shibarium: set heimdall CL_VERSION to v1.0.7-bone in cometbft.Dockerfile

Reviewed-on: #10

abstract/external-node/abstract-mainnet-external-node-archive.yml

@@ -98,8 +98,8 @@ services:
       - traefik.http.routers.abstract-mainnet-external-node-archive.service=abstract-mainnet-external-node-archive
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-mainnet-archive`) || Path(`/abstract-mainnet-archive/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-mainnet-archive`) || Path(`/abstract-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.abstract-mainnet-external-node-archive-ws.rule=(Path(`/abstract-mainnet-archive`) || Path(`/abstract-mainnet-archive/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.abstract-mainnet-external-node-archive-ws.rule=(Path(`/abstract-mainnet-archive`) || Path(`/abstract-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.abstract-mainnet-external-node-archive-ws.middlewares=abstract-mainnet-external-node-archive-stripprefix, ipallowlist
 
   abstract-mainnet-archive-db:

abstract/external-node/abstract-mainnet-external-node-pruned.yml

@@ -98,8 +98,8 @@ services:
       - traefik.http.routers.abstract-mainnet-external-node-pruned.service=abstract-mainnet-external-node-pruned
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-mainnet`) || Path(`/abstract-mainnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-mainnet`) || Path(`/abstract-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.abstract-mainnet-external-node-pruned-ws.rule=(Path(`/abstract-mainnet`) || Path(`/abstract-mainnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.abstract-mainnet-external-node-pruned-ws.rule=(Path(`/abstract-mainnet`) || Path(`/abstract-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.abstract-mainnet-external-node-pruned-ws.middlewares=abstract-mainnet-external-node-pruned-stripprefix, ipallowlist
 
   abstract-mainnet-db:

abstract/external-node/abstract-testnet-external-node-archive.yml

@@ -98,8 +98,8 @@ services:
       - traefik.http.routers.abstract-testnet-external-node-archive.service=abstract-testnet-external-node-archive
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-testnet-archive`) || Path(`/abstract-testnet-archive/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-testnet-archive`) || Path(`/abstract-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.abstract-testnet-external-node-archive-ws.rule=(Path(`/abstract-testnet-archive`) || Path(`/abstract-testnet-archive/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.abstract-testnet-external-node-archive-ws.rule=(Path(`/abstract-testnet-archive`) || Path(`/abstract-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.abstract-testnet-external-node-archive-ws.middlewares=abstract-testnet-external-node-archive-stripprefix, ipallowlist
 
   abstract-testnet-archive-db:

abstract/external-node/abstract-testnet-external-node-pruned.yml

@@ -98,8 +98,8 @@ services:
       - traefik.http.routers.abstract-testnet-external-node-pruned.service=abstract-testnet-external-node-pruned
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-testnet`) || Path(`/abstract-testnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-testnet`) || Path(`/abstract-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.abstract-testnet-external-node-pruned-ws.rule=(Path(`/abstract-testnet`) || Path(`/abstract-testnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.abstract-testnet-external-node-pruned-ws.rule=(Path(`/abstract-testnet`) || Path(`/abstract-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.abstract-testnet-external-node-pruned-ws.middlewares=abstract-testnet-external-node-pruned-stripprefix, ipallowlist
 
   abstract-testnet-db:

arb/apechain/arbitrum-one/baseConfig.json

@@ -0,0 +1,5 @@
+{
+    "chain": {
+        "info-json": "[{\"chain-id\": 33139, \"parent-chain-id\": 42161, \"chain-name\": \"apechain\", \"chain-config\": {\"chainId\": 33139, \"homesteadBlock\": 0, \"daoForkBlock\": null, \"daoForkSupport\": true, \"eip150Block\": 0, \"eip150Hash\": \"0x0000000000000000000000000000000000000000000000000000000000000000\", \"eip155Block\": 0, \"eip158Block\": 0, \"byzantiumBlock\": 0, \"constantinopleBlock\": 0, \"petersburgBlock\": 0, \"istanbulBlock\": 0, \"muirGlacierBlock\": 0, \"berlinBlock\": 0, \"londonBlock\": 0, \"clique\": {\"period\": 0, \"epoch\": 0}, \"arbitrum\": {\"EnableArbOS\": true, \"AllowDebugPrecompiles\": false, \"DataAvailabilityCommittee\": false, \"InitialArbOSVersion\": 31, \"EigenDA\": false, \"InitialChainOwner\": \"0x5737cdbb3a67001441c0da8b86e6b1826705601c\", \"GenesisBlockNum\": 0}}, \"rollup\": {\"bridge\": \"0x6B71AFb4b7725227ab944c96FE018AB9dc0434b8\", \"inbox\": \"0x1B98e4ED82Ee1a91A65a38C690e2266364064D15\", \"sequencer-inbox\": \"0xE6a92Ae29E24C343eE66A2B3D3ECB783d65E4a3C\", \"rollup\": \"0x374de579AE15aD59eD0519aeAf1A23F348Df259c\", \"validator-utils\": \"0xaB36aec5517C346D21b9C19429BAA5aa87D17fCa\", \"validator-wallet-creator\": \"0x5a6C98F6A60BDC02cE4d8AD43b4Fc88Fe5b38856\", \"deployed-at\": 247653199}, \"parent-chain-is-arbitrum\": true}]"
+    }
+}

arb/nitro/apechain-mainnet-nitro-archive-pebble-hash.yml

@@ -0,0 +1,144 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/apechain-mainnet-nitro-archive-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/apechain-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  apechain-mainnet-archive:
+    image: ${APECHAIN_NITRO_IMAGE:-public.ecr.aws/i6b2w2n6/nitro-node}:${APECHAIN_MAINNET_NITRO_VERSION:-apechain-v3.5.6}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${APECHAIN_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${APECHAIN_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${APECHAIN_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${APECHAIN_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.apechain.com/http
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.data-availability.enable=true
+      - --node.data-availability.rest-aggregator.enable=true
+      - --node.data-availability.rest-aggregator.urls=https://apechain.calderachain.xyz/rest-aggregator
+      - --node.feed.input.url=wss://apechain.calderachain.xyz/feed
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.connection.url=${ARBITRUM_ONE_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/apechain-mainnet-archive
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${APECHAIN_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_DATA:-apechain-mainnet-nitro-archive-pebble-hash}:/root/.arbitrum
+      - ./arb/apechain/arbitrum-one:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.apechain-mainnet-nitro-archive-pebble-hash-stripprefix.stripprefix.prefixes=/apechain-mainnet-archive
+      - traefik.http.services.apechain-mainnet-nitro-archive-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.apechain-mainnet-nitro-archive-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.apechain-mainnet-nitro-archive-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.apechain-mainnet-nitro-archive-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/apechain-mainnet-archive`) || Path(`/apechain-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.apechain-mainnet-nitro-archive-pebble-hash.rule=Path(`/apechain-mainnet-archive`) || Path(`/apechain-mainnet-archive/`)}
+      - traefik.http.routers.apechain-mainnet-nitro-archive-pebble-hash.middlewares=apechain-mainnet-nitro-archive-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  apechain-mainnet-nitro-archive-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: apechain
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/apechain-mainnet-nitro-pruned-pebble-path.yml

@@ -0,0 +1,146 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/apechain-mainnet-nitro-pruned-pebble-path.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/apechain-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  apechain-mainnet:
+    image: ${APECHAIN_NITRO_IMAGE:-public.ecr.aws/i6b2w2n6/nitro-node}:${APECHAIN_MAINNET_NITRO_VERSION:-apechain-v3.5.6}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${APECHAIN_MAINNET_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${APECHAIN_MAINNET_NITRO_PRUNED_PEBBLE_PATH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${APECHAIN_MAINNET_NITRO_PRUNED_PEBBLE_PATH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.state-scheme=path
+      - --execution.caching.trie-clean-cache=${APECHAIN_MAINNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${APECHAIN_MAINNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.apechain.com/http
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.data-availability.enable=true
+      - --node.data-availability.rest-aggregator.enable=true
+      - --node.data-availability.rest-aggregator.urls=https://apechain.calderachain.xyz/rest-aggregator
+      - --node.feed.input.url=wss://apechain.calderachain.xyz/feed
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.connection.url=${ARBITRUM_ONE_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/apechain-mainnet
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${APECHAIN_MAINNET_NITRO_PRUNED_PEBBLE_PATH_DATA:-apechain-mainnet-nitro-pruned-pebble-path}:/root/.arbitrum
+      - ./arb/apechain/arbitrum-one:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.apechain-mainnet-nitro-pruned-pebble-path-stripprefix.stripprefix.prefixes=/apechain-mainnet
+      - traefik.http.services.apechain-mainnet-nitro-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.apechain-mainnet-nitro-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.apechain-mainnet-nitro-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.apechain-mainnet-nitro-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/apechain-mainnet`) || Path(`/apechain-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.apechain-mainnet-nitro-pruned-pebble-path.rule=Path(`/apechain-mainnet`) || Path(`/apechain-mainnet/`)}
+      - traefik.http.routers.apechain-mainnet-nitro-pruned-pebble-path.middlewares=apechain-mainnet-nitro-pruned-pebble-path-stripprefix, ipallowlist
+
+volumes:
+  apechain-mainnet-nitro-pruned-pebble-path:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: apechain
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-nova-nitro-minimal-pebble-hash.prune.yml

@@ -0,0 +1,141 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-nova-nitro-minimal-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-nova-minimal \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-nova-minimal:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.10.1-d7f07be}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=42170
+      - --execution.caching.archive=${ARBITRUM_NOVA_MINIMAL_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --init.prune=minimal
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-nova-minimal
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_DATA:-arbitrum-nova-nitro-minimal-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-nova-minimal:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-nova-nitro-minimal-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-nova-minimal
+      - traefik.http.services.arbitrum-nova-nitro-minimal-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-nova-minimal`) || Path(`/arbitrum-nova-minimal/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.rule=Path(`/arbitrum-nova-minimal`) || Path(`/arbitrum-nova-minimal/`)}
+      - traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.middlewares=arbitrum-nova-nitro-minimal-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-nova-nitro-minimal-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum-nova
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-nova-nitro-minimal-pebble-hash.yml

@@ -0,0 +1,140 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-nova-nitro-minimal-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-nova-minimal \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-nova-minimal:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.10.1-d7f07be}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=42170
+      - --execution.caching.archive=${ARBITRUM_NOVA_MINIMAL_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-nova-minimal
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_DATA:-arbitrum-nova-nitro-minimal-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-nova-minimal:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-nova-nitro-minimal-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-nova-minimal
+      - traefik.http.services.arbitrum-nova-nitro-minimal-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-nova-minimal`) || Path(`/arbitrum-nova-minimal/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.rule=Path(`/arbitrum-nova-minimal`) || Path(`/arbitrum-nova-minimal/`)}
+      - traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.middlewares=arbitrum-nova-nitro-minimal-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-nova-nitro-minimal-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum-nova
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-nova-nitro-pruned-pebble-hash.prune.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-nova:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.9.5-66e42c4}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.10.1-d7f07be}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/arbitrum-one-nitro-minimal-pebble-hash.prune.yml

@@ -0,0 +1,141 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-one-nitro-minimal-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-one-minimal \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-one-minimal:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.10.1-d7f07be}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=42161
+      - --execution.caching.archive=${ARBITRUM_ONE_MINIMAL_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --init.prune=minimal
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-one-minimal
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_DATA:-arbitrum-one-nitro-minimal-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-one-minimal:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-one-nitro-minimal-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-one-minimal
+      - traefik.http.services.arbitrum-one-nitro-minimal-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-one-minimal`) || Path(`/arbitrum-one-minimal/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.rule=Path(`/arbitrum-one-minimal`) || Path(`/arbitrum-one-minimal/`)}
+      - traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.middlewares=arbitrum-one-nitro-minimal-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-one-nitro-minimal-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-one-nitro-minimal-pebble-hash.yml

@@ -0,0 +1,140 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-one-nitro-minimal-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-one-minimal \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-one-minimal:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.10.1-d7f07be}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=42161
+      - --execution.caching.archive=${ARBITRUM_ONE_MINIMAL_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-one-minimal
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_DATA:-arbitrum-one-nitro-minimal-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-one-minimal:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-one-nitro-minimal-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-one-minimal
+      - traefik.http.services.arbitrum-one-nitro-minimal-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-one-minimal`) || Path(`/arbitrum-one-minimal/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.rule=Path(`/arbitrum-one-minimal`) || Path(`/arbitrum-one-minimal/`)}
+      - traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.middlewares=arbitrum-one-nitro-minimal-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-one-nitro-minimal-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-one-nitro-pruned-pebble-hash.prune.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-one:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.9.5-66e42c4}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.10.1-d7f07be}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/arbitrum-sepolia-nitro-minimal-pebble-hash.prune.yml

@@ -0,0 +1,141 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-sepolia-nitro-minimal-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-sepolia-minimal \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-sepolia-minimal:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.10.1-d7f07be}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=421614
+      - --execution.caching.archive=${ARBITRUM_SEPOLIA_MINIMAL_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --init.prune=minimal
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-sepolia-minimal
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_DATA:-arbitrum-sepolia-nitro-minimal-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-sepolia-minimal:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-sepolia-nitro-minimal-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-sepolia-minimal
+      - traefik.http.services.arbitrum-sepolia-nitro-minimal-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-sepolia-minimal`) || Path(`/arbitrum-sepolia-minimal/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.rule=Path(`/arbitrum-sepolia-minimal`) || Path(`/arbitrum-sepolia-minimal/`)}
+      - traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.middlewares=arbitrum-sepolia-nitro-minimal-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-sepolia-nitro-minimal-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum-sepolia
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-sepolia-nitro-minimal-pebble-hash.yml

@@ -0,0 +1,140 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-sepolia-nitro-minimal-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-sepolia-minimal \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-sepolia-minimal:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.10.1-d7f07be}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=421614
+      - --execution.caching.archive=${ARBITRUM_SEPOLIA_MINIMAL_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-sepolia-minimal
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_DATA:-arbitrum-sepolia-nitro-minimal-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-sepolia-minimal:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-sepolia-nitro-minimal-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-sepolia-minimal
+      - traefik.http.services.arbitrum-sepolia-nitro-minimal-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-sepolia-minimal`) || Path(`/arbitrum-sepolia-minimal/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.rule=Path(`/arbitrum-sepolia-minimal`) || Path(`/arbitrum-sepolia-minimal/`)}
+      - traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.middlewares=arbitrum-sepolia-nitro-minimal-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-sepolia-nitro-minimal-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum-sepolia
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-sepolia-nitro-pruned-pebble-hash.prune.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-sepolia:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.9.5-66e42c4}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.10.1-d7f07be}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arc/arc/arc-testnet-arc-full.yml

