-      - --port=14770
+      - --nodiscover
      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=hash
@@ -130,7 +126,7 @@ services:
      - KONA_NODE_P2P_LISTEN_UDP_PORT=19770
      - KONA_NODE_RPC_ADDR=0.0.0.0
      - KONA_NODE_RPC_PORT=9545
-      - OP_NODE_SYNCMODE=execution-layer
+      - OP_NODE_SYNCMODE=consensus-layer
    entrypoint: [kona-node, node]
    restart: unless-stopped
    depends_on:
--- a/op/geth/metal-sepolia-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/metal-sepolia-op-geth-archive-leveldb-hash.yml
@@ -45,9 +45,6 @@ services:
    ulimits:
      nofile: 1048576    # Max open files (for RPC/WS connections)
    user: root
-    ports:
-      - 14770:14770
-      - 14770:14770/udp
    expose:
      - 8545
      - 6060
@@ -65,8 +62,7 @@ services:
      - --metrics
      - --metrics.addr=0.0.0.0
      - --metrics.port=6060
-      - --nat=extip:${IP}
-      - --port=14770
+      - --nodiscover
      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=hash
@@ -135,7 +131,7 @@ services:
      - OP_NODE_RPC_ADDR=0.0.0.0
      - OP_NODE_RPC_PORT=9545
      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
-      - OP_NODE_SYNCMODE=execution-layer
+      - OP_NODE_SYNCMODE=consensus-layer
      - OP_NODE_VERIFIER_L1_CONFS=0
    entrypoint: [op-node]
    restart: unless-stopped
--- a/op/geth/metal-sepolia-op-geth-pruned-pebble-path--kona.yml
+++ b/op/geth/metal-sepolia-op-geth-pruned-pebble-path--kona.yml
@@ -45,9 +45,6 @@ services:
    ulimits:
      nofile: 1048576    # Max open files (for RPC/WS connections)
    user: root
-    ports:
-      - 14701:14701
-      - 14701:14701/udp
    expose:
      - 8545
      - 6060
@@ -65,12 +62,11 @@ services:
      - --metrics
      - --metrics.addr=0.0.0.0
      - --metrics.port=6060
-      - --nat=extip:${IP}
-      - --port=14701
+      - --nodiscover
      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=path
-      - --syncmode=snap
+      - --syncmode=full
      - --http
      - --http.addr=0.0.0.0
      - --http.api=eth,net,web3,debug,admin,txpool,engine
@@ -130,7 +126,7 @@ services:
      - KONA_NODE_P2P_LISTEN_UDP_PORT=19701
      - KONA_NODE_RPC_ADDR=0.0.0.0
      - KONA_NODE_RPC_PORT=9545
-      - OP_NODE_SYNCMODE=execution-layer
+      - OP_NODE_SYNCMODE=consensus-layer
    entrypoint: [kona-node, node]
    restart: unless-stopped
    depends_on:
--- a/op/geth/metal-sepolia-op-geth-pruned-pebble-path.yml
+++ b/op/geth/metal-sepolia-op-geth-pruned-pebble-path.yml
@@ -45,9 +45,6 @@ services:
    ulimits:
      nofile: 1048576    # Max open files (for RPC/WS connections)
    user: root
-    ports:
-      - 14701:14701
-      - 14701:14701/udp
    expose:
      - 8545
      - 6060
@@ -65,12 +62,11 @@ services:
      - --metrics
      - --metrics.addr=0.0.0.0
      - --metrics.port=6060
-      - --nat=extip:${IP}
-      - --port=14701
+      - --nodiscover
      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=path
-      - --syncmode=snap
+      - --syncmode=full
      - --http
      - --http.addr=0.0.0.0
      - --http.api=eth,net,web3,debug,admin,txpool,engine
@@ -135,7 +131,7 @@ services:
      - OP_NODE_RPC_ADDR=0.0.0.0
      - OP_NODE_RPC_PORT=9545
      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
-      - OP_NODE_SYNCMODE=execution-layer
+      - OP_NODE_SYNCMODE=consensus-layer
      - OP_NODE_VERIFIER_L1_CONFS=0
    entrypoint: [op-node]
    restart: unless-stopped
--- a/op/geth/mode-sepolia-op-geth-archive-leveldb-hash--kona.yml
+++ b/op/geth/mode-sepolia-op-geth-archive-leveldb-hash--kona.yml
@@ -45,9 +45,6 @@ services:
    ulimits:
      nofile: 1048576    # Max open files (for RPC/WS connections)
    user: root
-    ports:
-      - 12835:12835
-      - 12835:12835/udp
    expose:
      - 8545
      - 6060
@@ -65,8 +62,7 @@ services:
      - --metrics
      - --metrics.addr=0.0.0.0
      - --metrics.port=6060
-      - --nat=extip:${IP}
-      - --port=12835
+      - --nodiscover
      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=hash
@@ -130,7 +126,7 @@ services:
      - KONA_NODE_P2P_LISTEN_UDP_PORT=17835
      - KONA_NODE_RPC_ADDR=0.0.0.0
      - KONA_NODE_RPC_PORT=9545
-      - OP_NODE_SYNCMODE=execution-layer
+      - OP_NODE_SYNCMODE=consensus-layer
    entrypoint: [kona-node, node]
    restart: unless-stopped
    depends_on:
--- a/op/geth/mode-sepolia-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/mode-sepolia-op-geth-archive-leveldb-hash.yml
@@ -45,9 +45,6 @@ services:
    ulimits:
      nofile: 1048576    # Max open files (for RPC/WS connections)
    user: root
-    ports:
-      - 12835:12835
-      - 12835:12835/udp
    expose:
      - 8545
      - 6060
@@ -65,8 +62,7 @@ services:
      - --metrics
      - --metrics.addr=0.0.0.0
      - --metrics.port=6060
-      - --nat=extip:${IP}
-      - --port=12835
+      - --nodiscover
      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=hash
@@ -136,7 +132,7 @@ services:
      - OP_NODE_RPC_ADDR=0.0.0.0
      - OP_NODE_RPC_PORT=9545
      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
-      - OP_NODE_SYNCMODE=execution-layer
+      - OP_NODE_SYNCMODE=consensus-layer
      - OP_NODE_VERIFIER_L1_CONFS=0
    entrypoint: [op-node]
    restart: unless-stopped
--- a/op/geth/mode-sepolia-op-geth-pruned-pebble-hash--kona.yml
+++ b/op/geth/mode-sepolia-op-geth-pruned-pebble-hash--kona.yml
@@ -45,9 +45,6 @@ services:
    ulimits:
      nofile: 1048576    # Max open files (for RPC/WS connections)
    user: root
-    ports:
-      - 13454:13454
-      - 13454:13454/udp
    expose:
      - 8545
      - 6060
@@ -65,8 +62,7 @@ services:
      - --metrics
      - --metrics.addr=0.0.0.0
      - --metrics.port=6060