@@ -0,0 +1,198 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arc/arc/arc-testnet-arc-full.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arc-testnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arc-testnet-snapshots:
+    image: ${ARC_ARC_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_TESTNET_ARC_VERSION:-0.7.2}
+    user: 0:0
+    entrypoint: [/usr/local/bin/arc-snapshots, download]
+    command:
+      - --chain=arc-testnet
+      - --consensus-path=/data/consensus
+      - --execution-path=/data/execution
+    restart: no
+    networks:
+      - chains
+    volumes:
+      - ${ARC_TESTNET_ARC_FULL_CONSENSUS_DATA:-arc-testnet-arc-full-consensus}:/data/consensus
+      - ${ARC_TESTNET_ARC_FULL_EXECUTION_DATA:-arc-testnet-arc-full-execution}:/data/execution
+    logging: *logging-defaults
+
+  arc-testnet-consensus-init:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-0.7.2}
+    user: 0:0
+    entrypoint: [/usr/local/bin/arc-node-consensus, init]
+    command:
+      - --home=/data/consensus
+    restart: no
+    depends_on:
+      arc-testnet-snapshots:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - ${ARC_TESTNET_ARC_FULL_CONSENSUS_DATA:-arc-testnet-arc-full-consensus}:/data/consensus
+    logging: *logging-defaults
+
+  arc-testnet-sockets-init:
+    image: debian:bookworm-slim
+    entrypoint: [/bin/sh, -c]
+    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    restart: no
+    depends_on:
+      arc-testnet-consensus-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - arc-testnet-arc-full-sockets:/sockets
+    logging: *logging-defaults
+
+  arc-testnet:
+    image: ${ARC_ARC_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_TESTNET_ARC_VERSION:-0.7.2}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: 0:0
+    expose:
+      - 8545
+      - 9001
+    entrypoint: [/usr/local/bin/arc-node-execution, node]
+    command:
+      - --auth-ipc
+      - --auth-ipc.path=/sockets/auth.ipc
+      - --chain=arc-testnet
+      - --datadir=/data/execution
+      - --disable-discovery
+      - --enable-arc-rpc
+      - --full
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,txpool,trace,debug
+      - --http.port=8545
+      - --ipcpath=/sockets/reth.ipc
+      - --log.file.directory=/data/execution/logs
+      - --metrics=0.0.0.0:9001
+      - --rpc.forwarder=https://rpc.quicknode.testnet.arc.network/
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-testnet-sockets-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - ${ARC_TESTNET_ARC_FULL_EXECUTION_DATA:-arc-testnet-arc-full-execution}:/data/execution
+      - /slowdisk:/slowdisk
+      - arc-testnet-arc-full-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=9001
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.arc-testnet-arc-full-stripprefix.stripprefix.prefixes=/arc-testnet
+      - traefik.http.services.arc-testnet-arc-full.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-arc-full.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-arc-full.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-arc-full.rule=Host(`$DOMAIN`) && (Path(`/arc-testnet`) || Path(`/arc-testnet/`))}
+      - ${NO_SSL:+traefik.http.routers.arc-testnet-arc-full.rule=Path(`/arc-testnet`) || Path(`/arc-testnet/`)}
+      - traefik.http.routers.arc-testnet-arc-full.middlewares=arc-testnet-arc-full-stripprefix, ipallowlist
+
+  arc-testnet-node:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-0.7.2}
+    user: 0:0
+    expose:
+      - 31000
+      - 29000
+    entrypoint: [/usr/local/bin/arc-node-consensus, start]
+    command:
+      - --eth-socket=/sockets/reth.ipc
+      - --execution-persistence-backpressure
+      - --execution-persistence-backpressure-threshold=50
+      - --execution-socket=/sockets/auth.ipc
+      - --follow
+      - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
+      - --follow.endpoint=https://rpc.drpc.testnet.arc.network,wss=rpc.drpc.testnet.arc.network
+      - --follow.endpoint=https://rpc.quicknode.testnet.arc.network,wss=rpc.quicknode.testnet.arc.network
+      - --full
+      - --home=/data/consensus
+      - --metrics=0.0.0.0:29000
+      - --rpc.addr=0.0.0.0:31000
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-testnet-consensus-init:
+        condition: service_completed_successfully
+      arc-testnet:
+        condition: service_started
+    networks:
+      - chains
+    volumes:
+      - ${ARC_TESTNET_ARC_FULL_CONSENSUS_DATA:-arc-testnet-arc-full-consensus}:/data/consensus
+      - arc-testnet-arc-full-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=29000
+
+volumes:
+  arc-testnet-arc-full-consensus:
+  arc-testnet-arc-full-execution:
+  arc-testnet-arc-full-sockets:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+    chain: arc-testnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      enabled:
+        - name: txpool_content
+...

avalanche/fuji/prune/C/config.json

@@ -0,0 +1,6 @@
+{
+    "rpc-gas-cap": 2500000000,
+    "eth-rpc-gas-limit": 2500000000,
+    "offline-pruning-enabled": true,
+    "offline-pruning-data-directory": "/root/.avalanchego/offline-pruning"
+}

avalanche/go/avalanche-fuji-go-archive-leveldb.yml

@@ -87,8 +87,8 @@ services:
       - traefik.http.routers.avalanche-fuji-go-archive-leveldb.service=avalanche-fuji-go-archive-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji-archive`) || Path(`/avalanche-fuji-archive/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji-archive`) || Path(`/avalanche-fuji-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.rule=(Path(`/avalanche-fuji-archive`) || Path(`/avalanche-fuji-archive/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.rule=(Path(`/avalanche-fuji-archive`) || Path(`/avalanche-fuji-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.middlewares=avalanche-fuji-go-archive-leveldb-stripprefix, avalanche-fuji-go-archive-leveldb-set-ws-path, ipallowlist
 
 volumes:

avalanche/go/avalanche-fuji-go-pruned-leveldb.prune.yml

@@ -0,0 +1,118 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:avalanche/go/avalanche-fuji-go-pruned-leveldb.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/avalanche-fuji \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  avalanche-fuji:
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 12059:12059
+      - 12059:12059/udp
+    expose:
+      - 9650
+    entrypoint: [/bin/sh, -c, mkdir -p /root/.avalanchego/offline-pruning && exec /avalanchego/build/avalanchego "$@", --]
+    command:
+      - --chain-config-dir=/config/prune
+      - --db-type=leveldb
+      - --http-allowed-hosts=*
+      - --http-host=
+      - --network-id=fuji
+      - --public-ip=${IP}
+      - --staking-port=12059
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${AVALANCHE_FUJI_GO_PRUNED_LEVELDB_DATA:-avalanche-fuji-go-pruned-leveldb}:/root/.avalanchego
+      - ./avalanche/fuji:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
+      - traefik.enable=true
+      - traefik.http.middlewares.avalanche-fuji-go-pruned-leveldb-set-path.replacepath.path=/ext/bc/C/rpc
+      - traefik.http.middlewares.avalanche-fuji-go-pruned-leveldb-stripprefix.stripprefix.prefixes=/avalanche-fuji
+      - traefik.http.services.avalanche-fuji-go-pruned-leveldb.loadbalancer.server.port=9650
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`))}
+      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-leveldb.rule=Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)}
+      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb.middlewares=avalanche-fuji-go-pruned-leveldb-stripprefix, avalanche-fuji-go-pruned-leveldb-set-path, ipallowlist
+      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb.priority=50   # gets any request that is not GET with UPGRADE header
+      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.priority=100   # answers GET requests first
+      - traefik.http.middlewares.avalanche-fuji-go-pruned-leveldb-set-ws-path.replacepath.path=/ext/bc/C/ws
+      - traefik.http.services.avalanche-fuji-go-pruned-leveldb-ws.loadbalancer.server.port=9650
+      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.service=avalanche-fuji-go-pruned-leveldb-ws
+      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb.service=avalanche-fuji-go-pruned-leveldb
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.middlewares=avalanche-fuji-go-pruned-leveldb-stripprefix, avalanche-fuji-go-pruned-leveldb-set-ws-path, ipallowlist
+
+volumes:
+  avalanche-fuji-go-pruned-leveldb:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: avalanche
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...

avalanche/go/avalanche-fuji-go-pruned-leveldb.yml

@@ -87,8 +87,8 @@ services:
       - traefik.http.routers.avalanche-fuji-go-pruned-leveldb.service=avalanche-fuji-go-pruned-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.middlewares=avalanche-fuji-go-pruned-leveldb-stripprefix, avalanche-fuji-go-pruned-leveldb-set-ws-path, ipallowlist
 
 volumes:

avalanche/go/avalanche-fuji-go-pruned-pebbledb.prune.yml

@@ -0,0 +1,118 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/avalanche-fuji \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  avalanche-fuji:
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 10350:10350
+      - 10350:10350/udp
+    expose:
+      - 9650
+    entrypoint: [/bin/sh, -c, mkdir -p /root/.avalanchego/offline-pruning && exec /avalanchego/build/avalanchego "$@", --]
+    command:
+      - --chain-config-dir=/config/prune
+      - --db-type=pebbledb
+      - --http-allowed-hosts=*
+      - --http-host=
+      - --network-id=fuji
+      - --public-ip=${IP}
+      - --staking-port=10350
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${AVALANCHE_FUJI_GO_PRUNED_PEBBLEDB_DATA:-avalanche-fuji-go-pruned-pebbledb}:/root/.avalanchego
+      - ./avalanche/fuji:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
+      - traefik.enable=true
+      - traefik.http.middlewares.avalanche-fuji-go-pruned-pebbledb-set-path.replacepath.path=/ext/bc/C/rpc
+      - traefik.http.middlewares.avalanche-fuji-go-pruned-pebbledb-stripprefix.stripprefix.prefixes=/avalanche-fuji
+      - traefik.http.services.avalanche-fuji-go-pruned-pebbledb.loadbalancer.server.port=9650
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`))}
+      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.rule=Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)}
+      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.middlewares=avalanche-fuji-go-pruned-pebbledb-stripprefix, avalanche-fuji-go-pruned-pebbledb-set-path, ipallowlist
+      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.priority=50   # gets any request that is not GET with UPGRADE header
+      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.priority=100   # answers GET requests first
+      - traefik.http.middlewares.avalanche-fuji-go-pruned-pebbledb-set-ws-path.replacepath.path=/ext/bc/C/ws
+      - traefik.http.services.avalanche-fuji-go-pruned-pebbledb-ws.loadbalancer.server.port=9650
+      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.service=avalanche-fuji-go-pruned-pebbledb-ws
+      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.service=avalanche-fuji-go-pruned-pebbledb
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.middlewares=avalanche-fuji-go-pruned-pebbledb-stripprefix, avalanche-fuji-go-pruned-pebbledb-set-ws-path, ipallowlist
+
+volumes:
+  avalanche-fuji-go-pruned-pebbledb:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: avalanche
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...

avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml

@@ -87,8 +87,8 @@ services:
       - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.service=avalanche-fuji-go-pruned-pebbledb
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.middlewares=avalanche-fuji-go-pruned-pebbledb-stripprefix, avalanche-fuji-go-pruned-pebbledb-set-ws-path, ipallowlist
 
 volumes:

avalanche/go/avalanche-mainnet-go-archive-leveldb.yml

@@ -87,8 +87,8 @@ services:
       - traefik.http.routers.avalanche-mainnet-go-archive-leveldb.service=avalanche-mainnet-go-archive-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet-archive`) || Path(`/avalanche-mainnet-archive/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet-archive`) || Path(`/avalanche-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.rule=(Path(`/avalanche-mainnet-archive`) || Path(`/avalanche-mainnet-archive/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.rule=(Path(`/avalanche-mainnet-archive`) || Path(`/avalanche-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.middlewares=avalanche-mainnet-go-archive-leveldb-stripprefix, avalanche-mainnet-go-archive-leveldb-set-ws-path, ipallowlist
 
 volumes:

avalanche/go/avalanche-mainnet-go-pruned-leveldb.prune.yml

@@ -0,0 +1,118 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:avalanche/go/avalanche-mainnet-go-pruned-leveldb.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/avalanche-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  avalanche-mainnet:
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_MAINNET_GO_VERSION:-v1.14.2}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 12757:12757
+      - 12757:12757/udp
+    expose:
+      - 9650
+    entrypoint: [/bin/sh, -c, mkdir -p /root/.avalanchego/offline-pruning && exec /avalanchego/build/avalanchego "$@", --]
+    command:
+      - --chain-config-dir=/config/prune
+      - --db-type=leveldb
+      - --http-allowed-hosts=*
+      - --http-host=
+      - --network-id=mainnet
+      - --public-ip=${IP}
+      - --staking-port=12757
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${AVALANCHE_MAINNET_GO_PRUNED_LEVELDB_DATA:-avalanche-mainnet-go-pruned-leveldb}:/root/.avalanchego
+      - ./avalanche/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
+      - traefik.enable=true
+      - traefik.http.middlewares.avalanche-mainnet-go-pruned-leveldb-set-path.replacepath.path=/ext/bc/C/rpc
+      - traefik.http.middlewares.avalanche-mainnet-go-pruned-leveldb-stripprefix.stripprefix.prefixes=/avalanche-mainnet
+      - traefik.http.services.avalanche-mainnet-go-pruned-leveldb.loadbalancer.server.port=9650
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-leveldb.rule=Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)}
+      - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb.middlewares=avalanche-mainnet-go-pruned-leveldb-stripprefix, avalanche-mainnet-go-pruned-leveldb-set-path, ipallowlist
+      - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb.priority=50   # gets any request that is not GET with UPGRADE header
+      - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.priority=100   # answers GET requests first
+      - traefik.http.middlewares.avalanche-mainnet-go-pruned-leveldb-set-ws-path.replacepath.path=/ext/bc/C/ws
+      - traefik.http.services.avalanche-mainnet-go-pruned-leveldb-ws.loadbalancer.server.port=9650
+      - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.service=avalanche-mainnet-go-pruned-leveldb-ws
+      - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb.service=avalanche-mainnet-go-pruned-leveldb
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.middlewares=avalanche-mainnet-go-pruned-leveldb-stripprefix, avalanche-mainnet-go-pruned-leveldb-set-ws-path, ipallowlist
+
+volumes:
+  avalanche-mainnet-go-pruned-leveldb:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: avalanche
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...

avalanche/go/avalanche-mainnet-go-pruned-leveldb.yml

@@ -87,8 +87,8 @@ services:
       - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb.service=avalanche-mainnet-go-pruned-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.middlewares=avalanche-mainnet-go-pruned-leveldb-stripprefix, avalanche-mainnet-go-pruned-leveldb-set-ws-path, ipallowlist
 
 volumes:

avalanche/go/avalanche-mainnet-go-pruned-pebbledb.prune.yml

@@ -0,0 +1,118 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:avalanche/go/avalanche-mainnet-go-pruned-pebbledb.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/avalanche-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  avalanche-mainnet:
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_MAINNET_GO_VERSION:-v1.14.2}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 11929:11929
+      - 11929:11929/udp
+    expose:
+      - 9650
+    entrypoint: [/bin/sh, -c, mkdir -p /root/.avalanchego/offline-pruning && exec /avalanchego/build/avalanchego "$@", --]
+    command:
+      - --chain-config-dir=/config/prune
+      - --db-type=pebbledb
+      - --http-allowed-hosts=*
+      - --http-host=
+      - --network-id=mainnet
+      - --public-ip=${IP}
+      - --staking-port=11929
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${AVALANCHE_MAINNET_GO_PRUNED_PEBBLEDB_DATA:-avalanche-mainnet-go-pruned-pebbledb}:/root/.avalanchego
+      - ./avalanche/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
+      - traefik.enable=true
+      - traefik.http.middlewares.avalanche-mainnet-go-pruned-pebbledb-set-path.replacepath.path=/ext/bc/C/rpc
+      - traefik.http.middlewares.avalanche-mainnet-go-pruned-pebbledb-stripprefix.stripprefix.prefixes=/avalanche-mainnet
+      - traefik.http.services.avalanche-mainnet-go-pruned-pebbledb.loadbalancer.server.port=9650
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb.rule=Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)}
+      - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb.middlewares=avalanche-mainnet-go-pruned-pebbledb-stripprefix, avalanche-mainnet-go-pruned-pebbledb-set-path, ipallowlist
+      - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb.priority=50   # gets any request that is not GET with UPGRADE header
+      - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.priority=100   # answers GET requests first
+      - traefik.http.middlewares.avalanche-mainnet-go-pruned-pebbledb-set-ws-path.replacepath.path=/ext/bc/C/ws
+      - traefik.http.services.avalanche-mainnet-go-pruned-pebbledb-ws.loadbalancer.server.port=9650
+      - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.service=avalanche-mainnet-go-pruned-pebbledb-ws
+      - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb.service=avalanche-mainnet-go-pruned-pebbledb
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.middlewares=avalanche-mainnet-go-pruned-pebbledb-stripprefix, avalanche-mainnet-go-pruned-pebbledb-set-ws-path, ipallowlist
+
+volumes:
+  avalanche-mainnet-go-pruned-pebbledb:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: avalanche
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...

avalanche/go/avalanche-mainnet-go-pruned-pebbledb.yml

@@ -87,8 +87,8 @@ services:
       - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb.service=avalanche-mainnet-go-pruned-pebbledb
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.middlewares=avalanche-mainnet-go-pruned-pebbledb-stripprefix, avalanche-mainnet-go-pruned-pebbledb-set-ws-path, ipallowlist
 
 volumes:

avalanche/mainnet/prune/C/config.json

@@ -0,0 +1,23 @@
+{
+    "snowman-api-enabled": false,
+    "coreth-admin-api-enabled": false,
+    "net-api-enabled": true,
+    "rpc-gas-cap": 2500000000,
+    "rpc-tx-fee-cap": 100,
+    "eth-rpc-gas-limit": 2500000000,
+    "eth-api-enabled": true,
+    "personal-api-enabled": false,
+    "tx-pool-api-enabled": false,
+    "debug-api-enabled": false,
+    "web3-api-enabled": true,
+    "local-txs-enabled": false,
+    "pruning-enabled": true,
+    "api-max-duration": 0,
+    "api-max-blocks-per-request": 0,
+    "allow-unfinalized-queries": false,
+    "log-level": "info",
+    "state-sync-enabled": false,
+    "state-sync-skip-resume": true,
+    "offline-pruning-enabled": true,
+    "offline-pruning-data-directory": "/root/.avalanchego/offline-pruning"
+}

aztec/aztec/aztec-testnet-aztec-pruned.yml

@@ -26,13 +26,13 @@ x-logging-defaults: &logging-defaults
 #
 # docker compose up -d
 #
-# curl -X POST https://${IP}.traefik.me/aztec-testnet \
+# curl -X POST https://${IP}.traefik.me/aztec-testnet-pruned \
 #   -H "Content-Type: application/json" \
 #   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
 
 services:
-  aztec-testnet:
+  aztec-testnet-pruned:
-    image: ${AZTEC_AZTEC_IMAGE:-aztecprotocol/aztec}:${AZTEC_TESTNET_AZTEC_VERSION:-3.0.2}
+    image: ${AZTEC_AZTEC_IMAGE:-aztecprotocol/aztec}:${AZTEC_TESTNET_AZTEC_VERSION:-5.0.0-rc.1}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -51,10 +51,10 @@ services:
       - 13009:13009
       - 13009:13009/udp
     expose:
-      - 8080
+      - 8545
     environment:
       AZTEC_ADMIN_PORT: '8880'
-      AZTEC_PORT: '8080'
+      AZTEC_PORT: '8545'
       DATA_DIRECTORY: /var/lib/data
       ETHEREUM_HOSTS: ${ETHEREUM_SEPOLIA_EXECUTION_RPC}
       L1_CONSENSUS_HOST_URLS: ${ETHEREUM_SEPOLIA_BEACON_REST}
@@ -63,9 +63,8 @@ services:
       P2P_PORT: '13009'
     entrypoint: [node, --no-warnings, /usr/src/yarn-project/aztec/dest/bin/index.js, start]
     command:
-      - --archiver
-      - --network=testnet
       - --node
+      - --network=testnet
     restart: unless-stopped
     stop_grace_period: 5m
     networks:
@@ -77,12 +76,12 @@ services:
     labels:
       - prometheus-scrape.enabled=false
       - traefik.enable=true
-      - traefik.http.middlewares.aztec-testnet-aztec-pruned-stripprefix.stripprefix.prefixes=/aztec-testnet
+      - traefik.http.middlewares.aztec-testnet-aztec-pruned-stripprefix.stripprefix.prefixes=/aztec-testnet-pruned
-      - traefik.http.services.aztec-testnet-aztec-pruned.loadbalancer.server.port=8080
+      - traefik.http.services.aztec-testnet-aztec-pruned.loadbalancer.server.port=8545
       - ${NO_SSL:-traefik.http.routers.aztec-testnet-aztec-pruned.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.aztec-testnet-aztec-pruned.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.aztec-testnet-aztec-pruned.rule=Host(`$DOMAIN`) && (Path(`/aztec-testnet`) || Path(`/aztec-testnet/`))}
+      - ${NO_SSL:-traefik.http.routers.aztec-testnet-aztec-pruned.rule=Host(`$DOMAIN`) && (Path(`/aztec-testnet-pruned`) || Path(`/aztec-testnet-pruned/`))}
-      - ${NO_SSL:+traefik.http.routers.aztec-testnet-aztec-pruned.rule=Path(`/aztec-testnet`) || Path(`/aztec-testnet/`)}
+      - ${NO_SSL:+traefik.http.routers.aztec-testnet-aztec-pruned.rule=Path(`/aztec-testnet-pruned`) || Path(`/aztec-testnet-pruned/`)}
       - traefik.http.routers.aztec-testnet-aztec-pruned.middlewares=aztec-testnet-aztec-pruned-stripprefix, ipallowlist
 
 volumes:

backup-node.sh

@@ -36,15 +36,27 @@ generate_volume_metadata() {
     # Check each static file path
     if [[ -f "$static_file_list" ]]; then
         while IFS= read -r path; do
-            # Check if the path exists
+            [[ -z "$path" ]] && continue
-            if [[ -e "$prefix/_data/$path" ]]; then
+            # Match rule (see static-file-path-list.txt): an entry with NO slash is root-level
-                # Get the size
+            # only (so `snapshots` won't catch postgres pg_logical/snapshots); an entry WITH a
-                size=$(du -sL "$prefix/_data/$path" 2>/dev/null | awk '{print $1}')
+            # slash is a path-suffix, so any prefix matches (network-prefixed nitro freezers,
-                # Format size in human-readable format
+            # nested l2geth geth/geth/...). Record the CONCRETE relative path so restore-volumes
-                size_formatted=$(echo "$(( size * 1024 ))" | numfmt --to=iec --suffix=B --format="%.2f")
+            # can recreate the exact static-file -> /slowdisk symlink.
-                # Write to metadata file
+            # Match real dirs AND symlinks: an already-OFFLOADED static dir is a symlink to
-                echo "$size_formatted  $path" >> "$metadata_file"
+            # /slowdisk, which find -type d alone would skip (then it would be dropped from the
+            # manifest and the next restore would not re-offload it).
+            local matches=() m rel
+            if [[ "$path" == */* ]]; then
+                while IFS= read -r m; do matches+=("$m"); done < <(find "$prefix/_data" \( -type d -o -type l \) -path "*/$path" 2>/dev/null)
+            else
+                m="$prefix/_data/$path"; { [ -d "$m" ] || [ -L "$m" ]; } && matches+=("$m")
             fi
+            for m in "${matches[@]}"; do
+                rel="${m#"$prefix/_data/"}"
+                size=$(du -sL "$m" 2>/dev/null | awk '{print $1}')
+                size_formatted=$(echo "$(( ${size:-0} * 1024 ))" | numfmt --to=iec --suffix=B --format="%.2f")
+                echo "$size_formatted  $rel" >> "$metadata_file"
+            done
         done < "$static_file_list"
     fi
 }

berachain/geth/berachain-bepolia-geth-pruned-pebble-path.yml

@@ -112,7 +112,7 @@ services:
       context: ./berachain
       dockerfile: beacon-kit.Dockerfile
       args:
-        BEACONKIT_VERSION: ${BERACHAIN_BEPOLIA_BEACON_KIT_VERSION:-v1.3.4}
+        BEACONKIT_VERSION: ${BERACHAIN_BEPOLIA_BEACON_KIT_VERSION:-v1.4.0-rc3}
         BEACONKIT_IMAGE: ${BERACHAIN_BEPOLIA_BEACON_KIT_IMAGE:-ghcr.io/berachain/beacon-kit}
     ports:
       - 19888:19888

berachain/geth/berachain-mainnet-geth-pruned-pebble-path.yml

@@ -112,7 +112,7 @@ services:
       context: ./berachain
       dockerfile: beacon-kit.Dockerfile
       args:
-        BEACONKIT_VERSION: ${BERACHAIN_MAINNET_BEACON_KIT_VERSION:-v1.3.4}
+        BEACONKIT_VERSION: ${BERACHAIN_MAINNET_BEACON_KIT_VERSION:-v1.4.0-rc3}
         BEACONKIT_IMAGE: ${BERACHAIN_MAINNET_BEACON_KIT_IMAGE:-ghcr.io/berachain/beacon-kit}
     ports:
       - 16562:16562

berachain/reth/berachain-bartio-reth-archive-trace.yml

@@ -151,7 +151,7 @@ services:
       context: ./berachain
       dockerfile: beacon-kit.Dockerfile
       args:
-        BEACONKIT_VERSION: ${BERACHAIN_BARTIO_BEACON_KIT_VERSION:-v1.3.4}
+        BEACONKIT_VERSION: ${BERACHAIN_BARTIO_BEACON_KIT_VERSION:-v1.4.0-rc3}
         BEACONKIT_IMAGE: ${BERACHAIN_BARTIO_BEACON_KIT_IMAGE:-ghcr.io/berachain/beacon-kit}
     ports:
       - 15527:15527

berachain/reth/berachain-bartio-reth-pruned-trace.yml

@@ -152,7 +152,7 @@ services:
       context: ./berachain
       dockerfile: beacon-kit.Dockerfile
       args:
-        BEACONKIT_VERSION: ${BERACHAIN_BARTIO_BEACON_KIT_VERSION:-v1.3.4}
+        BEACONKIT_VERSION: ${BERACHAIN_BARTIO_BEACON_KIT_VERSION:-v1.4.0-rc3}
         BEACONKIT_IMAGE: ${BERACHAIN_BARTIO_BEACON_KIT_IMAGE:-ghcr.io/berachain/beacon-kit}
     ports:
       - 19467:19467

berachain/reth/berachain-bepolia-reth-archive-trace.yml

@@ -152,7 +152,7 @@ services:
       context: ./berachain
       dockerfile: beacon-kit.Dockerfile
       args:
-        BEACONKIT_VERSION: ${BERACHAIN_BEPOLIA_BEACON_KIT_VERSION:-v1.3.4}
+        BEACONKIT_VERSION: ${BERACHAIN_BEPOLIA_BEACON_KIT_VERSION:-v1.4.0-rc3}
         BEACONKIT_IMAGE: ${BERACHAIN_BEPOLIA_BEACON_KIT_IMAGE:-ghcr.io/berachain/beacon-kit}
     ports:
       - 16347:16347

berachain/reth/berachain-bepolia-reth-pruned-trace.yml

@@ -153,7 +153,7 @@ services:
       context: ./berachain
       dockerfile: beacon-kit.Dockerfile
       args:
-        BEACONKIT_VERSION: ${BERACHAIN_BEPOLIA_BEACON_KIT_VERSION:-v1.3.4}
+        BEACONKIT_VERSION: ${BERACHAIN_BEPOLIA_BEACON_KIT_VERSION:-v1.4.0-rc3}
         BEACONKIT_IMAGE: ${BERACHAIN_BEPOLIA_BEACON_KIT_IMAGE:-ghcr.io/berachain/beacon-kit}
     ports:
       - 17274:17274

berachain/reth/berachain-mainnet-reth-archive-trace.yml

@@ -152,7 +152,7 @@ services:
       context: ./berachain
       dockerfile: beacon-kit.Dockerfile
       args:
-        BEACONKIT_VERSION: ${BERACHAIN_MAINNET_BEACON_KIT_VERSION:-v1.3.4}
+        BEACONKIT_VERSION: ${BERACHAIN_MAINNET_BEACON_KIT_VERSION:-v1.4.0-rc3}
         BEACONKIT_IMAGE: ${BERACHAIN_MAINNET_BEACON_KIT_IMAGE:-ghcr.io/berachain/beacon-kit}
     ports:
       - 17881:17881

berachain/reth/berachain-mainnet-reth-pruned-trace.yml

@@ -153,7 +153,7 @@ services:
       context: ./berachain
       dockerfile: beacon-kit.Dockerfile
       args:
-        BEACONKIT_VERSION: ${BERACHAIN_MAINNET_BEACON_KIT_VERSION:-v1.3.4}
+        BEACONKIT_VERSION: ${BERACHAIN_MAINNET_BEACON_KIT_VERSION:-v1.4.0-rc3}
         BEACONKIT_IMAGE: ${BERACHAIN_MAINNET_BEACON_KIT_IMAGE:-ghcr.io/berachain/beacon-kit}
     ports:
       - 15900:15900

bitcoin-cash/bitcoind/bitcoin-cash-mainnet-bitcoind-full.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   bitcoin-cash-mainnet:
-    image: ${BITCOIN_CASH_BITCOIND_IMAGE:-bitcoinabc/bitcoin-abc}:${BITCOIN_CASH_MAINNET_BITCOIND_VERSION:-0.33.4}
+    image: ${BITCOIN_CASH_BITCOIND_IMAGE:-bitcoinabc/bitcoin-abc}:${BITCOIN_CASH_MAINNET_BITCOIND_VERSION:-0.33.6}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

bitcoin-cash/bitcoind/bitcoin-cash-testnet-bitcoind-full.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   bitcoin-cash-testnet:
-    image: ${BITCOIN_CASH_BITCOIND_IMAGE:-bitcoinabc/bitcoin-abc}:${BITCOIN_CASH_TESTNET_BITCOIND_VERSION:-0.33.4}
+    image: ${BITCOIN_CASH_BITCOIND_IMAGE:-bitcoinabc/bitcoin-abc}:${BITCOIN_CASH_TESTNET_BITCOIND_VERSION:-0.33.6}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

bsc/bsc/bsc-mainnet-bsc-minimal-pebble-hash.yml

@@ -135,6 +135,10 @@ x-upstreams:
         - filter
     methods:
       disabled:
+        # minimal bsc lacks the state to serve eth_getProof; the drpc gateway
+        # probes it and marks the whole upstream unavailable on "header not
+        # found" (especially while catching up after a restart).
+        - name: eth_getProof
       enabled:
         - name: txpool_content # TODO: should be disabled for rollup nodes
         # standard geth only

bsc/bsc/bsc-mainnet-bsc-minimal-pebble-path.yml

@@ -137,6 +137,10 @@ x-upstreams:
       disabled:
         # not compatible with path state scheme
         - name: debug_traceBlockByHash
+        # minimal bsc lacks the state to serve eth_getProof; the drpc gateway
+        # probes it and marks the whole upstream unavailable on "header not
+        # found" (especially while catching up after a restart).
+        - name: eth_getProof
       enabled:
         - name: txpool_content # TODO: should be disabled for rollup nodes
         # standard geth only

bsc/erigon3/bsc-chapel-erigon3-minimal-trace.yml

@@ -130,6 +130,10 @@ x-upstreams:
     methods:
       disabled:
         - name: eth_getLogs # this returns result [] on ethereum mainnet when it shouldn't so it's probably buggy on al networks
+        # minimal bsc lacks the state to serve eth_getProof; the drpc gateway
+        # probes it and marks the whole upstream unavailable on "header not
+        # found" (especially while catching up after a restart).
+        - name: eth_getProof
       enabled:
         - name: txpool_content # TODO: should be disabled for rollup nodes
         # standard geth and erigon

bsc/erigon3/bsc-mainnet-erigon3-minimal-trace.yml

@@ -130,6 +130,10 @@ x-upstreams:
     methods:
       disabled:
         - name: eth_getLogs # this returns result [] on ethereum mainnet when it shouldn't so it's probably buggy on al networks
+        # minimal bsc lacks the state to serve eth_getProof; the drpc gateway
+        # probes it and marks the whole upstream unavailable on "header not
+        # found" (especially while catching up after a restart).
+        - name: eth_getProof
       enabled:
         - name: txpool_content # TODO: should be disabled for rollup nodes
         # standard geth and erigon

cadvisor.yml

@@ -18,6 +18,7 @@ services:
       - "prometheus-scrape.enabled=true"
       - "prometheus-scrape.port=8080"
       - "prometheus-scrape.job_name=cadvisor"
+      - "prometheus-scrape.metrics_path=/metrics"
       - "org.label-schema.group=monitoring"
     networks:
       - monitoring

check-health.sh

@@ -10,15 +10,19 @@ fi
 RPC_URL=$1
 shift
 
-# Check for --starknet / --aztec flag
+# Check for --starknet / --aztec / --cosmos flag
 is_starknet=false
 is_aztec=false
+is_cosmos=false
 if [ "$1" == "--starknet" ]; then
     is_starknet=true
     shift
 elif [ "$1" == "--aztec" ]; then
     is_aztec=true
     shift
+elif [ "$1" == "--cosmos" ]; then
+    is_cosmos=true
+    shift
 fi
 