-      - --nat=extip:${IP}
-      - --port=13454
+      - --nodiscover
      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=hash
@@ -130,7 +126,7 @@ services:
      - KONA_NODE_P2P_LISTEN_UDP_PORT=18454
      - KONA_NODE_RPC_ADDR=0.0.0.0
      - KONA_NODE_RPC_PORT=9545
-      - OP_NODE_SYNCMODE=execution-layer
+      - OP_NODE_SYNCMODE=consensus-layer
    entrypoint: [kona-node, node]
    restart: unless-stopped
    depends_on:
--- a/op/geth/mode-sepolia-op-geth-pruned-pebble-hash.yml
+++ b/op/geth/mode-sepolia-op-geth-pruned-pebble-hash.yml
@@ -45,9 +45,6 @@ services:
    ulimits:
      nofile: 1048576    # Max open files (for RPC/WS connections)
    user: root
-    ports:
-      - 13454:13454
-      - 13454:13454/udp
    expose:
      - 8545
      - 6060
@@ -65,8 +62,7 @@ services:
      - --metrics
      - --metrics.addr=0.0.0.0
      - --metrics.port=6060
-      - --nat=extip:${IP}
-      - --port=13454
+      - --nodiscover
      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=hash
@@ -136,7 +132,7 @@ services:
      - OP_NODE_RPC_ADDR=0.0.0.0
      - OP_NODE_RPC_PORT=9545
      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
-      - OP_NODE_SYNCMODE=execution-layer
+      - OP_NODE_SYNCMODE=consensus-layer
      - OP_NODE_VERIFIER_L1_CONFS=0
    entrypoint: [op-node]
    restart: unless-stopped
--- a/op/geth/mode-sepolia-op-geth-pruned-pebble-path--kona.yml
+++ b/op/geth/mode-sepolia-op-geth-pruned-pebble-path--kona.yml
@@ -45,9 +45,6 @@ services:
    ulimits:
      nofile: 1048576    # Max open files (for RPC/WS connections)
    user: root
-    ports:
-      - 13308:13308
-      - 13308:13308/udp
    expose:
      - 8545
      - 6060
@@ -65,12 +62,11 @@ services:
      - --metrics
      - --metrics.addr=0.0.0.0
      - --metrics.port=6060
-      - --nat=extip:${IP}
-      - --port=13308
+      - --nodiscover
      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=path
-      - --syncmode=snap
+      - --syncmode=full
      - --http
      - --http.addr=0.0.0.0
      - --http.api=eth,net,web3,debug,admin,txpool,engine
@@ -130,7 +126,7 @@ services:
      - KONA_NODE_P2P_LISTEN_UDP_PORT=18308
      - KONA_NODE_RPC_ADDR=0.0.0.0
      - KONA_NODE_RPC_PORT=9545
-      - OP_NODE_SYNCMODE=execution-layer
+      - OP_NODE_SYNCMODE=consensus-layer
    entrypoint: [kona-node, node]
    restart: unless-stopped
    depends_on:
--- a/op/geth/mode-sepolia-op-geth-pruned-pebble-path.yml
+++ b/op/geth/mode-sepolia-op-geth-pruned-pebble-path.yml
@@ -45,9 +45,6 @@ services:
    ulimits:
      nofile: 1048576    # Max open files (for RPC/WS connections)
    user: root
-    ports:
-      - 13308:13308
-      - 13308:13308/udp
    expose:
      - 8545
      - 6060
@@ -65,12 +62,11 @@ services:
      - --metrics
      - --metrics.addr=0.0.0.0
      - --metrics.port=6060
-      - --nat=extip:${IP}
-      - --port=13308
+      - --nodiscover
      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=path
-      - --syncmode=snap
+      - --syncmode=full
      - --http
      - --http.addr=0.0.0.0
      - --http.api=eth,net,web3,debug,admin,txpool,engine
@@ -136,7 +132,7 @@ services:
      - OP_NODE_RPC_ADDR=0.0.0.0
      - OP_NODE_RPC_PORT=9545
      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
-      - OP_NODE_SYNCMODE=execution-layer
+      - OP_NODE_SYNCMODE=consensus-layer
      - OP_NODE_VERIFIER_L1_CONFS=0
    entrypoint: [op-node]
    restart: unless-stopped
--- a/op/geth/soneium-miniato-sepolia-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/soneium-miniato-sepolia-op-geth-archive-leveldb-hash.yml
@@ -20,17 +20,17 @@ x-logging-defaults: &logging-defaults
 # ...
 # IP=$(curl ipinfo.io/ip)
 # DOMAIN=${IP}.traefik.me
-# COMPOSE_FILE=base.yml:rpc.yml:op/geth/soneium-miniato-sepolia-op-geth-archive-leveldb-hash.yml
+# COMPOSE_FILE=base.yml:rpc.yml:op/geth/soneium-minato-sepolia-op-geth-archive-leveldb-hash.yml
 #
 # docker compose up -d
 #
-# curl -X POST https://${IP}.traefik.me/soneium-miniato-sepolia-archive \
+# curl -X POST https://${IP}.traefik.me/soneium-minato-sepolia-archive \
 #   -H "Content-Type: application/json" \
 #   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'

 services:
-  soneium-miniato-sepolia-archive:
-    image: ${SONEIUM_GETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-geth}:${SONEIUM_MINIATO_SEPOLIA_GETH_VERSION:-v1.101702.2}
+  soneium-minato-sepolia-archive:
+    image: ${SONEIUM_GETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-geth}:${SONEIUM_MINATO_SEPOLIA_GETH_VERSION:-v1.101702.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -46,14 +46,14 @@ services:
      nofile: 1048576    # Max open files (for RPC/WS connections)
    user: root
    ports:
-      - 13664:13664
-      - 13664:13664/udp
+      - 11279:11279
+      - 11279:11279/udp
    expose:
      - 8545
      - 6060
      - 8551
    environment:
-      - GETH_OP_NETWORK=soneium-miniato-sepolia
+      - GETH_OP_NETWORK=soneium-minato-sepolia
      - GETH_ROLLUP_DISABLETXPOOLGOSSIP=true
      - GETH_ROLLUP_SEQUENCERHTTP=https://rpc.soneium.org
    entrypoint: /bin/sh -c 'exec geth "$@"' --
@@ -66,7 +66,7 @@ services:
      - --metrics.addr=0.0.0.0
      - --metrics.port=6060
      - --nat=extip:${IP}
-      - --port=13664
+      - --port=11279
      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=hash
@@ -89,7 +89,7 @@ services:
    networks:
      - chains
    volumes:
-      - ${SONEIUM_MINIATO_SEPOLIA_OP_GETH_ARCHIVE_LEVELDB_HASH_DATA:-soneium-miniato-sepolia-op-geth-archive-leveldb-hash}:/data
+      - ${SONEIUM_MINATO_SEPOLIA_OP_GETH_ARCHIVE_LEVELDB_HASH_DATA:-soneium-minato-sepolia-op-geth-archive-leveldb-hash}:/data
      - .jwtsecret:/jwtsecret:ro