 REF=""
@@ -33,6 +37,28 @@ ref=${REF% }
 
 timeout=3 # seconds
 
+# CometBFT / cosmos (gaiad and the cosmos batch): no EVM RPC. Use the chain's own
+# sync_info from the CometBFT /status method — catching_up=false means caught up to head.
+# Short-circuits here; the EVM/starknet/aztec block-comparison path below is not used.
+if $is_cosmos; then
+    status=$(curl -L --ipv4 -m $timeout -s -X POST -H "Content-Type: application/json" --data '{"jsonrpc":"2.0","id":1,"method":"status"}' "$RPC_URL")
+    if [ $? -ne 0 ] || [ -z "$status" ]; then echo "timeout"; exit 1; fi
+    catching_up=$(echo "$status" | jq -r '.result.sync_info.catching_up // .sync_info.catching_up' 2>/dev/null)
+    node_height=$(echo "$status" | jq -r '.result.sync_info.latest_block_height // .sync_info.latest_block_height' 2>/dev/null)
+    if [ -z "$node_height" ] || [ "$node_height" = "null" ]; then echo "error"; exit 1; fi
+    if [ "$catching_up" = "true" ]; then echo "syncing"; exit 1; fi
+    # catching_up=false => synced. If a reference endpoint is given, sanity-check head gap.
+    if [ -n "$ref" ]; then
+        ref_status=$($BASEPATH/multicurl.sh -L --ipv4 -m $timeout -s -X POST -H "Content-Type: application/json" --data '{"jsonrpc":"2.0","id":1,"method":"status"}' $ref)
+        ref_height=$(echo "$ref_status" | jq -r '.result.sync_info.latest_block_height // .sync_info.latest_block_height' 2>/dev/null)
+        if [ -n "$ref_height" ] && [ "$ref_height" != "null" ] && [ "$ref_height" -gt 0 ] 2>/dev/null; then
+            gap=$(( ref_height - node_height ))
+            if [ "$gap" -gt 100 ]; then echo "behind ($gap)"; exit 1; fi
+        fi
+    fi
+    echo "online"; exit 0
+fi
+
 response_file=$(mktemp)
 
 # Use appropriate RPC method based on chain type
@@ -77,10 +103,52 @@ if [ $? -eq 0 ]; then
 
         rm "$response_file"
 
-        if [ -n "$ref" ]; then            
+        if [ -n "$ref" ]; then
-            response_file2=$(mktemp)
+            MAX_RETRIES=3
+            attempt=1
+            
+            while [ $attempt -le $MAX_RETRIES ]; do
+                # Re-fetch local latest block for retries > 1
+                if [ $attempt -gt 1 ]; then
+                    sleep 3
+                    # Re-query local latest block and update variables
+                    response_file=$(mktemp)
+                    http_status_code=$(curl -L --ipv4 -m $timeout -s -X POST -w "%{http_code}" -o "$response_file" -H "Content-Type: application/json" --data "$rpc_method" $RPC_URL)
+                    if [ $? -eq 0 ] && [[ $http_status_code -eq 200 ]]; then
+                        response=$(cat "$response_file")
+                        if $is_starknet; then
+                            latest_block_timestamp_decimal=$(echo "$response" | jq -r '.result.timestamp')
+                            latest_block_number=$(echo "$response" | jq -r '.result.block_number')
+                            latest_block_hash=$(echo "$response" | jq -r '.result.block_hash')
+                        elif $is_aztec; then
+                            latest_block_number=$(echo "$response" | jq -r '.result.header.globalVariables.blockNumber')
+                            latest_block_timestamp_decimal=$(echo "$response" | jq -r '.result.header.globalVariables.timestamp')
+                            latest_block_hash=$(echo "$response" | jq -r '.result.blockHash')
+                            if [ "$latest_block_number" = "null" ] || [ "$latest_block_timestamp_decimal" = "null" ] || [ -z "$latest_block_timestamp_decimal" ]; then
+                                echo "error"
+                                exit 1
+                            fi
+                        else
+                            latest_block_timestamp=$(echo "$response" | jq -r '.result.timestamp')
+                            latest_block_timestamp_decimal=$((16#${latest_block_timestamp#0x}))
+                            latest_block_number=$(echo "$response" | jq -r '.result.number')
+                            latest_block_hash=$(echo "$response" | jq -r '.result.hash')
+                        fi
+                        current_time=$(date +%s)
+                        time_difference=$((current_time - latest_block_timestamp_decimal))
+                        rm "$response_file"
+                    else
+                        rm "$response_file"
+                        echo "error"
+                        exit 1
+                    fi
+                fi
+                
+                response_file2=$(mktemp)
 
-	    sleep 3 # to give the reference node more time to import the block if it is very current
+                if [ $attempt -eq 1 ]; then
+                    sleep 3 # to give the reference node more time to import the block if it is very current
+                fi
 
             if $is_starknet; then
                 # Starknet uses block_id object with block_number
@@ -163,12 +231,12 @@ if [ $? -eq 0 ]; then
                                 response3=$(cat "$response_file3")
 
                                 if $is_starknet; then
-                                    latest_block_timestamp_decimal3=$(echo "$response3" | jq -r '.result.timestamp')
+                                    ref_num=$(echo "$response3" | jq -r '.result.block_number // empty')
                                 elif $is_aztec; then
-                                    latest_block_timestamp_decimal3=$(echo "$response3" | jq -r '.result.header.globalVariables.timestamp')
+                                    ref_num=$(echo "$response3" | jq -r '.result.header.globalVariables.blockNumber // empty')
                                 else
-                                    latest_block_timestamp3=$(echo "$response3" | jq -r '.result.timestamp')
+                                    ref_num_hex=$(echo "$response3" | jq -r '.result.number // empty')
-                                    latest_block_timestamp_decimal3=$((16#${latest_block_timestamp3#0x}))
+                                    ref_num=$([ -n "$ref_num_hex" ] && printf '%d' "$ref_num_hex" 2>/dev/null)
                                 fi
 
 				# echo "refer: $latest_block_timestamp_decimal3"
@@ -179,25 +247,35 @@ if [ $? -eq 0 ]; then
 					response4=$(cat "$response_file4")
 
 					if $is_starknet; then
-					    latest_block_timestamp_decimal4=$(echo "$response4" | jq -r '.result.timestamp')
+					    local_num=$(echo "$response4" | jq -r '.result.block_number // empty')
 					elif $is_aztec; then
-					    latest_block_timestamp_decimal4=$(echo "$response4" | jq -r '.result.header.globalVariables.timestamp')
+					    local_num=$(echo "$response4" | jq -r '.result.header.globalVariables.blockNumber // empty')
 					else
-					    latest_block_timestamp4=$(echo "$response4" | jq -r '.result.timestamp')
+					    local_num_hex=$(echo "$response4" | jq -r '.result.number // empty')
-					    latest_block_timestamp_decimal4=$((16#${latest_block_timestamp4#0x}))
+					    local_num=$([ -n "$local_num_hex" ] && printf '%d' "$local_num_hex" 2>/dev/null)
 					fi
 
 					#echo "local: $latest_block_timestamp_decimal4"
 					rm "$response_file4"
 				
-					time_difference3=$(echo "scale=6; (${latest_block_timestamp_decimal3} - ${request_time3}) - (${latest_block_timestamp_decimal4} - ${request_time4})" | bc)
+					# Lag in BLOCKS between the reference head and the local head
-
+					# (positive => local behind). Compare against dRPC's own per-chain
-					#echo "diff after network latency: $time_difference3 s"
+					# thresholds (LAGGING_LAG / SYNCING_LAG from chains.yaml via
-
+					# sync-status.sh) so our status matches the dRPC gateway's view.
-					if (( $(echo "$time_difference3 < 2" | bc -l) )); then
+					# dRPC uses the two thresholds inconsistently (sometimes
+					# lagging<syncing, sometimes the reverse), so treat the smaller as
+					# the online boundary and the larger as the syncing/drop boundary.
+					if [ -z "$ref_num" ] || [ -z "$local_num" ]; then
+					    echo "error"
+					    exit 1
+					fi
+					lag=$(( ref_num - local_num ))
+					lo=${LAGGING_LAG:-2}; hi=${SYNCING_LAG:-6}
+					if [ "$lo" -gt "$hi" ]; then tmp=$lo; lo=$hi; hi=$tmp; fi
+					if [ "$lag" -le "$lo" ]; then
 					    echo "online"
 					    exit 0
-					elif (( $(echo "$time_difference3 < 5" | bc -l) )); then
+					elif [ "$lag" -le "$hi" ]; then
 					    echo "lagging"
 					    exit 0
 					else
@@ -212,14 +290,23 @@ if [ $? -eq 0 ]; then
                             fi
                         fi
                     else
-                        echo "forked"
+                        # Hash mismatch - retry if we have attempts left
-                        exit 1
+                        if [ $attempt -lt $MAX_RETRIES ]; then
+                            rm "$response_file2"
+                            attempt=$((attempt + 1))
+                            continue
+                        else
+                            rm "$response_file2"
+                            echo "forked"
+                            exit 1
+                        fi
                     fi
 		else 
 		    echo "unverified ($http_status_code2)"
 		    exit 1
                 fi 
             fi
+            done
             
             echo "unverified ($curl_code)"
             exit 0

cleanup-backups.sh

@@ -1,21 +1,260 @@
 #!/bin/bash
+# Retain the N newest backups per volume key and move excess to trash.
+#
+# Usage:
+#   ./cleanup-backups.sh [--dry-run]
+#
+# Environment:
+#   BACKUP_DIR=/backup               Backup root directory
+#   TRASH_DIR=/backup/trash          Where removed backups are staged
+#   KEEP_COUNT=3                     Backups to keep per volume key
+#   UPLOADING_MAX_AGE_HOURS=72       Trash uploading-* only when older than this
+#   EXCLUDE_DIRS=graveyard:quarantained:trash  Colon-separated subdirs to skip
 
-# Directory containing the backup files
+set -euo pipefail
-backup_dir="/backup"
 
-# Get a list of all backup files
+BASEPATH="$(cd "$(dirname "$0")" && pwd)"
-backup_files=$(find "$backup_dir" -type f -name 'rpc_*-*.tar.zst')
+BACKUP_DIR="${BACKUP_DIR:-/backup}"
+TRASH_DIR="${TRASH_DIR:-$BACKUP_DIR/trash}"
+KEEP_COUNT="${KEEP_COUNT:-3}"
+UPLOADING_MAX_AGE_HOURS="${UPLOADING_MAX_AGE_HOURS:-72}"
+EXCLUDE_DIRS="${EXCLUDE_DIRS:-graveyard:quarantained:trash}"
 
-# Iterate through each backup file
+DRY_RUN=false
-for file in $backup_files; do
+if [[ "${1:-}" == "--dry-run" ]]; then
-    # Extract volume name from the file name
+    DRY_RUN=true
-    volume_name=$(basename "$file" | cut -d '-' -f 1-3)
+elif [[ -n "${1:-}" ]]; then
+    echo "Usage: $0 [--dry-run]" >&2
+    exit 1
+fi
 
-    # Get the latest backup file for this volume name
+BACKUP_PATTERN='^(rpc_.+)-([0-9]{4}-[0-9]{2}-[0-9]{2}-[0-9]{2}-[0-9]{2}-[0-9]{2})-([0-9]+)G\.tar\.zst$'
-    latest_backup=$(find "$backup_dir" -type f -name "$volume_name-*" -printf "%T@ %p\n" | sort -n | tail -1 | cut -d ' ' -f 2)
 
-    # Keep only the latest backup file for this volume name
+log() {
-    if [[ "$file" != "$latest_backup" ]]; then
+    echo "[$(date '+%Y-%m-%d %H:%M:%S')] $*" >&2
-         rm "$file"
+}
+
+bytes_trashed=0
+add_trashed_bytes() {
+    local file=$1
+    if [[ -f "$file" ]]; then
+        local size
+        size=$(stat -c%s "$file" 2>/dev/null || echo 0)
+        bytes_trashed=$((bytes_trashed + size))
     fi
-done
+}
+
+trash_file() {
+    local file=$1
+    local reason=$2
+
+    if [[ ! -f "$file" ]]; then
+        return 0
+    fi
+
+    local dest="$TRASH_DIR/$(basename "$file")"
+    if [[ -e "$dest" ]]; then
+        log "Error: trash destination already exists, skipping: $dest"
+        return 1
+    fi
+
+    if $DRY_RUN; then
+        log "DRY-RUN would trash ($reason): $file -> $dest"
+        return 0
+    fi
+
+    mv -- "$file" "$dest"
+    log "Trashed ($reason): $file -> $dest"
+}
+
+is_excluded_path() {
+    local path=$1
+    local rel="${path#"$BACKUP_DIR"/}"
+
+    if [[ "$rel" == broken_* ]] || [[ "$rel" == deprecated-* ]]; then
+        return 0
+    fi
+
+    local dir
+    IFS=':' read -ra excluded_dirs <<< "$EXCLUDE_DIRS"
+    for dir in "${excluded_dirs[@]}"; do
+        if [[ -n "$dir" && ( "$rel" == "$dir" || "$rel" == "$dir"/* ) ]]; then
+            return 0
+        fi
+    done
+
+    return 1
+}
+
+parse_volume_key() {
+    local basename=$1
+    if [[ "$basename" =~ $BACKUP_PATTERN ]]; then
+        echo "${BASH_REMATCH[1]}"
+        return 0
+    fi
+    return 1
+}
+
+metadata_for_archive() {
+    local archive=$1
+    echo "${archive%.tar.zst}.txt"
+}
+
+file_has_open_handles() {
+    local file=$1
+
+    if command -v lsof >/dev/null 2>&1; then
+        if lsof -- "$file" >/dev/null 2>&1; then
+            return 0
+        fi
+    fi
+
+    if command -v fuser >/dev/null 2>&1; then
+        if fuser -- "$file" >/dev/null 2>&1; then
+            return 0
+        fi
+    fi
+
+    return 1
+}
+
+cleanup_stale_uploads() {
+    local upload_file
+    local age_seconds=$((UPLOADING_MAX_AGE_HOURS * 3600))
+    local now
+    now=$(date +%s)
+
+    while IFS= read -r -d '' upload_file; do
+        if is_excluded_path "$upload_file"; then
+            continue
+        fi
+
+        local mtime age
+        mtime=$(stat -c %Y "$upload_file")
+        age=$((now - mtime))
+
+        if (( age < age_seconds )); then
+            log "Keeping in-progress upload ($(($age / 3600))h old): $upload_file"
+            continue
+        fi
+
+        if file_has_open_handles "$upload_file"; then
+            log "Keeping upload with open handles ($(($age / 3600))h old): $upload_file"
+            continue
+        fi
+
+        add_trashed_bytes "$upload_file"
+        trash_file "$upload_file" "stale upload older than ${UPLOADING_MAX_AGE_HOURS}h"
+    done < <(find "$BACKUP_DIR" -maxdepth 1 -type f -name 'uploading-*' -print0 2>/dev/null)
+}
+
+cleanup_volume_backups() {
+    declare -A volume_files=()
+    local file basename volume_key
+
+    while IFS= read -r -d '' file; do
+        if is_excluded_path "$file"; then
+            continue
+        fi
+
+        basename=$(basename "$file")
+        if ! volume_key=$(parse_volume_key "$basename"); then
+            log "Skipping unrecognized backup filename: $file"
+            continue
+        fi
+
+        volume_files["$volume_key"]+="$file"$'\n'
+    done < <(find "$BACKUP_DIR" -maxdepth 1 -type f -name 'rpc_*-*.tar.zst' -print0 2>/dev/null)
+
+    local volume trashed=0 kept=0
+    for volume in "${!volume_files[@]}"; do
+        mapfile -t files < <(printf '%s' "${volume_files[$volume]}" | sed '/^$/d' | sort)
+
+        local total=${#files[@]}
+        if (( total <= KEEP_COUNT )); then
+            kept=$((kept + total))
+            continue
+        fi
+
+        local delete_count=$((total - KEEP_COUNT))
+        local i
+        for ((i = 0; i < delete_count; i++)); do
+            local archive="${files[$i]}"
+            local metadata
+            metadata=$(metadata_for_archive "$archive")
+
+            add_trashed_bytes "$archive"
+            trash_file "$archive" "keeping ${KEEP_COUNT}/${total} for $volume"
+            trashed=$((trashed + 1))
+
+            if [[ -f "$metadata" ]]; then
+                add_trashed_bytes "$metadata"
+                trash_file "$metadata" "orphaned metadata for $volume"
+            fi
+        done
+
+        kept=$((kept + KEEP_COUNT))
+    done
+
+    echo "$trashed $kept"
+}
+
+cleanup_orphan_metadata() {
+    local metadata archive basename
+    local orphans=0
+
+    while IFS= read -r -d '' metadata; do
+        if is_excluded_path "$metadata"; then
+            continue
+        fi
+
+        basename=$(basename "$metadata")
+        if [[ ! "$basename" =~ ^rpc_.+\.txt$ ]]; then
+            continue
+        fi
+
+        archive="${metadata%.txt}.tar.zst"
+        if [[ -f "$archive" ]]; then
+            continue
+        fi
+
+        if [[ -f "$TRASH_DIR/$(basename "$archive")" ]]; then
+            add_trashed_bytes "$metadata"
+            trash_file "$metadata" "metadata for archived-in-trash backup"
+            orphans=$((orphans + 1))
+            continue
+        fi
+
+        add_trashed_bytes "$metadata"
+        trash_file "$metadata" "orphaned metadata without archive"
+        orphans=$((orphans + 1))
+    done < <(find "$BACKUP_DIR" -maxdepth 1 -type f -name 'rpc_*.txt' -print0 2>/dev/null)
+
+    echo "$orphans"
+}
+
+main() {
+    if [[ ! -d "$BACKUP_DIR" ]]; then
+        log "Error: backup directory does not exist: $BACKUP_DIR"
+        exit 1
+    fi
+
+    if ! $DRY_RUN; then
+        mkdir -p "$TRASH_DIR"
+    fi
+
+    log "Starting backup cleanup in $BACKUP_DIR (trash_dir=$TRASH_DIR, keep_count=$KEEP_COUNT, uploading_max_age=${UPLOADING_MAX_AGE_HOURS}h, dry_run=$DRY_RUN)"
+
+    cleanup_stale_uploads
+
+    local trashed kept orphan_metadata
+    read -r trashed kept < <(cleanup_volume_backups)
+    read -r orphan_metadata < <(cleanup_orphan_metadata)
+
+    local trashed_human
+    trashed_human=$(numfmt --to=iec-i --suffix=B "$bytes_trashed" 2>/dev/null || echo "${bytes_trashed}B")
+
+    log "Cleanup complete: trashed=$trashed kept=$kept orphan_metadata=$orphan_metadata staged≈$trashed_human"
+}
+
+main "$@"

cleanup-volumes.sh

@@ -1,3 +1,8 @@
+#!/bin/bash
+# List (default) or, with --remove-from-disk, delete the docker volumes that are NOT
+# referenced by the current COMPOSE_FILE. Removal also frees the static-file data that was
+# offloaded to /slowdisk behind the volume's symlinks (delete_slowdisk_targets_for_key),
+# so nothing leaks on /slowdisk.
 BASEPATH="$(dirname "$0")"
 source $BASEPATH/.env
 source $BASEPATH/volume-utils.sh
@@ -9,7 +14,7 @@ used_volumes=()
 for part in "${parts[@]}"; do
   volumes=$(get_volume_keys "$BASEPATH/$part")
 
-  # Convert volumes to an array
+  # Prefix each compose volume key with rpc_ to match docker's volume names.
   prefix="rpc_"
   IFS=$'\n' read -r -d '' -a volumes_array <<< "$(printf "%s\n" "${volumes[@]}" | sed "/^$/! s/^/$prefix/")"
 
@@ -18,21 +23,29 @@ done
 
 on_disk=($(docker volume ls --format '{{.Name}}' | grep '^rpc_'))
 
-unused_volumes=()
+# A volume counts as "used" only on an EXACT name match. The previous substring test
+# ([[ "${used_volumes[@]}" =~ "$element" ]]) could mis-classify a volume whose name is a
+# substring of another (e.g. ...-pruned vs ...-pruned-trace) and wrongly purge a live one.
+is_used() {
+  local v=$1 u
+  for u in "${used_volumes[@]}"; do
+    [[ "$u" == "$v" ]] && return 0
+  done
+  return 1
+}
 
+unused_volumes=()
 for element in "${on_disk[@]}"; do
-    # Check if the element exists in array2
+  is_used "$element" || unused_volumes+=("$element")
-    if [[ ! "${used_volumes[@]}" =~ "$element" ]]; then
-        # If not, add it to the difference array
-        unused_volumes+=("$element")
-    fi
 done
 
 if [ "$1" = "--remove-from-disk" ]; then
-    # Iterate over volumes in the difference array and remove them from disk
+  # Remove each unused volume AND the /slowdisk static data behind its symlinks.
-    for volume in "${unused_volumes[@]}"; do
+  for volume in "${unused_volumes[@]}"; do
-        docker volume rm "$volume"
+    echo "removing unused volume: $volume"
-    done
+    delete_slowdisk_targets_for_key "${volume#rpc_}"
+    docker volume rm "$volume"
+  done
 else
   printf '%s\n' "${unused_volumes[@]}"
 fi

clone-backup.sh

@@ -2,6 +2,23 @@
 
 # Script to clone node volumes from backup location to a remote server
 # Uses the same transfer method as clone-node.sh but streams zstd archives directly from backup location
+#
+# Usage: ./clone-backup.sh <config> <dest_host> [--no-slowdisk]
+#   --no-slowdisk : do NOT offload static files to /slowdisk (no symlinks);
+#                   extract everything onto the local disk instead. Required to
+#                   proceed when /slowdisk is too small for the static files.
+
+# Pull the --no-slowdisk flag out of the args so the positional <config>/<dest>
+# parsing below is unaffected regardless of where the flag is placed.
+NO_SLOWDISK=false
+_args=()
+for _a in "$@"; do
+    case "$_a" in
+        --no-slowdisk) NO_SLOWDISK=true ;;
+        *) _args+=("$_a") ;;
+    esac
+done
+set -- "${_args[@]}"
 
 if [[ -n $2 ]]; then
     DEST_HOST="$2.stakesquid.eu"
@@ -108,7 +125,7 @@ release_port() {
 
 # Check if SLOWDISK mode is enabled on target
 check_slowdisk_enabled() {
-    $SSH_CMD "$DEST_HOST" "grep -q '^SLOWDISK=true' /root/rpc/.env 2>/dev/null"
+    $SSH_CMD "$DEST_HOST" "grep -qi '^SLOWDISK=true' /root/rpc/.env 2>/dev/null"
     return $?
 }
 
@@ -159,6 +176,40 @@ parse_metadata() {
     printf '%s\n' "${static_paths[@]}"
 }
 
+# Decide whether to offload this volume's static files to /slowdisk.
+#   return 0 -> use /slowdisk (caller should create symlinks + extract)
+#   return 1 -> skip /slowdisk (extract static files onto local disk)
+# Aborts the whole script if /slowdisk is too small and --no-slowdisk was not
+# given, to avoid overfilling /slowdisk with a partially-extracted snapshot.
+decide_slowdisk() {
+    local key=$1
+    local static_size_kb=$2
+
+    # Explicit override: never offload, never create symlinks.
+    if [[ "$NO_SLOWDISK" == "true" ]]; then
+        echo "  --no-slowdisk: skipping /slowdisk offload for '$key' (static files -> local disk)"
+        return 1
+    fi
+
+    # How much room is actually on /slowdisk right now?
+    local slowdisk_available
+    slowdisk_available=$($SSH_CMD "$DEST_HOST" "df -BK /slowdisk 2>/dev/null | tail -1 | awk '{print \$4}' | sed 's/K//'")
+
+    if [[ -z "$slowdisk_available" ]] || [[ "$slowdisk_available" -lt "$static_size_kb" ]]; then
+        {
+            echo ""
+            echo "WARNING: /slowdisk on $DEST_HOST is too small for the static files of '$key'."
+            echo "         available: $(( ${slowdisk_available:-0} / 1024 ))MB, needed: $(( static_size_kb / 1024 ))MB"
+            echo "         Aborting to avoid overfilling /slowdisk with a partial snapshot."
+            echo "         Re-run with --no-slowdisk to extract static files onto the local disk"
+            echo "         instead (no /slowdisk offload, no symlinks created)."
+        } >&2
+        exit 1
+    fi
+
+    return 0
+}
+
 # Setup slowdisk directory structure with symlinks
 setup_slowdisk_structure() {
     local key=$1
@@ -255,7 +306,7 @@ transfer_backup() {
     local backup_basename=$(basename "$backup_file" .tar.zst)
     local metadata_file="$backup_dir/${backup_basename}.txt"
     local use_slowdisk=false
-    local tar_extract_opts="-xf - -C /"
+    local tar_extract_opts="-xf - -C / --keep-directory-symlink"
     
     if [[ -f "$metadata_file" ]] && check_slowdisk_enabled; then
         echo "Metadata file found and SLOWDISK mode enabled"
@@ -267,16 +318,22 @@ transfer_backup() {
         local static_paths=($(echo "$metadata_output" | tail -n +2))
         
         if [[ ${#static_paths[@]} -gt 0 ]] && [[ -n "$static_size_kb" ]]; then
-            # Setup slowdisk structure on remote
+            # Check /slowdisk capacity (aborts if too small without --no-slowdisk).
-            if setup_slowdisk_structure "$key" "$static_size_kb" "${static_paths[@]}"; then
+            if decide_slowdisk "$key" "$static_size_kb"; then
-                use_slowdisk=true
+                # Setup slowdisk structure on remote
-                # Use --skip-old-files to avoid overwriting existing symlinks/directories
+                if setup_slowdisk_structure "$key" "$static_size_kb" "${static_paths[@]}"; then
-                # But we still want to extract files into symlinked directories
+                    use_slowdisk=true
-                tar_extract_opts="-xf - -C / --skip-old-files"
+                    # Use --skip-old-files to avoid overwriting existing symlinks/directories
-                echo "SLOWDISK structure ready, will extract respecting symlinks"
+                    # and --keep-directory-symlink so tar extracts THROUGH the pre-created dir symlinks
-            else
+                    # instead of trying to mkdir over them (which fails with 'Cannot mkdir: File exists')
-                echo "Warning: Failed to setup SLOWDISK structure, falling back to normal extraction"
+                    tar_extract_opts="-xf - -C / --skip-old-files --keep-directory-symlink"
+                    echo "SLOWDISK structure ready, will extract respecting symlinks"
+                else
+                    echo "Warning: Failed to setup SLOWDISK structure, falling back to normal extraction"
+                fi
             fi
+            # decide_slowdisk returned 1 (--no-slowdisk): leave tar_extract_opts at
+            # the default so static files are extracted onto the local disk.
         else
             echo "Warning: Could not parse metadata file, falling back to normal extraction"
         fi
@@ -438,7 +495,7 @@ transfer_backup_ssh() {
     # Check for metadata file and SLOWDISK mode (same logic as transfer_backup)
     local backup_basename=$(basename "$backup_file" .tar.zst)
     local metadata_file="$backup_dir/${backup_basename}.txt"
-    local tar_extract_opts="-xf - -C /"
+    local tar_extract_opts="-xf - -C / --keep-directory-symlink"
     
     if [[ -f "$metadata_file" ]] && check_slowdisk_enabled; then
         echo "Metadata file found and SLOWDISK mode enabled"
@@ -452,7 +509,9 @@ transfer_backup_ssh() {
         if [[ ${#static_paths[@]} -gt 0 ]] && [[ -n "$static_size_kb" ]]; then
             # Setup slowdisk structure on remote
             if setup_slowdisk_structure "$key" "$static_size_kb" "${static_paths[@]}"; then
-                tar_extract_opts="-xf - -C / --skip-old-files"
+                # and --keep-directory-symlink so tar extracts THROUGH the pre-created dir symlinks
+                # instead of trying to mkdir over them (which fails with 'Cannot mkdir: File exists')
+                tar_extract_opts="-xf - -C / --skip-old-files --keep-directory-symlink"
                 echo "SLOWDISK structure ready, will extract respecting symlinks"
             else
                 echo "Warning: Failed to setup SLOWDISK structure, falling back to normal extraction"
@@ -482,6 +541,15 @@ main() {
     # Set up cleanup trap
     trap cleanup_all_ports EXIT INT TERM
     
+    # RETH GUARD: reth refuses to start when its static_files directory is a symlink.
+    # Match restore-volumes.sh: skip the whole /slowdisk static-file symlink offload
+    # for reth nodes and extract everything onto the primary disk.
+    if [[ "$1" == *reth* ]]; then
+        echo "WARNING: $1 contains 'reth' — static-file symlink offload disabled (reth broke whole-dir symlinks)"
+        echo "  All volumes will be extracted onto the primary disk (equivalent to --no-slowdisk)"
+        NO_SLOWDISK=true
+    fi
+    
     setup_ssh_multiplex
     
     # Check if backup directory exists

clone-node.sh

@@ -5,6 +5,21 @@
 BASEPATH="$(dirname "$0")"
 source "$BASEPATH/volume-utils.sh"
 
+# Usage: ./clone-node.sh <node_path> <dest_host> [--no-slowdisk]
+#   --no-slowdisk : do NOT offload static files to /slowdisk on the target (no
+#                   symlinks); extract everything to the local disk. Required to
+#                   proceed when the target's /slowdisk is too small. Strip it
+#                   out before the positional <node>/<dest> parsing below.
+NO_SLOWDISK=false
+_args=()
+for _a in "$@"; do
+    case "$_a" in
+        --no-slowdisk) NO_SLOWDISK=true ;;
+        *) _args+=("$_a") ;;
+    esac
+done
+set -- "${_args[@]}"
+
 if [[ -n $2 ]]; then
     DEST_HOST="$2.stakesquid.eu"
     echo "Setting up optimized transfer to $DEST_HOST"
@@ -104,7 +119,7 @@ release_port() {
 
 # Check if SLOWDISK mode is enabled on target
 check_slowdisk_enabled() {
-    $SSH_CMD "$DEST_HOST" "grep -q '^SLOWDISK=true' /root/rpc/.env 2>/dev/null"
+    $SSH_CMD "$DEST_HOST" "grep -qi '^SLOWDISK=true' /root/rpc/.env 2>/dev/null"
     return $?
 }
 