      - /slowdisk:/slowdisk
    logging: *logging-defaults
@@ -98,39 +98,39 @@ services:
      - prometheus-scrape.port=6060
      - prometheus-scrape.path=/debug/metrics/prometheus
      - traefik.enable=true
-      - traefik.http.middlewares.soneium-miniato-sepolia-op-geth-archive-leveldb-hash-stripprefix.stripprefix.prefixes=/soneium-miniato-sepolia-archive
-      - traefik.http.services.soneium-miniato-sepolia-op-geth-archive-leveldb-hash.loadbalancer.server.port=8545
-      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash.rule=Host(`$DOMAIN`) && (Path(`/soneium-miniato-sepolia-archive`) || Path(`/soneium-miniato-sepolia-archive/`))}
-      - ${NO_SSL:+traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash.rule=Path(`/soneium-miniato-sepolia-archive`) || Path(`/soneium-miniato-sepolia-archive/`)}
-      - traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash.middlewares=soneium-miniato-sepolia-op-geth-archive-leveldb-hash-stripprefix, ipallowlist
+      - traefik.http.middlewares.soneium-minato-sepolia-op-geth-archive-leveldb-hash-stripprefix.stripprefix.prefixes=/soneium-minato-sepolia-archive
+      - traefik.http.services.soneium-minato-sepolia-op-geth-archive-leveldb-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash.rule=Host(`$DOMAIN`) && (Path(`/soneium-minato-sepolia-archive`) || Path(`/soneium-minato-sepolia-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash.rule=Path(`/soneium-minato-sepolia-archive`) || Path(`/soneium-minato-sepolia-archive/`)}
+      - traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash.middlewares=soneium-minato-sepolia-op-geth-archive-leveldb-hash-stripprefix, ipallowlist

-  soneium-miniato-sepolia-archive-node:
-    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MINIATO_SEPOLIA_NODE_VERSION:-v1.19.2}
+  soneium-minato-sepolia-archive-node:
+    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MINATO_SEPOLIA_NODE_VERSION:-v1.19.2}
    ports:
-      - 18664:18664
-      - 18664:18664/udp
+      - 16279:16279
+      - 16279:16279/udp
    environment:
      - OP_NODE_L1_BEACON=${ETHEREUM_SEPOLIA_BEACON_REST}
      - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_SEPOLIA_BEACON_ARCHIVER}
-      - OP_NODE_L1_ETH_RPC=${SONEIUM_MINIATO_SEPOLIA_L1_EXECUTION_RPC:-${ETHEREUM_SEPOLIA_EXECUTION_RPC}}
+      - OP_NODE_L1_ETH_RPC=${SONEIUM_MINATO_SEPOLIA_L1_EXECUTION_RPC:-${ETHEREUM_SEPOLIA_EXECUTION_RPC}}
      - OP_NODE_L1_RPC_KIND=${ETHEREUM_SEPOLIA_EXECUTION_KIND:-standard}
      - OP_NODE_L1_TRUST_RPC=${ETHEREUM_SEPOLIA_EXECUTION_TRUST:-false}
      - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
-      - OP_NODE_L2_ENGINE_RPC=http://soneium-miniato-sepolia-archive:8551
+      - OP_NODE_L2_ENGINE_RPC=http://soneium-minato-sepolia-archive:8551
      - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
      - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
      - OP_NODE_LOG_LEVEL=info
      - OP_NODE_METRICS_ADDR=0.0.0.0
      - OP_NODE_METRICS_ENABLED=true
      - OP_NODE_METRICS_PORT=7300
-      - OP_NODE_NETWORK=soneium-miniato-sepolia
+      - OP_NODE_NETWORK=soneium-minato-sepolia
      - OP_NODE_OVERRIDE_PECTRABLOBSCHEDULE=1742486400
      - OP_NODE_P2P_ADVERTISE_IP=${IP}
      - OP_NODE_P2P_LISTEN_IP=0.0.0.0
-      - OP_NODE_P2P_LISTEN_TCP_PORT=18664
-      - OP_NODE_P2P_LISTEN_UDP_PORT=18664
+      - OP_NODE_P2P_LISTEN_TCP_PORT=16279
+      - OP_NODE_P2P_LISTEN_UDP_PORT=16279
      - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
      - OP_NODE_RPC_ADDR=0.0.0.0
      - OP_NODE_RPC_PORT=9545
@@ -140,7 +140,7 @@ services:
    entrypoint: [op-node]
    restart: unless-stopped
    depends_on:
-      soneium-miniato-sepolia-archive:
+      soneium-minato-sepolia-archive:
        condition: service_started
        restart: true
    networks:
@@ -153,16 +153,16 @@ services:
      - prometheus-scrape.port=7300
      - prometheus-scrape.path=/metrics
      - traefik.enable=true
-      - traefik.http.middlewares.soneium-miniato-sepolia-op-geth-archive-leveldb-hash-node-stripprefix.stripprefix.prefixes=/soneium-miniato-sepolia-archive/node
-      - traefik.http.services.soneium-miniato-sepolia-op-geth-archive-leveldb-hash-node.loadbalancer.server.port=9545
-      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash-node.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash-node.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash-node.rule=Host(`$DOMAIN`) && PathPrefix(`/soneium-miniato-sepolia-archive/node`)}
-      - ${NO_SSL:+traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash-node.rule=PathPrefix(`/soneium-miniato-sepolia-archive/node`)}
-      - traefik.http.routers.soneium-miniato-sepolia-op-geth-archive-leveldb-hash-node.middlewares=soneium-miniato-sepolia-op-geth-archive-leveldb-hash-node-stripprefix, ipallowlist
+      - traefik.http.middlewares.soneium-minato-sepolia-op-geth-archive-leveldb-hash-node-stripprefix.stripprefix.prefixes=/soneium-minato-sepolia-archive/node
+      - traefik.http.services.soneium-minato-sepolia-op-geth-archive-leveldb-hash-node.loadbalancer.server.port=9545
+      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash-node.rule=Host(`$DOMAIN`) && PathPrefix(`/soneium-minato-sepolia-archive/node`)}
+      - ${NO_SSL:+traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash-node.rule=PathPrefix(`/soneium-minato-sepolia-archive/node`)}
+      - traefik.http.routers.soneium-minato-sepolia-op-geth-archive-leveldb-hash-node.middlewares=soneium-minato-sepolia-op-geth-archive-leveldb-hash-node-stripprefix, ipallowlist

 volumes:
-  soneium-miniato-sepolia-op-geth-archive-leveldb-hash:
+  soneium-minato-sepolia-op-geth-archive-leveldb-hash:

 x-upstreams:
  - id: $${ID}
--- a/op/geth/soneium-miniato-sepolia-op-geth-pruned-pebble-path.yml
+++ b/op/geth/soneium-miniato-sepolia-op-geth-pruned-pebble-path.yml
@@ -20,17 +20,17 @@ x-logging-defaults: &logging-defaults
 # ...
 # IP=$(curl ipinfo.io/ip)
 # DOMAIN=${IP}.traefik.me
-# COMPOSE_FILE=base.yml:rpc.yml:op/geth/soneium-miniato-sepolia-op-geth-pruned-pebble-path.yml
+# COMPOSE_FILE=base.yml:rpc.yml:op/geth/soneium-minato-sepolia-op-geth-pruned-pebble-path.yml
 #
 # docker compose up -d
 #
-# curl -X POST https://${IP}.traefik.me/soneium-miniato-sepolia \
+# curl -X POST https://${IP}.traefik.me/soneium-minato-sepolia \
 #   -H "Content-Type: application/json" \
 #   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'

 services:
-  soneium-miniato-sepolia:
-    image: ${SONEIUM_GETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-geth}:${SONEIUM_MINIATO_SEPOLIA_GETH_VERSION:-v1.101702.2}
+  soneium-minato-sepolia:
+    image: ${SONEIUM_GETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-geth}:${SONEIUM_MINATO_SEPOLIA_GETH_VERSION:-v1.101702.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -46,14 +46,14 @@ services:
      nofile: 1048576    # Max open files (for RPC/WS connections)
    user: root
    ports:
-      - 14827:14827
-      - 14827:14827/udp
+      - 12166:12166
+      - 12166:12166/udp
    expose:
      - 8545
      - 6060
      - 8551
    environment:
-      - GETH_OP_NETWORK=soneium-miniato-sepolia
+      - GETH_OP_NETWORK=soneium-minato-sepolia
      - GETH_ROLLUP_DISABLETXPOOLGOSSIP=true
      - GETH_ROLLUP_SEQUENCERHTTP=https://rpc.soneium.org
    entrypoint: /bin/sh -c 'exec geth "$@"' --
@@ -66,7 +66,7 @@ services:
      - --metrics.addr=0.0.0.0
      - --metrics.port=6060
      - --nat=extip:${IP}
-      - --port=14827
+      - --port=12166
      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=path
@@ -89,7 +89,7 @@ services:
    networks:
      - chains
    volumes:
-      - ${SONEIUM_MINIATO_SEPOLIA_OP_GETH_PRUNED_PEBBLE_PATH_DATA:-soneium-miniato-sepolia-op-geth-pruned-pebble-path}:/data
+      - ${SONEIUM_MINATO_SEPOLIA_OP_GETH_PRUNED_PEBBLE_PATH_DATA:-soneium-minato-sepolia-op-geth-pruned-pebble-path}:/data
      - .jwtsecret:/jwtsecret:ro
      - /slowdisk:/slowdisk
    logging: *logging-defaults
@@ -98,39 +98,39 @@ services:
      - prometheus-scrape.port=6060
      - prometheus-scrape.path=/debug/metrics/prometheus
      - traefik.enable=true
-      - traefik.http.middlewares.soneium-miniato-sepolia-op-geth-pruned-pebble-path-stripprefix.stripprefix.prefixes=/soneium-miniato-sepolia
-      - traefik.http.services.soneium-miniato-sepolia-op-geth-pruned-pebble-path.loadbalancer.server.port=8545
-      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/soneium-miniato-sepolia`) || Path(`/soneium-miniato-sepolia/`))}
-      - ${NO_SSL:+traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path.rule=Path(`/soneium-miniato-sepolia`) || Path(`/soneium-miniato-sepolia/`)}
-      - traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path.middlewares=soneium-miniato-sepolia-op-geth-pruned-pebble-path-stripprefix, ipallowlist
+      - traefik.http.middlewares.soneium-minato-sepolia-op-geth-pruned-pebble-path-stripprefix.stripprefix.prefixes=/soneium-minato-sepolia
+      - traefik.http.services.soneium-minato-sepolia-op-geth-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/soneium-minato-sepolia`) || Path(`/soneium-minato-sepolia/`))}
+      - ${NO_SSL:+traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path.rule=Path(`/soneium-minato-sepolia`) || Path(`/soneium-minato-sepolia/`)}
+      - traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path.middlewares=soneium-minato-sepolia-op-geth-pruned-pebble-path-stripprefix, ipallowlist

-  soneium-miniato-sepolia-node:
-    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MINIATO_SEPOLIA_NODE_VERSION:-v1.19.2}
+  soneium-minato-sepolia-node:
+    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MINATO_SEPOLIA_NODE_VERSION:-v1.19.2}
    ports:
-      - 19827:19827
-      - 19827:19827/udp
+      - 17166:17166
+      - 17166:17166/udp
    environment:
      - OP_NODE_L1_BEACON=${ETHEREUM_SEPOLIA_BEACON_REST}
      - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_SEPOLIA_BEACON_ARCHIVER}
-      - OP_NODE_L1_ETH_RPC=${SONEIUM_MINIATO_SEPOLIA_L1_EXECUTION_RPC:-${ETHEREUM_SEPOLIA_EXECUTION_RPC}}
+      - OP_NODE_L1_ETH_RPC=${SONEIUM_MINATO_SEPOLIA_L1_EXECUTION_RPC:-${ETHEREUM_SEPOLIA_EXECUTION_RPC}}
      - OP_NODE_L1_RPC_KIND=${ETHEREUM_SEPOLIA_EXECUTION_KIND:-standard}
      - OP_NODE_L1_TRUST_RPC=${ETHEREUM_SEPOLIA_EXECUTION_TRUST:-false}
      - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
-      - OP_NODE_L2_ENGINE_RPC=http://soneium-miniato-sepolia:8551
+      - OP_NODE_L2_ENGINE_RPC=http://soneium-minato-sepolia:8551
      - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
      - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
      - OP_NODE_LOG_LEVEL=info
      - OP_NODE_METRICS_ADDR=0.0.0.0
      - OP_NODE_METRICS_ENABLED=true
      - OP_NODE_METRICS_PORT=7300
-      - OP_NODE_NETWORK=soneium-miniato-sepolia
+      - OP_NODE_NETWORK=soneium-minato-sepolia
      - OP_NODE_OVERRIDE_PECTRABLOBSCHEDULE=1742486400
      - OP_NODE_P2P_ADVERTISE_IP=${IP}
      - OP_NODE_P2P_LISTEN_IP=0.0.0.0
-      - OP_NODE_P2P_LISTEN_TCP_PORT=19827
-      - OP_NODE_P2P_LISTEN_UDP_PORT=19827
+      - OP_NODE_P2P_LISTEN_TCP_PORT=17166
+      - OP_NODE_P2P_LISTEN_UDP_PORT=17166
      - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
      - OP_NODE_RPC_ADDR=0.0.0.0
      - OP_NODE_RPC_PORT=9545
@@ -140,7 +140,7 @@ services:
    entrypoint: [op-node]
    restart: unless-stopped
    depends_on:
-      soneium-miniato-sepolia:
+      soneium-minato-sepolia:
        condition: service_started
        restart: true
    networks:
@@ -153,16 +153,16 @@ services:
      - prometheus-scrape.port=7300
      - prometheus-scrape.path=/metrics
      - traefik.enable=true
-      - traefik.http.middlewares.soneium-miniato-sepolia-op-geth-pruned-pebble-path-node-stripprefix.stripprefix.prefixes=/soneium-miniato-sepolia/node
-      - traefik.http.services.soneium-miniato-sepolia-op-geth-pruned-pebble-path-node.loadbalancer.server.port=9545
-      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path-node.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path-node.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path-node.rule=Host(`$DOMAIN`) && PathPrefix(`/soneium-miniato-sepolia/node`)}
-      - ${NO_SSL:+traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path-node.rule=PathPrefix(`/soneium-miniato-sepolia/node`)}
-      - traefik.http.routers.soneium-miniato-sepolia-op-geth-pruned-pebble-path-node.middlewares=soneium-miniato-sepolia-op-geth-pruned-pebble-path-node-stripprefix, ipallowlist
+      - traefik.http.middlewares.soneium-minato-sepolia-op-geth-pruned-pebble-path-node-stripprefix.stripprefix.prefixes=/soneium-minato-sepolia/node
+      - traefik.http.services.soneium-minato-sepolia-op-geth-pruned-pebble-path-node.loadbalancer.server.port=9545
+      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path-node.rule=Host(`$DOMAIN`) && PathPrefix(`/soneium-minato-sepolia/node`)}
+      - ${NO_SSL:+traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path-node.rule=PathPrefix(`/soneium-minato-sepolia/node`)}
+      - traefik.http.routers.soneium-minato-sepolia-op-geth-pruned-pebble-path-node.middlewares=soneium-minato-sepolia-op-geth-pruned-pebble-path-node-stripprefix, ipallowlist

 volumes:
-  soneium-miniato-sepolia-op-geth-pruned-pebble-path:
+  soneium-minato-sepolia-op-geth-pruned-pebble-path:

 x-upstreams:
  - id: $${ID}
--- a/op/hashkeychain/mainnet/genesis.json
+++ b/op/hashkeychain/mainnet/genesis.json
@@ -25,7 +25,6 @@
    "graniteTime": 0,
    "holoceneTime": 1785306600,
    "isthmusTime": 1785306900,
-    "pragueTime": 1785306900,
    "jovianTime": 1785307200,
    "terminalTotalDifficulty": 0,
    "terminalTotalDifficultyPassed": true,
--- a/op/reth/hashkeychain-mainnet-op-reth-pruned-trace.yml
+++ b/op/reth/hashkeychain-mainnet-op-reth-pruned-trace.yml
@@ -134,9 +134,6 @@ services:
      - OP_NODE_METRICS_ADDR=0.0.0.0
      - OP_NODE_METRICS_ENABLED=true
      - OP_NODE_METRICS_PORT=7300
-      - OP_NODE_OVERRIDE_HOLOCENE=1785306600
-      - OP_NODE_OVERRIDE_ISTHMUS=1785306900
-      - OP_NODE_OVERRIDE_JOVIAN=1785307200
      - OP_NODE_P2P_ADVERTISE_IP=${IP}
      - OP_NODE_P2P_LISTEN_IP=0.0.0.0
      - OP_NODE_P2P_LISTEN_TCP_PORT=17151
--- a/op/reth/ink-mainnet-op-reth-archive-trace--kona.yml
+++ b/op/reth/ink-mainnet-op-reth-archive-trace--kona.yml
@@ -0,0 +1,191 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:op/reth/ink-mainnet-op-reth-archive-trace--kona.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/ink-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  ink-mainnet-archive:
+    image: ${INK_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${INK_MAINNET_RETH_VERSION:-v2.3.3}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: root
+    ports:
+      - 11634:11634
+      - 11634:11634/udp
+    expose:
+      - 8545
+      - 9001
+      - 8551
+    entrypoint: [op-reth, node]
+    command:
+      - --chain=/config/genesis.json
+      - --config=/config/reth/reth.toml
+      - --datadir=/root/.local/share/reth
+      - --discovery.addr=0.0.0.0
+      - --discovery.port=11634
+      - --discovery.v5.addr=0.0.0.0
+      - --discovery.v5.port=11634
+      - --engine.cross-block-cache-size=${INK_MAINNET_RETH_STATE_CACHE:-4096}
+      - --max-inbound-peers=50
+      - --max-outbound-peers=50
+      - --metrics=0.0.0.0:9001
+      - --nat=extip:${IP}
+      - --port=11634
+      - --rollup.sequencer-http=https://rpc-gel.inkonchain.com
+      - --rpc-cache.max-blocks=10000
+      - --rpc-cache.max-concurrent-db-requests=2048
+      - --rpc.gascap=600000000
+      - --rpc.max-blocks-per-filter=0
+      - --rpc.max-connections=50000
+      - --rpc.max-logs-per-response=0
+      - --rpc.max-trace-filter-blocks=10000
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=admin,debug,eth,net,trace,txpool,web3,rpc,reth,ots,flashbots,mev
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --ws
+      - --ws.addr=0.0.0.0
+      - --ws.api=admin,debug,eth,net,trace,txpool,web3,rpc,reth,ots,flashbots,mev
+      - --ws.origins=*
+      - --ws.port=8545
+      - --authrpc.addr=0.0.0.0
+      - --authrpc.jwtsecret=/jwtsecret
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${INK_MAINNET_OP_RETH_ARCHIVE_TRACE_DATA:-ink-mainnet-op-reth-archive-trace}:/root/.local/share/reth
+      - ./op/ink/mainnet:/config
+      - .jwtsecret:/jwtsecret:ro
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=9001
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.ink-mainnet-op-reth-archive-trace-stripprefix.stripprefix.prefixes=/ink-mainnet-archive