@@ -141,6 +156,36 @@ detect_static_files() {
     printf '%s\n' "${static_paths[@]}"
 }
 
+# Decide whether to offload this volume's static files to the target's /slowdisk.
+#   return 0 -> use /slowdisk (caller sets up symlinks + extracts through them)
+#   return 1 -> skip /slowdisk (extract static files onto local disk)
+# Aborts the whole clone if /slowdisk is too small and --no-slowdisk was not
+# given, to avoid overfilling /slowdisk with a partially-extracted volume.
+decide_slowdisk() {
+    local key=$1
+    local static_size_kb=$2
+
+    if [[ "$NO_SLOWDISK" == "true" ]]; then
+        echo "  --no-slowdisk: skipping /slowdisk offload for '$key' (static files -> local disk)"
+        return 1
+    fi
+
+    local slowdisk_available
+    slowdisk_available=$($SSH_CMD "$DEST_HOST" "df -BK /slowdisk 2>/dev/null | tail -1 | awk '{print \$4}' | sed 's/K//'")
+    if [[ -z "$slowdisk_available" ]] || [[ "$slowdisk_available" -lt "$static_size_kb" ]]; then
+        {
+            echo ""
+            echo "WARNING: /slowdisk on $DEST_HOST is too small for the static files of '$key'."
+            echo "         available: $(( ${slowdisk_available:-0} / 1024 ))MB, needed: $(( static_size_kb / 1024 ))MB"
+            echo "         Aborting to avoid overfilling /slowdisk with a partial volume."
+            echo "         Re-run with --no-slowdisk to clone without /slowdisk offload (static files on local disk)."
+        } >&2
+        exit 1
+    fi
+
+    return 0
+}
+
 # Setup slowdisk directory structure with symlinks
 setup_slowdisk_structure() {
     local key=$1
@@ -231,7 +276,7 @@ transfer_volume() {
     fi
     
     local folder_size=$(du -sb "$source_folder" 2>/dev/null | awk '{print $1}')
-    local tar_extract_opts="-xf - -C /"
+    local tar_extract_opts="-xf - -C / --keep-directory-symlink"
     local use_slowdisk=false
     
     # Check for SLOWDISK mode and detect static files
@@ -245,17 +290,23 @@ transfer_volume() {
             
             if [[ ${#static_paths[@]} -gt 0 ]] && [[ -n "$static_size_kb" ]]; then
                 echo "Found ${#static_paths[@]} static paths (total: $((static_size_kb / 1024))MB)"
-                echo "Setting up SLOWDISK structure on target..."
+                # Check /slowdisk capacity (aborts if too small without --no-slowdisk).
-                
+                if decide_slowdisk "$key" "$static_size_kb"; then
-                # Setup slowdisk structure on remote
+                    echo "Setting up SLOWDISK structure on target..."
-                if setup_slowdisk_structure "$key" "$static_size_kb" "${static_paths[@]}"; then
+                    # Setup slowdisk structure on remote
-                    use_slowdisk=true
+                    if setup_slowdisk_structure "$key" "$static_size_kb" "${static_paths[@]}"; then
-                    # Use --skip-old-files to avoid overwriting existing symlinks/directories
+                        use_slowdisk=true
-                    tar_extract_opts="-xf - -C / --skip-old-files"
+                        # Use --skip-old-files to avoid overwriting existing symlinks/directories
-                    echo "SLOWDISK structure ready, will extract respecting symlinks"
+                        # and --keep-directory-symlink so tar extracts THROUGH the pre-created dir symlinks
-                else
+                        # instead of trying to mkdir over them (which fails with 'Cannot mkdir: File exists')
-                    echo "Warning: Failed to setup SLOWDISK structure, falling back to normal extraction"
+                        tar_extract_opts="-xf - -C / --skip-old-files --keep-directory-symlink"
+                        echo "SLOWDISK structure ready, will extract respecting symlinks"
+                    else
+                        echo "Warning: Failed to setup SLOWDISK structure, falling back to normal extraction"
+                    fi
                 fi
+                # decide_slowdisk returned 1 (--no-slowdisk): leave tar_extract_opts
+                # at the default so static files extract onto the local disk.
             else
                 echo "No static files detected, using normal extraction"
             fi
@@ -408,7 +459,7 @@ transfer_volume_ssh() {
     fi
     
     local folder_size=$(du -sb "$source_folder" 2>/dev/null | awk '{print $1}')
-    local tar_extract_opts="-xf - -C /"
+    local tar_extract_opts="-xf - -C / --keep-directory-symlink"
     
     # Check for SLOWDISK mode and detect static files (same logic as transfer_volume)
     if check_slowdisk_enabled; then
@@ -421,15 +472,21 @@ transfer_volume_ssh() {
             
             if [[ ${#static_paths[@]} -gt 0 ]] && [[ -n "$static_size_kb" ]]; then
                 echo "Found ${#static_paths[@]} static paths (total: $((static_size_kb / 1024))MB)"
-                echo "Setting up SLOWDISK structure on target..."
+                # Check /slowdisk capacity (aborts if too small without --no-slowdisk).
-                
+                if decide_slowdisk "$key" "$static_size_kb"; then
-                # Setup slowdisk structure on remote
+                    echo "Setting up SLOWDISK structure on target..."
-                if setup_slowdisk_structure "$key" "$static_size_kb" "${static_paths[@]}"; then
+                    # Setup slowdisk structure on remote
-                    tar_extract_opts="-xf - -C / --skip-old-files"
+                    if setup_slowdisk_structure "$key" "$static_size_kb" "${static_paths[@]}"; then
-                    echo "SLOWDISK structure ready, will extract respecting symlinks"
+                        # and --keep-directory-symlink so tar extracts THROUGH the pre-created dir symlinks
-                else
+                        # instead of trying to mkdir over them (which fails with 'Cannot mkdir: File exists')
-                    echo "Warning: Failed to setup SLOWDISK structure, falling back to normal extraction"
+                        tar_extract_opts="-xf - -C / --skip-old-files --keep-directory-symlink"
+                        echo "SLOWDISK structure ready, will extract respecting symlinks"
+                    else
+                        echo "Warning: Failed to setup SLOWDISK structure, falling back to normal extraction"
+                    fi
                 fi
+                # decide_slowdisk returned 1 (--no-slowdisk): leave tar_extract_opts
+                # at the default so static files extract onto the local disk.
             else
                 echo "No static files detected, using normal extraction"
             fi
@@ -460,6 +517,15 @@ main() {
     # Set up cleanup trap
     trap cleanup_all_ports EXIT INT TERM
     
+    # RETH GUARD: reth refuses to start when its static_files directory is a symlink.
+    # Match restore-volumes.sh: skip the whole /slowdisk static-file symlink offload
+    # for reth nodes and extract everything onto the primary disk.
+    if [[ "$1" == *reth* ]]; then
+        echo "WARNING: $1 contains 'reth' — static-file symlink offload disabled (reth broke whole-dir symlinks)"
+        echo "  All volumes will be extracted onto the primary disk (equivalent to --no-slowdisk)"
+        NO_SLOWDISK=true
+    fi
+    
     setup_ssh_multiplex
     
     # the following sysctls are critical for high-latency networks

compose_registry.json

@@ -196,6 +196,40 @@
       "alephzero-sepolia-nitro-pruned-pebble-path"
     ]
   },
+  {
+    "chain": "mainnet",
+    "client": "nitro",
+    "compose_file": "arb/nitro/apechain-mainnet-nitro-archive-pebble-hash",
+    "features": [
+      "hash",
+      "pebble"
+    ],
+    "network": "apechain",
+    "node": null,
+    "relay": null,
+    "stack": "arb",
+    "type": "archive",
+    "volumes": [
+      "apechain-mainnet-nitro-archive-pebble-hash"
+    ]
+  },
+  {
+    "chain": "mainnet",
+    "client": "nitro",
+    "compose_file": "arb/nitro/apechain-mainnet-nitro-pruned-pebble-path",
+    "features": [
+      "path",
+      "pebble"
+    ],
+    "network": "apechain",
+    "node": null,
+    "relay": null,
+    "stack": "arb",
+    "type": "pruned",
+    "volumes": [
+      "apechain-mainnet-nitro-pruned-pebble-path"
+    ]
+  },
   {
     "chain": "nova",
     "client": "nitro",
@@ -230,6 +264,23 @@
       "arbitrum-nova-nitro-archive-pebble-path"
     ]
   },
+  {
+    "chain": "nova",
+    "client": "nitro",
+    "compose_file": "arb/nitro/arbitrum-nova-nitro-minimal-pebble-hash",
+    "features": [
+      "hash",
+      "pebble"
+    ],
+    "network": "arbitrum",
+    "node": null,
+    "relay": null,
+    "stack": "arb",
+    "type": "minimal",
+    "volumes": [
+      "arbitrum-nova-nitro-minimal-pebble-hash"
+    ]
+  },
   {
     "chain": "nova",
     "client": "nitro",
@@ -317,6 +368,23 @@
       "arbitrum-one-nitro-archive-pebble-path"
     ]
   },
+  {
+    "chain": "one",
+    "client": "nitro",
+    "compose_file": "arb/nitro/arbitrum-one-nitro-minimal-pebble-hash",
+    "features": [
+      "hash",
+      "pebble"
+    ],
+    "network": "arbitrum",
+    "node": null,
+    "relay": null,
+    "stack": "arb",
+    "type": "minimal",
+    "volumes": [
+      "arbitrum-one-nitro-minimal-pebble-hash"
+    ]
+  },
   {
     "chain": "one",
     "client": "nitro",
@@ -369,6 +437,23 @@
       "arbitrum-sepolia-nitro-archive-pebble-hash"
     ]
   },
+  {
+    "chain": "sepolia",
+    "client": "nitro",
+    "compose_file": "arb/nitro/arbitrum-sepolia-nitro-minimal-pebble-hash",
+    "features": [
+      "hash",
+      "pebble"
+    ],
+    "network": "arbitrum",
+    "node": null,
+    "relay": null,
+    "stack": "arb",
+    "type": "minimal",
+    "volumes": [
+      "arbitrum-sepolia-nitro-minimal-pebble-hash"
+    ]
+  },
   {
     "chain": "sepolia",
     "client": "nitro",
@@ -791,6 +876,22 @@
       "arbitrum-sepolia-nitro-erigon-pruned-trace"
     ]
   },
+  {
+    "chain": "testnet",
+    "client": "arc",
+    "compose_file": "arc/arc/arc-testnet-arc-full",
+    "features": [],
+    "network": "arc",
+    "node": "malachite",
+    "relay": null,
+    "stack": null,
+    "type": "full",
+    "volumes": [
+      "arc-testnet-arc-full-consensus",
+      "arc-testnet-arc-full-execution",
+      "arc-testnet-arc-full-sockets"
+    ]
+  },
   {
     "chain": "fuji",
     "client": "go",
@@ -1640,6 +1741,20 @@
       "core-pigeon-core-pruned-pebble-path"
     ]
   },
+  {
+    "chain": "mainnet",
+    "client": "gaiad",
+    "compose_file": "cosmos/gaiad/cosmos-mainnet-gaiad-pruned",
+    "features": [],
+    "network": "cosmos",
+    "node": null,
+    "relay": null,
+    "stack": null,
+    "type": "pruned",
+    "volumes": [
+      "cosmos-mainnet-gaiad-pruned"
+    ]
+  },
   {
     "chain": "zkevm-mainnet",
     "client": "external-node",
@@ -3511,6 +3626,25 @@
       "metis-andromeda-sepolia-l2geth-archive-leveldb-hash_dtl"
     ]
   },
+  {
+    "chain": "mainnet",
+    "client": "l2geth",
+    "compose_file": "morph/l2geth/morph-mainnet-l2geth-archive-leveldb-hash-mpt",
+    "features": [
+      "hash",
+      "leveldb",
+      "mpt"
+    ],
+    "network": "morph",
+    "node": "morph",
+    "relay": null,
+    "stack": null,
+    "type": "archive",
+    "volumes": [
+      "morph-mainnet-l2geth-archive-leveldb-hash-mpt",
+      "morph-mainnet-l2geth-archive-leveldb-hash-mpt_morph"
+    ]
+  },
   {
     "chain": "mainnet",
     "client": "erigon",
@@ -4531,6 +4665,23 @@
       "celo-sepolia-op-geth-pruned-pebble-path_eigenda-proxy"
     ]
   },
+  {
+    "chain": "mainnet",
+    "client": "geth",
+    "compose_file": "op/geth/doma-mainnet-op-geth-pruned-pebble-path",
+    "features": [
+      "path",
+      "pebble"
+    ],
+    "network": "doma",
+    "node": "node",
+    "relay": "op-alt",
+    "stack": "op",
+    "type": "pruned",
+    "volumes": [
+      "doma-mainnet-op-geth-pruned-pebble-path"
+    ]
+  },
   {
     "chain": "mainnet",
     "client": "geth",
@@ -6174,6 +6325,70 @@
       "bob-sepolia-op-reth-pruned-trace"
     ]
   },
+  {
+    "chain": "mainnet",
+    "client": "reth",
+    "compose_file": "op/reth/boba-mainnet-op-reth-pruned-trace",
+    "features": [
+      "trace"
+    ],
+    "network": "boba",
+    "node": "node",
+    "relay": null,
+    "stack": "op",
+    "type": "pruned",
+    "volumes": [
+      "boba-mainnet-op-reth-pruned-trace"
+    ]
+  },
+  {
+    "chain": "testnet",
+    "client": "reth",
+    "compose_file": "op/reth/doma-testnet-op-reth-pruned-trace",
+    "features": [
+      "trace"
+    ],
+    "network": "doma",
+    "node": "node",
+    "relay": "op-alt",
+    "stack": "op",
+    "type": "pruned",
+    "volumes": [
+      "doma-testnet-op-reth-pruned-trace"
+    ]
+  },
+  {
+    "chain": "mainnet",
+    "client": "reth",
+    "compose_file": "op/reth/hashkeychain-mainnet-op-reth-pruned-trace",
+    "features": [
+      "trace"
+    ],
+    "network": "hashkeychain",
+    "node": "node",
+    "relay": null,
+    "stack": "op",
+    "type": "pruned",
+    "volumes": [
+      "hashkeychain-mainnet-op-reth-pruned-trace"
+    ]
+  },
+  {
+    "chain": "testnet",
+    "client": "reth",
+    "compose_file": "op/reth/hashkeychain-testnet-op-reth-pruned-trace",
+    "features": [
+      "trace"
+    ],
+    "network": "hashkeychain",
+    "node": "node",
+    "relay": null,
+    "stack": "op",
+    "type": "pruned",
+    "volumes": [
+      "hashkeychain-testnet-op-reth-pruned-trace"
+    ]
+  },
   {
     "chain": "sepolia",
     "client": "reth",
@@ -6350,6 +6565,57 @@
       "op-sepolia-op-reth-pruned-trace"
     ]
   },
+  {
+    "chain": "mainnet",
+    "client": "reth",
+    "compose_file": "op/reth/ronin-mainnet-op-reth-archive-trace",
+    "features": [
+      "trace"
+    ],
+    "network": "ronin",
+    "node": "node",
+    "relay": "eigenda-proxy",
+    "stack": "op",
+    "type": "archive",
+    "volumes": [
+      "ronin-mainnet-op-reth-archive-trace",
+      "ronin-mainnet-op-reth-archive-trace_eigenda-proxy"
+    ]
+  },
+  {
+    "chain": "saigon",
+    "client": "reth",
+    "compose_file": "op/reth/ronin-saigon-op-reth-archive-trace",
+    "features": [
+      "trace"
+    ],
+    "network": "ronin",
+    "node": "node",
+    "relay": "eigenda-proxy",
+    "stack": "op",
+    "type": "archive",
+    "volumes": [
+      "ronin-saigon-op-reth-archive-trace",
+      "ronin-saigon-op-reth-archive-trace_eigenda-proxy"
+    ]
+  },
+  {
+    "chain": "saigon",
+    "client": "reth",
+    "compose_file": "op/reth/ronin-saigon-op-reth-pruned-trace",
+    "features": [
+      "trace"
+    ],
+    "network": "ronin",
+    "node": "node",
+    "relay": "eigenda-proxy",
+    "stack": "op",
+    "type": "pruned",
+    "volumes": [
+      "ronin-saigon-op-reth-pruned-trace",
+      "ronin-saigon-op-reth-pruned-trace_eigenda-proxy"
+    ]
+  },
   {
     "chain": "mainnet",
     "client": "reth",
@@ -6414,6 +6680,54 @@
       "soneium-minato-sepolia-op-reth-pruned-trace"
     ]
   },
+  {
+    "chain": "sepolia",
+    "client": "reth",
+    "compose_file": "op/reth/superseed-sepolia-op-reth-pruned-trace",
+    "features": [
+      "trace"
+    ],
+    "network": "superseed",
+    "node": "node",
+    "relay": null,
+    "stack": "op",
+    "type": "pruned",
+    "volumes": [
+      "superseed-sepolia-op-reth-pruned-trace"
+    ]
+  },
+  {
+    "chain": "mainnet",
+    "client": "reth",
+    "compose_file": "op/reth/unichain-mainnet-op-reth-pruned-trace",
+    "features": [
+      "trace"
+    ],
+    "network": "unichain",
+    "node": "node",
+    "relay": null,
+    "stack": "op",
+    "type": "pruned",
+    "volumes": [
+      "unichain-mainnet-op-reth-pruned-trace"
+    ]
+  },
+  {
+    "chain": "sepolia",
+    "client": "reth",
+    "compose_file": "op/reth/unichain-sepolia-op-reth-pruned-trace",
+    "features": [
+      "trace"
+    ],
+    "network": "unichain",
+    "node": "node",
+    "relay": null,
+    "stack": "op",
+    "type": "pruned",
+    "volumes": [
+      "unichain-sepolia-op-reth-pruned-trace"
+    ]
+  },
   {
     "chain": "sepolia",
     "client": "reth",
@@ -6478,22 +6792,6 @@
       "xlayer-mainnet-op-reth-archive-trace"
     ]
   },
-  {
-    "chain": "mainnet",
-    "client": "reth",
-    "compose_file": "op/reth/xlayer-mainnet-op-reth-pruned-trace",
-    "features": [
-      "trace"
-    ],
-    "network": "xlayer",
-    "node": "node",
-    "relay": null,
-    "stack": "op",
-    "type": "pruned",
-    "volumes": [
-      "xlayer-mainnet-op-reth-pruned-trace"
-    ]
-  },
   {
     "chain": "testnet",
     "client": "reth",
@@ -6510,22 +6808,6 @@
       "xlayer-testnet-op-reth-archive-trace"
     ]
   },
-  {
-    "chain": "testnet",
-    "client": "reth",
-    "compose_file": "op/reth/xlayer-testnet-op-reth-pruned-trace",
-    "features": [
-      "trace"
-    ],
-    "network": "xlayer",
-    "node": "node",
-    "relay": null,
-    "stack": "op",
-    "type": "pruned",
-    "volumes": [
-      "xlayer-testnet-op-reth-pruned-trace"
-    ]
-  },
   {
     "chain": "amoy",
     "client": "bor",
@@ -7018,6 +7300,40 @@
       "sei-testnet-sei-pruned"
     ]
   },
+  {
+    "chain": "mainnet",
+    "client": "bor",
+    "compose_file": "shibarium/bor/shibarium-mainnet-bor-archive-pebble-path",
+    "features": [
+      "path",
+      "pebble"
+    ],
+    "network": "shibarium",
+    "node": "heimdall",
+    "relay": null,
+    "stack": null,
+    "type": "archive",
+    "volumes": [
+      "shibarium-mainnet-bor-archive-pebble-path"
+    ]
+  },
+  {
+    "chain": "mainnet",
+    "client": "bor",
+    "compose_file": "shibarium/bor/shibarium-mainnet-bor-pruned-pebble-path",
+    "features": [
+      "path",
+      "pebble"
+    ],
+    "network": "shibarium",
+    "node": "heimdall",
+    "relay": null,
+    "stack": null,
+    "type": "pruned",
+    "volumes": [
+      "shibarium-mainnet-bor-pruned-pebble-path"
+    ]
+  },
   {
     "chain": "mainnet",
     "client": "agave",