+      - traefik.http.services.ink-mainnet-op-reth-archive-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-reth-archive-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-reth-archive-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-reth-archive-trace.rule=Host(`$DOMAIN`) && (Path(`/ink-mainnet-archive`) || Path(`/ink-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.ink-mainnet-op-reth-archive-trace.rule=Path(`/ink-mainnet-archive`) || Path(`/ink-mainnet-archive/`)}
+      - traefik.http.routers.ink-mainnet-op-reth-archive-trace.middlewares=ink-mainnet-op-reth-archive-trace-stripprefix, ipallowlist
+    shm_size: 2gb
+
+  ink-mainnet-archive-node:
+    image: ${INK_KONA_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/kona-node}:${INK_MAINNET_KONA_VERSION:-v1.6.2}
+    ports:
+      - 16634:16634
+      - 16634:16634/udp
+    environment:
+      - KONA_METRICS_ADDR=0.0.0.0
+      - KONA_NODE_L1_BEACON=${ETHEREUM_MAINNET_BEACON_REST}
+      - KONA_NODE_L1_ETH_RPC=${INK_MAINNET_L1_EXECUTION_RPC:-${ETHEREUM_MAINNET_EXECUTION_RPC}}
+      - KONA_NODE_L1_TRUST_RPC=${ETHEREUM_MAINNET_EXECUTION_TRUST:-false}
+      - KONA_NODE_L2_CHAIN_ID=57073
+      - KONA_NODE_L2_ENGINE_AUTH=/jwtsecret
+      - KONA_NODE_L2_ENGINE_RPC=http://ink-mainnet-archive:8551
+      - KONA_NODE_L2_ENGINE_TIMEOUT=120000
+      - KONA_NODE_L2_TRUST_RPC=true
+      - KONA_NODE_METRICS_PORT=7300
+      - KONA_NODE_MODE=Validator
+      - KONA_NODE_P2P_ADVERTISE_IP=${IP}
+      - KONA_NODE_P2P_BOOTNODES=enode://92534205dd72a8787df902c89a775d9a45882739a973a7030d4d338c9b65387cfb77629907f9b6afb4e2bd98d9e6d2ccfde02d8a968b4fbccb68f0f4db5f4d83@34.13.199.202:30305?discport=30305,enode://26b0306725a78a8d193c2074bfd9e71233dbd3b75ab74be0ab555f72865fd88a285774526243f36653844eb95d62108c35f8c2723656b2c9568716ee2463f8d7@34.7.48.80:30305?discport=30305,enode://0c7bbb6bca9ce80952d8d8f8ba966e6b9e80faf75a165f320a53722f32b51c4b1da16ba59ab14f5194e51095a2755d8d3086a0220e34d88729cc8f4cc5499116@35.204.27.165:30305?discport=30305,enode://869d07b5932f17e8490990f75a3f94195e9504ddb6b85f7189e5a9c0a8fff8b00aecf6f3ac450ecba6cdabdb5858788a94bde2b613e0f2d82e9b395355f76d1a@34.65.67.101:30305?discport=30305,enode://2d4e7e9d48f4dd4efe9342706dd1b0024681bd4c3300d021f86fc75eab7865d4e0cbec6fbc883f011cfd6a57423e7e2f6e104baad2b744c3cafaec6bc7dc92c1@34.65.43.171:30305?discport=30305,enode://9d7a3efefe442351217e73b3a593bcb8efffb55b4807699972145324eab5e6b382152f8d24f6301baebbfb5ecd4127bd3faab2842c04cd432bdf50ba092f6645@34.65.109.126:30305?discport=30305
+      - KONA_NODE_P2P_LISTEN_IP=0.0.0.0
+      - KONA_NODE_P2P_LISTEN_TCP_PORT=16634
+      - KONA_NODE_P2P_LISTEN_UDP_PORT=16634
+      - KONA_NODE_RPC_ADDR=0.0.0.0
+      - KONA_NODE_RPC_PORT=9545
+      - OP_NODE_SYNCMODE=execution-layer
+    entrypoint: [kona-node, node]
+    restart: unless-stopped
+    depends_on:
+      ink-mainnet-archive:
+        condition: service_started
+        restart: true
+    networks:
+      - chains
+    volumes:
+      - ./op/ink/mainnet:/config
+      - .jwtsecret:/jwtsecret:ro
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=7300
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.ink-mainnet-op-reth-archive-trace-node-stripprefix.stripprefix.prefixes=/ink-mainnet-archive/node
+      - traefik.http.services.ink-mainnet-op-reth-archive-trace-node.loadbalancer.server.port=9545
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-reth-archive-trace-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-reth-archive-trace-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-reth-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/ink-mainnet-archive/node`)}
+      - ${NO_SSL:+traefik.http.routers.ink-mainnet-op-reth-archive-trace-node.rule=PathPrefix(`/ink-mainnet-archive/node`)}
+      - traefik.http.routers.ink-mainnet-op-reth-archive-trace-node.middlewares=ink-mainnet-op-reth-archive-trace-node-stripprefix, ipallowlist
+
+volumes:
+  ink-mainnet-op-reth-archive-trace:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: ink
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      disabled:
+        - name: eth_maxPriorityFeePerGas
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...
--- a/op/reth/ink-mainnet-op-reth-archive-trace.yml
+++ b/op/reth/ink-mainnet-op-reth-archive-trace.yml
@@ -0,0 +1,191 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:op/reth/ink-mainnet-op-reth-archive-trace.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/ink-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  ink-mainnet-archive:
+    image: ${INK_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${INK_MAINNET_RETH_VERSION:-v2.3.3}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: root
+    expose:
+      - 8545
+      - 9001
+      - 8551
+    entrypoint: [op-reth, node]
+    command:
+      - --chain=/config/genesis.json
+      - --config=/config/reth/reth.toml
+      - --datadir=/root/.local/share/reth
+      - --disable-discovery
+      - --engine.cross-block-cache-size=${INK_MAINNET_RETH_STATE_CACHE:-4096}
+      - --max-inbound-peers=50
+      - --max-outbound-peers=50
+      - --metrics=0.0.0.0:9001
+      - --rollup.sequencer-http=https://rpc-gel.inkonchain.com
+      - --rpc-cache.max-blocks=10000
+      - --rpc-cache.max-concurrent-db-requests=2048
+      - --rpc.gascap=600000000
+      - --rpc.max-blocks-per-filter=0
+      - --rpc.max-connections=50000
+      - --rpc.max-logs-per-response=0
+      - --rpc.max-trace-filter-blocks=10000
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=admin,debug,eth,net,trace,txpool,web3,rpc,reth,ots,flashbots,mev
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --ws
+      - --ws.addr=0.0.0.0
+      - --ws.api=admin,debug,eth,net,trace,txpool,web3,rpc,reth,ots,flashbots,mev
+      - --ws.origins=*
+      - --ws.port=8545
+      - --authrpc.addr=0.0.0.0
+      - --authrpc.jwtsecret=/jwtsecret
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${INK_MAINNET_OP_RETH_ARCHIVE_TRACE_DATA:-ink-mainnet-op-reth-archive-trace}:/root/.local/share/reth
+      - ./op/ink/mainnet:/config
+      - .jwtsecret:/jwtsecret:ro
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=9001
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.ink-mainnet-op-reth-archive-trace-stripprefix.stripprefix.prefixes=/ink-mainnet-archive
+      - traefik.http.services.ink-mainnet-op-reth-archive-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-reth-archive-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-reth-archive-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-reth-archive-trace.rule=Host(`$DOMAIN`) && (Path(`/ink-mainnet-archive`) || Path(`/ink-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.ink-mainnet-op-reth-archive-trace.rule=Path(`/ink-mainnet-archive`) || Path(`/ink-mainnet-archive/`)}
+      - traefik.http.routers.ink-mainnet-op-reth-archive-trace.middlewares=ink-mainnet-op-reth-archive-trace-stripprefix, ipallowlist
+    shm_size: 2gb
+
+  ink-mainnet-archive-node:
+    image: ${INK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${INK_MAINNET_NODE_VERSION:-v1.19.2}
+    ports:
+      - 16634:16634
+      - 16634:16634/udp
+    environment:
+      - OP_NODE_L1_BEACON=${ETHEREUM_MAINNET_BEACON_REST}
+      - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_MAINNET_BEACON_ARCHIVER}
+      - OP_NODE_L1_ETH_RPC=${INK_MAINNET_L1_EXECUTION_RPC:-${ETHEREUM_MAINNET_EXECUTION_RPC}}
+      - OP_NODE_L1_RPC_KIND=${ETHEREUM_MAINNET_EXECUTION_KIND:-standard}
+      - OP_NODE_L1_TRUST_RPC=${ETHEREUM_MAINNET_EXECUTION_TRUST:-false}
+      - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
+      - OP_NODE_L2_ENGINE_KIND=reth
+      - OP_NODE_L2_ENGINE_RPC=http://ink-mainnet-archive:8551
+      - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
+      - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
+      - OP_NODE_LOG_LEVEL=info
+      - OP_NODE_METRICS_ADDR=0.0.0.0
+      - OP_NODE_METRICS_ENABLED=true
+      - OP_NODE_METRICS_PORT=7300
+      - OP_NODE_NETWORK=ink-mainnet
+      - OP_NODE_P2P_ADVERTISE_IP=${IP}
+      - OP_NODE_P2P_BOOTNODES=enode://92534205dd72a8787df902c89a775d9a45882739a973a7030d4d338c9b65387cfb77629907f9b6afb4e2bd98d9e6d2ccfde02d8a968b4fbccb68f0f4db5f4d83@34.13.199.202:30305?discport=30305,enode://26b0306725a78a8d193c2074bfd9e71233dbd3b75ab74be0ab555f72865fd88a285774526243f36653844eb95d62108c35f8c2723656b2c9568716ee2463f8d7@34.7.48.80:30305?discport=30305,enode://0c7bbb6bca9ce80952d8d8f8ba966e6b9e80faf75a165f320a53722f32b51c4b1da16ba59ab14f5194e51095a2755d8d3086a0220e34d88729cc8f4cc5499116@35.204.27.165:30305?discport=30305,enode://869d07b5932f17e8490990f75a3f94195e9504ddb6b85f7189e5a9c0a8fff8b00aecf6f3ac450ecba6cdabdb5858788a94bde2b613e0f2d82e9b395355f76d1a@34.65.67.101:30305?discport=30305,enode://2d4e7e9d48f4dd4efe9342706dd1b0024681bd4c3300d021f86fc75eab7865d4e0cbec6fbc883f011cfd6a57423e7e2f6e104baad2b744c3cafaec6bc7dc92c1@34.65.43.171:30305?discport=30305,enode://9d7a3efefe442351217e73b3a593bcb8efffb55b4807699972145324eab5e6b382152f8d24f6301baebbfb5ecd4127bd3faab2842c04cd432bdf50ba092f6645@34.65.109.126:30305?discport=30305
+      - OP_NODE_P2P_LISTEN_IP=0.0.0.0
+      - OP_NODE_P2P_LISTEN_TCP_PORT=16634
+      - OP_NODE_P2P_LISTEN_UDP_PORT=16634
+      - OP_NODE_P2P_STATIC=/ip4/34.6.118.237/tcp/9003/p2p/16Uiu2HAmKjbznKezrhsXMXVT3tSwviv8jojmfLeY9Zd53VvLmGsn,/ip4/34.178.43.233/tcp/9003/p2p/16Uiu2HAm27U7EgvM6C7N2Y3152ysiEd7K3YGXVzZ2ypsnu5ZE4cY,/ip4/34.6.162.247/tcp/9003/p2p/16Uiu2HAmDhreSpDkx8F78jiJPRV9Npm6VoNB2trgNBNWBreLsBmH
+      - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
+      - OP_NODE_RPC_ADDR=0.0.0.0
+      - OP_NODE_RPC_PORT=9545
+      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
+      - OP_NODE_SYNCMODE=consensus-layer
+      - OP_NODE_VERIFIER_L1_CONFS=0
+    entrypoint: [op-node]
+    restart: unless-stopped
+    depends_on:
+      ink-mainnet-archive:
+        condition: service_started
+        restart: true
+    networks:
+      - chains
+    volumes:
+      - ./op/ink/mainnet:/config
+      - .jwtsecret:/jwtsecret:ro
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=7300
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.ink-mainnet-op-reth-archive-trace-node-stripprefix.stripprefix.prefixes=/ink-mainnet-archive/node
+      - traefik.http.services.ink-mainnet-op-reth-archive-trace-node.loadbalancer.server.port=9545
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-reth-archive-trace-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-reth-archive-trace-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-reth-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/ink-mainnet-archive/node`)}
+      - ${NO_SSL:+traefik.http.routers.ink-mainnet-op-reth-archive-trace-node.rule=PathPrefix(`/ink-mainnet-archive/node`)}
+      - traefik.http.routers.ink-mainnet-op-reth-archive-trace-node.middlewares=ink-mainnet-op-reth-archive-trace-node-stripprefix, ipallowlist
+
+volumes:
+  ink-mainnet-op-reth-archive-trace:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: ink
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      disabled:
+        - name: eth_maxPriorityFeePerGas
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...