cosmos/cometbft.Dockerfile

@@ -0,0 +1,11 @@
+ARG CL_IMAGE
+ARG CL_VERSION
+FROM ${CL_IMAGE}:${CL_VERSION}
+# Layer the shared CometBFT bootstrap lib + the chain init.sh onto the upstream
+# cosmos binary image (alpine-based, has sh+apk; runs nonroot by default — the compose
+# sets user: root so init.sh can apk-add curl and write the /root home).
+USER root
+COPY ./scripts/cometbft-common.sh /usr/local/bin/cometbft-common.sh
+COPY ./scripts/init.sh            /usr/local/bin/init.sh
+RUN chmod +x /usr/local/bin/init.sh /usr/local/bin/cometbft-common.sh
+ENTRYPOINT ["init.sh"]

cosmos/gaiad/cosmos-mainnet-gaiad-pruned.yml

@@ -0,0 +1,127 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:cosmos/gaiad/cosmos-mainnet-gaiad-pruned.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/cosmos-mainnet-pruned \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  cosmos-mainnet-pruned:
+    build:
+      context: ./cosmos
+      dockerfile: cometbft.Dockerfile
+      args:
+        CL_IMAGE: ${COSMOS_GAIAD_IMAGE:-ghcr.io/cosmos/gaia}
+        CL_VERSION: ${COSMOS_MAINNET_GAIAD_VERSION:-v27.4.0}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 12554:12554
+      - 12554:12554/udp
+    expose:
+      - 26657
+      - 26660
+      - 9090
+      - 1317
+    environment:
+      - CHAIN_ID=cosmoshub-4
+      - GENESIS_URL=https://github.com/cosmos/mainnet/raw/master/genesis/genesis.cosmoshub-4.json.gz
+      - IP=${IP}
+      - MIN_GAS=0.005uatom
+      - MONIKER=d${DOMAIN:-local}
+      - P2P_PORT=12554
+      - PERSISTENT_PEERS=a7f14a48cd97c0eae7833849ccdf4e9418622c56@65.108.128.201:14956,37dfe1ec33e9f88f378a61a32462d57d2baa5e74@65.108.99.140:26656,f86d297a28da1a2b186583daf0e229c2b1449414@144.76.217.227:26656,66ca3161c5532da890815e40826ddbbbe2cb7f6c@176.9.101.44:26656
+      - STATESYNC_RPC=https://cosmos-rpc.polkachu.com:443
+      - WASM_SNAPSHOT_URL=https://snapshots.polkachu.com/wasm/cosmos/cosmos_wasmonly.tar.lz4
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${COSMOS_MAINNET_GAIAD_PRUNED_DATA:-cosmos-mainnet-gaiad-pruned}:/root/.gaia
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=26660
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.cosmos-mainnet-gaiad-pruned-stripprefix.stripprefix.prefixes=/cosmos-mainnet-pruned
+      - traefik.http.services.cosmos-mainnet-gaiad-pruned.loadbalancer.server.port=26657
+      - ${NO_SSL:-traefik.http.routers.cosmos-mainnet-gaiad-pruned.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.cosmos-mainnet-gaiad-pruned.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.cosmos-mainnet-gaiad-pruned.rule=Host(`$DOMAIN`) && (Path(`/cosmos-mainnet-pruned`) || Path(`/cosmos-mainnet-pruned/`))}
+      - ${NO_SSL:+traefik.http.routers.cosmos-mainnet-gaiad-pruned.rule=Path(`/cosmos-mainnet-pruned`) || Path(`/cosmos-mainnet-pruned/`)}
+      - traefik.http.routers.cosmos-mainnet-gaiad-pruned.middlewares=cosmos-mainnet-gaiad-pruned-stripprefix, ipallowlist
+      - traefik.http.routers.cosmos-mainnet-gaiad-pruned.priority=50   # gets any request that is not GET with UPGRADE header
+      - traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.priority=100   # answers GET requests first
+      - traefik.http.middlewares.cosmos-mainnet-gaiad-pruned-set-ws-path.replacepath.path=/websocket
+      - traefik.http.services.cosmos-mainnet-gaiad-pruned-ws.loadbalancer.server.port=26657
+      - traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.service=cosmos-mainnet-gaiad-pruned-ws
+      - traefik.http.routers.cosmos-mainnet-gaiad-pruned.service=cosmos-mainnet-gaiad-pruned
+      - ${NO_SSL:-traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/cosmos-mainnet-pruned`) || Path(`/cosmos-mainnet-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - ${NO_SSL:+traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.rule=(Path(`/cosmos-mainnet-pruned`) || Path(`/cosmos-mainnet-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.middlewares=cosmos-mainnet-gaiad-pruned-stripprefix, cosmos-mainnet-gaiad-pruned-set-ws-path, ipallowlist
+
+volumes:
+  cosmos-mainnet-gaiad-pruned:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: cosmos-hub
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...

cosmos/scripts/cometbft-common.sh

@@ -0,0 +1,223 @@
+#!/bin/sh
+# cometbft-common.sh — reusable CometBFT-node bootstrap helpers (family C).
+#
+# Source this from a chain-specific init.sh. It encapsulates the operations every
+# CometBFT-consensus node needs (init, fetch config artifacts, patch config.toml /
+# app.toml, seed priv_validator_state), extracted verbatim from the proven berachain
+# beacon-kit entrypoint so callers inherit known-good behavior.
+#
+# Each function takes explicit arguments (paths/values) — it is binary-agnostic. The
+# caller owns the binary name, the `<binary> init` invocation, the artifact URLs, and
+# the final `exec <binary> start ...`. EL-driven chains (beacon-kit, morph) also call
+# the JWT / engine-dial helpers; pure-consensus chains (gaiad) skip them.
+#
+# Conventions: POSIX sh (alpine). Config dir is conventionally $HOME_DIR/config.
+# Used by: morph-node, gaiad (cosmos batch), and any future family-C chain.
+# beacon-kit (berachain) keeps its own bespoke init.sh on purpose — do not retrofit it.
+
+set -e
+
+ct_log() { echo "[cometbft-init] $*"; }
+
+# Ensure curl exists (alpine base images often omit it). Idempotent.
+ct_require_curl() {
+  if ! command -v curl >/dev/null 2>&1; then
+    ct_log "installing curl"
+    apk add --no-cache curl
+  fi
+}
+
+# ct_fetch URL DEST [required]
+#   Download URL -> DEST. If the 3rd arg is "required", a failure is fatal;
+#   otherwise a missing/failed fetch is logged and skipped (returns 0).
+ct_fetch() {
+  _url="$1"; _dest="$2"; _req="${3:-optional}"
+  [ -n "$_url" ] || { [ "$_req" = required ] && { ct_log "FATAL: empty URL for $_dest"; exit 1; }; return 0; }
+  if curl -fsSL "$_url" -o "$_dest"; then
+    ct_log "fetched $_url -> $_dest"
+  else
+    if [ "$_req" = required ]; then
+      ct_log "FATAL: failed to fetch required $_url"; exit 1
+    fi
+    ct_log "skip: could not fetch optional $_url"
+  fi
+}
+
+# ct_patch_p2p CONFIG_TOML IP P2P_PORT
+#   Bind p2p to 0.0.0.0:PORT and advertise IP:PORT (only within the [p2p] section).
+ct_patch_p2p() {
+  _cfg="$1"; _ip="$2"; _port="$3"
+  [ -f "$_cfg" ] || { ct_log "patch_p2p: $_cfg missing, skipping"; return 0; }
+  _laddr="tcp:\\/\\/0\\.0\\.0\\.0\\:${_port}"
+  sed -i "/^\[p2p\]/,/^\[/{s|^laddr = .*|laddr = \"$_laddr\"|}" "$_cfg"
+  sed -i "/^\[p2p\]/,/^\[/{s|^external_address = .*|external_address = \"${_ip}:${_port}\"|}" "$_cfg"
+}
+
+# ct_merge_seeds CONFIG_TOML CONFIGURED_SEEDS [SEEDS_URL]
+#   Merge operator-configured seeds with an optional official seed list (1 entry per
+#   line, first line skipped like the berachain cl-seeds.txt header), dedupe, write.
+ct_merge_seeds() {
+  _cfg="$1"; _seeds="$2"; _url="$3"
+  [ -f "$_cfg" ] || return 0
+  if [ -n "$_url" ]; then
+    _official=$(curl -f -s "$_url" | tail -n +2 | tr '\n' ',' | sed 's/,$//' || true)
+    if [ -n "$_official" ]; then
+      ct_log "merging official seeds from $_url"
+      _seeds=$(echo "${_seeds},${_official}" | tr ',' '\n' | sed '/^$/d' | sort -u | paste -sd,)
+    else
+      ct_log "no official seeds fetched from $_url (continuing with configured)"
+    fi
+  fi
+  if [ -n "$_seeds" ]; then
+    sed -i "s/^seeds = \".*\"/seeds = \"${_seeds}\"/" "$_cfg"
+  fi
+}
+
+# ct_set_persistent_peers CONFIG_TOML PEERS
+#   Handles both cometbft-classic `persistent_peers` (underscore) and forks that use
+#   `persistent-peers` (hyphen, e.g. sei) — patches whichever key is present.
+ct_set_persistent_peers() {
+  _cfg="$1"; _peers="$2"
+  [ -f "$_cfg" ] || return 0
+  [ -n "$_peers" ] || return 0
+  sed -i "s/^persistent_peers = \".*\"/persistent_peers = \"${_peers}\"/" "$_cfg"
+  sed -i "s/^persistent-peers = \".*\"/persistent-peers = \"${_peers}\"/" "$_cfg"
+  return 0
+}
+
+# ct_set_moniker CONFIG_TOML MONIKER
+ct_set_moniker() {
+  _cfg="$1"; _mon="$2"
+  [ -f "$_cfg" ] || return 0
+  [ -n "$_mon" ] && sed -i "s/^moniker = \".*\"/moniker = \"$_mon\"/" "$_cfg"
+  return 0
+}
+
+# ct_set_addrbook CONFIG_DIR ADDRBOOK_URL
+#   Optional: cosmos chains often seed an addrbook.json for faster peer discovery.
+ct_set_addrbook() {
+  _dir="$1"; _url="$2"
+  [ -n "$_url" ] || return 0
+  ct_fetch "$_url" "$_dir/addrbook.json" optional
+}
+
+# ct_write_jwt CONFIG_DIR  [JWT_SRC]
+#   EL-driven chains: copy the shared engine JWT (default /jwtsecret) into the config
+#   dir as jwt.hex so the CL can authenticate to the EL engine API.
+ct_write_jwt() {
+  _dir="$1"; _src="${2:-/jwtsecret}"
+  [ -f "$_src" ] || { ct_log "write_jwt: $_src missing, skipping"; return 0; }
+  cat "$_src" > "$_dir/jwt.hex"
+}
+
+# ct_set_rpc_dial_url APP_TOML AUTH_RPC
+#   beacon-kit / app.toml-style EL engine endpoint (e.g. http://<el>:8551).
+ct_set_rpc_dial_url() {
+  _app="$1"; _rpc="$2"
+  [ -f "$_app" ] || return 0
+  [ -n "$_rpc" ] && sed -i "s|^rpc-dial-url = \".*\"|rpc-dial-url = \"$_rpc\"|" "$_app"
+  return 0
+}
+
+# ct_seed_priv_validator_state HOME_DIR
+#   Ensure data/priv_validator_state.json exists (cometbft refuses to start without it
+#   when one is present in config/). Mirrors the berachain init.sh behavior.
+ct_seed_priv_validator_state() {
+  _home="$1"
+  if [ -e "$_home/config/priv_validator_state.json" ] && [ ! -e "$_home/data/priv_validator_state.json" ]; then
+    mkdir -p "$_home/data"
+    cp "$_home/config/priv_validator_state.json" "$_home/data/priv_validator_state.json"
+  fi
+  return 0
+}
+
+# ct_apk PKG...
+#   Install alpine packages idempotently (most cosmos init scripts need curl, some jq).
+ct_apk() {
+  apk add --no-cache "$@"
+}
+
+# ct_localize_home CONFIG_DIR
+#   Rewrite `~/` to `/root/` in config.toml + app.toml. Cosmos `init` writes home-relative
+#   paths; the container runs as root with a static home, so make paths absolute.
+ct_localize_home() {
+  _dir="$1"
+  [ -f "$_dir/config.toml" ] && sed -i 's|~/|/root/|g' "$_dir/config.toml"
+  [ -f "$_dir/app.toml" ]    && sed -i 's|~/|/root/|g' "$_dir/app.toml"
+  return 0
+}
+
+# ct_set_min_gas_prices APP_TOML PRICE
+#   Cosmos chains reject txs (and sometimes refuse to start) with an empty
+#   minimum-gas-prices. PRICE e.g. "0.01usei", "0.0025uatom", "0.01hqq".
+ct_set_min_gas_prices() {
+  _app="$1"; _price="$2"
+  [ -f "$_app" ] || return 0
+  [ -n "$_price" ] || return 0
+  sed -i "s/minimum-gas-prices = \"\"/minimum-gas-prices = \"${_price}\"/g" "$_app"
+  return 0
+}
+
+# ct_configure_statesync CONFIG_TOML RPC_SERVERS [TRUST_OFFSET]
+#   Enable cometbft state-sync so a fresh node bootstraps near chainhead instead of
+#   replaying from genesis — the single biggest lever for "can't keep it at chainhead"
+#   chains. RPC_SERVERS = comma list of trusted RPC endpoints (>=2 recommended; a single
+#   endpoint is duplicated). TRUST_OFFSET = blocks below head to trust (default 2000).
+#   Requires jq + curl. No-op (logged) if head height can't be fetched.
+ct_configure_statesync() {
+  _cfg="$1"; _rpc="$2"; _offset="${3:-2000}"
+  [ -f "$_cfg" ] || return 0
+  # NEVER re-arm statesync on a node that already has application state (a restored
+  # snapshot or a prior sync). Re-statesyncing over it leaves a broken/partial datadir and,
+  # for wasm chains, drops the wasm files -> startup panic. _cfg is $HOME/config/config.toml,
+  # so application state lives at $HOME/data/application.db.
+  _home=$(dirname "$(dirname "$_cfg")")
+  if [ -e "$_home/data/application.db" ]; then
+    ct_log "statesync: existing data dir, skipping"
+    return 0
+  fi
+  [ -n "$_rpc" ] || { ct_log "statesync: no RPC servers given, skipping"; return 0; }
+  _primary=$(echo "$_rpc" | cut -d, -f1)
+  _latest=$(curl -s "$_primary/block" | jq -r '.result.block.header.height // .block.header.height' 2>/dev/null || true)
+  if [ -z "$_latest" ] || [ "$_latest" = null ]; then
+    ct_log "statesync: could not read head height from $_primary, skipping"; return 0
+  fi
+  _trust_h=$((_latest - _offset))
+  _trust_hash=$(curl -s "$_primary/block?height=$_trust_h" | jq -r '.result.block_id.hash // .block_id.hash' 2>/dev/null || true)
+  [ -n "$_trust_hash" ] && [ "$_trust_hash" != null ] || { ct_log "statesync: no trust hash, skipping"; return 0; }
+  # second server defaults to the first (cometbft wants >=2 for light-client cross-check)
+  echo "$_rpc" | grep -q ',' || _rpc="$_rpc,$_rpc"
+  ct_log "statesync: enable trust_height=$_trust_h trust_hash=$_trust_hash"
+  # Patch ONLY the [statesync] section. CometBFT config.toml uses underscore keys
+  # (rpc_servers/trust_height/trust_hash); tolerate hyphen variants with [_-].
+  sed -i.bak -E "/^\[statesync\]/,/^\[/{
+    s|^([[:space:]]*enable[[:space:]]*=[[:space:]]*).*|\1true|
+    s|^([[:space:]]*rpc[_-]servers[[:space:]]*=[[:space:]]*).*|\1\"$_rpc\"|
+    s|^([[:space:]]*trust[_-]height[[:space:]]*=[[:space:]]*).*|\1$_trust_h|
+    s|^([[:space:]]*trust[_-]hash[[:space:]]*=[[:space:]]*).*|\1\"$_trust_hash\"|
+  }" "$_cfg"
+  return 0
+}
+
+# ct_ensure_wasm HOME_DIR WASM_SNAPSHOT_URL
+#   CosmWasm + IBC 08-wasm bytecode are FILES on disk that state-sync does NOT restore, so
+#   a state-synced wasm chain panics at startup ("wasmlckeeper failed initialize pinned codes
+#   / Error opening Wasm file"). Seed them from a wasm-only snapshot (e.g. polkachu
+#   cosmos_wasmonly.tar.lz4) when the wasm dir is missing/empty. No-op if URL unset or wasm
+#   already present. Best-effort (logs on failure); the fully robust path for wasm chains is a
+#   FULL snapshot restore. Requires lz4 + tar (installed here).
+ct_ensure_wasm() {
+  _home="$1"; _url="$2"
+  [ -n "$_url" ] || return 0
+  if [ -d "$_home/wasm" ] && [ -n "$(ls -A "$_home/wasm" 2>/dev/null)" ]; then
+    return 0   # wasm already present
+  fi
+  ct_log "wasm: empty, fetching snapshot $_url"
+  ct_apk lz4 tar
+  if curl -sL "$_url" | lz4 -dc | tar -xf - -C "$_home"; then
+    ct_log "wasm: extracted into $_home"
+  else
+    ct_log "WARN wasm: fetch/extract failed ($_url)"
+  fi
+  return 0
+}