--- a/op/reth/ink-mainnet-op-reth-pruned-trace--kona.yml
+++ b/op/reth/ink-mainnet-op-reth-pruned-trace--kona.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  ink-mainnet:
-    image: ${INK_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${INK_MAINNET_RETH_VERSION:-v2.4.0}
+    image: ${INK_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${INK_MAINNET_RETH_VERSION:-v2.3.3}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/op/reth/ink-mainnet-op-reth-pruned-trace.yml
+++ b/op/reth/ink-mainnet-op-reth-pruned-trace.yml
@@ -0,0 +1,192 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:op/reth/ink-mainnet-op-reth-pruned-trace.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/ink-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  ink-mainnet:
+    image: ${INK_RETH_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-reth}:${INK_MAINNET_RETH_VERSION:-v2.3.3}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: root
+    expose:
+      - 8545
+      - 9001
+      - 8551
+    entrypoint: [op-reth, node]
+    command:
+      - --chain=/config/genesis.json
+      - --config=/config/reth/reth.toml
+      - --datadir=/root/.local/share/reth
+      - --disable-discovery
+      - --engine.cross-block-cache-size=${INK_MAINNET_RETH_STATE_CACHE:-4096}
+      - --full
+      - --max-inbound-peers=50
+      - --max-outbound-peers=50
+      - --metrics=0.0.0.0:9001
+      - --rollup.sequencer-http=https://rpc-gel.inkonchain.com
+      - --rpc-cache.max-blocks=10000
+      - --rpc-cache.max-concurrent-db-requests=2048
+      - --rpc.gascap=600000000
+      - --rpc.max-blocks-per-filter=0
+      - --rpc.max-connections=50000
+      - --rpc.max-logs-per-response=0
+      - --rpc.max-trace-filter-blocks=10000
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=admin,debug,eth,net,trace,txpool,web3,rpc,reth,ots,flashbots,mev
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --ws
+      - --ws.addr=0.0.0.0
+      - --ws.api=admin,debug,eth,net,trace,txpool,web3,rpc,reth,ots,flashbots,mev
+      - --ws.origins=*
+      - --ws.port=8545
+      - --authrpc.addr=0.0.0.0
+      - --authrpc.jwtsecret=/jwtsecret
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${INK_MAINNET_OP_RETH_PRUNED_TRACE_DATA:-ink-mainnet-op-reth-pruned-trace}:/root/.local/share/reth
+      - ./op/ink/mainnet:/config
+      - .jwtsecret:/jwtsecret:ro
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=9001
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.ink-mainnet-op-reth-pruned-trace-stripprefix.stripprefix.prefixes=/ink-mainnet
+      - traefik.http.services.ink-mainnet-op-reth-pruned-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-reth-pruned-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-reth-pruned-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-reth-pruned-trace.rule=Host(`$DOMAIN`) && (Path(`/ink-mainnet`) || Path(`/ink-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.ink-mainnet-op-reth-pruned-trace.rule=Path(`/ink-mainnet`) || Path(`/ink-mainnet/`)}
+      - traefik.http.routers.ink-mainnet-op-reth-pruned-trace.middlewares=ink-mainnet-op-reth-pruned-trace-stripprefix, ipallowlist
+    shm_size: 2gb
+
+  ink-mainnet-node:
+    image: ${INK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${INK_MAINNET_NODE_VERSION:-v1.19.2}
+    ports:
+      - 19845:19845
+      - 19845:19845/udp
+    environment:
+      - OP_NODE_L1_BEACON=${ETHEREUM_MAINNET_BEACON_REST}
+      - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_MAINNET_BEACON_ARCHIVER}
+      - OP_NODE_L1_ETH_RPC=${INK_MAINNET_L1_EXECUTION_RPC:-${ETHEREUM_MAINNET_EXECUTION_RPC}}
+      - OP_NODE_L1_RPC_KIND=${ETHEREUM_MAINNET_EXECUTION_KIND:-standard}
+      - OP_NODE_L1_TRUST_RPC=${ETHEREUM_MAINNET_EXECUTION_TRUST:-false}
+      - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
+      - OP_NODE_L2_ENGINE_KIND=reth
+      - OP_NODE_L2_ENGINE_RPC=http://ink-mainnet:8551
+      - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
+      - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
+      - OP_NODE_LOG_LEVEL=info
+      - OP_NODE_METRICS_ADDR=0.0.0.0
+      - OP_NODE_METRICS_ENABLED=true
+      - OP_NODE_METRICS_PORT=7300
+      - OP_NODE_NETWORK=ink-mainnet
+      - OP_NODE_P2P_ADVERTISE_IP=${IP}
+      - OP_NODE_P2P_BOOTNODES=enode://92534205dd72a8787df902c89a775d9a45882739a973a7030d4d338c9b65387cfb77629907f9b6afb4e2bd98d9e6d2ccfde02d8a968b4fbccb68f0f4db5f4d83@34.13.199.202:30305?discport=30305,enode://26b0306725a78a8d193c2074bfd9e71233dbd3b75ab74be0ab555f72865fd88a285774526243f36653844eb95d62108c35f8c2723656b2c9568716ee2463f8d7@34.7.48.80:30305?discport=30305,enode://0c7bbb6bca9ce80952d8d8f8ba966e6b9e80faf75a165f320a53722f32b51c4b1da16ba59ab14f5194e51095a2755d8d3086a0220e34d88729cc8f4cc5499116@35.204.27.165:30305?discport=30305,enode://869d07b5932f17e8490990f75a3f94195e9504ddb6b85f7189e5a9c0a8fff8b00aecf6f3ac450ecba6cdabdb5858788a94bde2b613e0f2d82e9b395355f76d1a@34.65.67.101:30305?discport=30305,enode://2d4e7e9d48f4dd4efe9342706dd1b0024681bd4c3300d021f86fc75eab7865d4e0cbec6fbc883f011cfd6a57423e7e2f6e104baad2b744c3cafaec6bc7dc92c1@34.65.43.171:30305?discport=30305,enode://9d7a3efefe442351217e73b3a593bcb8efffb55b4807699972145324eab5e6b382152f8d24f6301baebbfb5ecd4127bd3faab2842c04cd432bdf50ba092f6645@34.65.109.126:30305?discport=30305
+      - OP_NODE_P2P_LISTEN_IP=0.0.0.0
+      - OP_NODE_P2P_LISTEN_TCP_PORT=19845
+      - OP_NODE_P2P_LISTEN_UDP_PORT=19845
+      - OP_NODE_P2P_STATIC=/ip4/34.6.118.237/tcp/9003/p2p/16Uiu2HAmKjbznKezrhsXMXVT3tSwviv8jojmfLeY9Zd53VvLmGsn,/ip4/34.178.43.233/tcp/9003/p2p/16Uiu2HAm27U7EgvM6C7N2Y3152ysiEd7K3YGXVzZ2ypsnu5ZE4cY,/ip4/34.6.162.247/tcp/9003/p2p/16Uiu2HAmDhreSpDkx8F78jiJPRV9Npm6VoNB2trgNBNWBreLsBmH
+      - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
+      - OP_NODE_RPC_ADDR=0.0.0.0
+      - OP_NODE_RPC_PORT=9545
+      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
+      - OP_NODE_SYNCMODE=consensus-layer
+      - OP_NODE_VERIFIER_L1_CONFS=0
+    entrypoint: [op-node]
+    restart: unless-stopped
+    depends_on:
+      ink-mainnet:
+        condition: service_started
+        restart: true
+    networks:
+      - chains
+    volumes:
+      - ./op/ink/mainnet:/config
+      - .jwtsecret:/jwtsecret:ro
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=7300
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.ink-mainnet-op-reth-pruned-trace-node-stripprefix.stripprefix.prefixes=/ink-mainnet/node
+      - traefik.http.services.ink-mainnet-op-reth-pruned-trace-node.loadbalancer.server.port=9545
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-reth-pruned-trace-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-reth-pruned-trace-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.ink-mainnet-op-reth-pruned-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/ink-mainnet/node`)}
+      - ${NO_SSL:+traefik.http.routers.ink-mainnet-op-reth-pruned-trace-node.rule=PathPrefix(`/ink-mainnet/node`)}
+      - traefik.http.routers.ink-mainnet-op-reth-pruned-trace-node.middlewares=ink-mainnet-op-reth-pruned-trace-node-stripprefix, ipallowlist
+
+volumes:
+  ink-mainnet-op-reth-pruned-trace:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: ink
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      disabled:
+        - name: eth_maxPriorityFeePerGas
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...
--- a/Show More
+++ b/Show More