cosmos/scripts/init.sh

@@ -0,0 +1,44 @@
+#!/bin/sh
+# cosmos-hub (gaiad) entrypoint — family C, pure CometBFT (no EL). Thin: sources the
+# shared cometbft-common.sh and orchestrates init + statesync bootstrap + start.
+# Genesis replay across ~25 gaia governance upgrades is impractical, so we statesync
+# near head with the current binary. Serves CometBFT RPC :26657 (the dshackle upstream).
+set -e
+. /usr/local/bin/cometbft-common.sh
+
+HOME_DIR="/root/.gaia"
+CONFIG_DIR="$HOME_DIR/config"
+CHAIN_ID="${CHAIN_ID:-cosmoshub-4}"
+GENESIS_URL="${GENESIS_URL:-https://github.com/cosmos/mainnet/raw/master/genesis/genesis.cosmoshub-4.json.gz}"
+STATESYNC_RPC="${STATESYNC_RPC:-https://cosmos-rpc.polkachu.com:443}"
+MIN_GAS="${MIN_GAS:-0.005uatom}"
+MONIKER="${MONIKER:-rpc-node}"
+
+ct_apk curl jq
+
+if gaiad init "$MONIKER" --chain-id "$CHAIN_ID" --home "$HOME_DIR" >/dev/null 2>&1; then
+  ct_log "fresh init; fetching genesis"
+  ct_fetch "$GENESIS_URL" "$CONFIG_DIR/genesis.json.gz" required
+  if gzip -t "$CONFIG_DIR/genesis.json.gz" 2>/dev/null; then
+    gunzip -f "$CONFIG_DIR/genesis.json.gz"
+  else
+    mv "$CONFIG_DIR/genesis.json.gz" "$CONFIG_DIR/genesis.json"   # served plain, not gzipped
+  fi
+  ct_localize_home "$CONFIG_DIR"
+  ct_set_min_gas_prices "$CONFIG_DIR/app.toml" "$MIN_GAS"
+else
+  ct_log "already initialized, continuing"
+fi
+
+# Serve RPC on all interfaces (dshackle/traefik upstream); default is 127.0.0.1.
+sed -i '/^\[rpc\]/,/^\[/{s|^laddr = .*|laddr = "tcp://0.0.0.0:26657"|}' "$CONFIG_DIR/config.toml"
+
+ct_patch_p2p             "$CONFIG_DIR/config.toml" "$IP" "${P2P_PORT:-26656}"
+ct_merge_seeds           "$CONFIG_DIR/config.toml" "$SEEDS"
+ct_set_persistent_peers  "$CONFIG_DIR/config.toml" "$PERSISTENT_PEERS"
+ct_set_moniker           "$CONFIG_DIR/config.toml" "$MONIKER"
+ct_configure_statesync   "$CONFIG_DIR/config.toml" "$STATESYNC_RPC"   # internally skips if data/application.db exists
+ct_ensure_wasm           "$HOME_DIR" "$WASM_SNAPSHOT_URL"             # seeds CosmWasm/IBC-08 wasm if missing (statesync omits them)
+ct_seed_priv_validator_state "$HOME_DIR"
+
+exec gaiad start --home "$HOME_DIR" --minimum-gas-prices "$MIN_GAS" "$@"

cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-archive.yml

@@ -33,7 +33,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   cronos-zkevm-mainnet-archive:
-    image: ${CRONOS_ZKEVM_EXTERNAL_NODE_IMAGE:-ghcr.io/cronos-labs/external-node}:${CRONOS_ZKEVM_MAINNET_EXTERNAL_NODE_VERSION:-v29.14.0}
+    image: ${CRONOS_ZKEVM_EXTERNAL_NODE_IMAGE:-ghcr.io/cronos-labs/external-node}:${CRONOS_ZKEVM_MAINNET_EXTERNAL_NODE_VERSION:-v29.17.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -102,8 +102,8 @@ services:
       - traefik.http.routers.cronos-zkevm-mainnet-external-node-archive.service=cronos-zkevm-mainnet-external-node-archive
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-mainnet-archive`) || Path(`/cronos-zkevm-mainnet-archive/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-mainnet-archive`) || Path(`/cronos-zkevm-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.rule=(Path(`/cronos-zkevm-mainnet-archive`) || Path(`/cronos-zkevm-mainnet-archive/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.rule=(Path(`/cronos-zkevm-mainnet-archive`) || Path(`/cronos-zkevm-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.middlewares=cronos-zkevm-mainnet-external-node-archive-stripprefix, ipallowlist
 
   cronos-zkevm-mainnet-archive-db:

cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-pruned.yml

@@ -33,7 +33,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   cronos-zkevm-mainnet:
-    image: ${CRONOS_ZKEVM_EXTERNAL_NODE_IMAGE:-ghcr.io/cronos-labs/external-node}:${CRONOS_ZKEVM_MAINNET_EXTERNAL_NODE_VERSION:-v29.14.0}
+    image: ${CRONOS_ZKEVM_EXTERNAL_NODE_IMAGE:-ghcr.io/cronos-labs/external-node}:${CRONOS_ZKEVM_MAINNET_EXTERNAL_NODE_VERSION:-v29.17.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -102,8 +102,8 @@ services:
       - traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned.service=cronos-zkevm-mainnet-external-node-pruned
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-mainnet`) || Path(`/cronos-zkevm-mainnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-mainnet`) || Path(`/cronos-zkevm-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.rule=(Path(`/cronos-zkevm-mainnet`) || Path(`/cronos-zkevm-mainnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.rule=(Path(`/cronos-zkevm-mainnet`) || Path(`/cronos-zkevm-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.middlewares=cronos-zkevm-mainnet-external-node-pruned-stripprefix, ipallowlist
 
   cronos-zkevm-mainnet-db:

cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-archive.yml

@@ -33,7 +33,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   cronos-zkevm-testnet-archive:
-    image: ${CRONOS_ZKEVM_EXTERNAL_NODE_IMAGE:-ghcr.io/cronos-labs/external-node}:${CRONOS_ZKEVM_TESTNET_EXTERNAL_NODE_VERSION:-v29.14.0}
+    image: ${CRONOS_ZKEVM_EXTERNAL_NODE_IMAGE:-ghcr.io/cronos-labs/external-node}:${CRONOS_ZKEVM_TESTNET_EXTERNAL_NODE_VERSION:-v29.17.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -102,8 +102,8 @@ services:
       - traefik.http.routers.cronos-zkevm-testnet-external-node-archive.service=cronos-zkevm-testnet-external-node-archive
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-testnet-archive`) || Path(`/cronos-zkevm-testnet-archive/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-testnet-archive`) || Path(`/cronos-zkevm-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.rule=(Path(`/cronos-zkevm-testnet-archive`) || Path(`/cronos-zkevm-testnet-archive/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.rule=(Path(`/cronos-zkevm-testnet-archive`) || Path(`/cronos-zkevm-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.middlewares=cronos-zkevm-testnet-external-node-archive-stripprefix, ipallowlist
 
   cronos-zkevm-testnet-archive-db:

cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-pruned.yml

@@ -33,7 +33,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   cronos-zkevm-testnet:
-    image: ${CRONOS_ZKEVM_EXTERNAL_NODE_IMAGE:-ghcr.io/cronos-labs/external-node}:${CRONOS_ZKEVM_TESTNET_EXTERNAL_NODE_VERSION:-v29.14.0}
+    image: ${CRONOS_ZKEVM_EXTERNAL_NODE_IMAGE:-ghcr.io/cronos-labs/external-node}:${CRONOS_ZKEVM_TESTNET_EXTERNAL_NODE_VERSION:-v29.17.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -102,8 +102,8 @@ services:
       - traefik.http.routers.cronos-zkevm-testnet-external-node-pruned.service=cronos-zkevm-testnet-external-node-pruned
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-testnet`) || Path(`/cronos-zkevm-testnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-testnet`) || Path(`/cronos-zkevm-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.rule=(Path(`/cronos-zkevm-testnet`) || Path(`/cronos-zkevm-testnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.rule=(Path(`/cronos-zkevm-testnet`) || Path(`/cronos-zkevm-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.middlewares=cronos-zkevm-testnet-external-node-pruned-stripprefix, ipallowlist
 
   cronos-zkevm-testnet-db:

ethereum/besu/ethereum-classic-besu-pruned-bonsai.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-classic-besu:
-    image: ${ETHEREUM_BESU_IMAGE:-hyperledger/besu}:${ETHEREUM_CLASSIC_BESU_VERSION:-26.5.0}
+    image: ${ETHEREUM_BESU_IMAGE:-hyperledger/besu}:${ETHEREUM_CLASSIC_BESU_VERSION:-26.1.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -103,8 +103,8 @@ services:
       - traefik.http.routers.ethereum-classic-besu-pruned-bonsai.service=ethereum-classic-besu-pruned-bonsai
       - ${NO_SSL:-traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/ethereum-classic-besu`) || Path(`/ethereum-classic-besu/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/ethereum-classic-besu`) || Path(`/ethereum-classic-besu/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.rule=(Path(`/ethereum-classic-besu`) || Path(`/ethereum-classic-besu/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.rule=(Path(`/ethereum-classic-besu`) || Path(`/ethereum-classic-besu/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.middlewares=ethereum-classic-besu-pruned-bonsai-stripprefix, ipallowlist
 
 volumes:

ethereum/besu/ethereum-mainnet-besu-pruned-bonsai--nimbus.yml

@@ -109,8 +109,8 @@ services:
       - traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai.service=ethereum-mainnet-besu-pruned-bonsai
       - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/ethereum-mainnet-besu`) || Path(`/ethereum-mainnet-besu/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/ethereum-mainnet-besu`) || Path(`/ethereum-mainnet-besu/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.rule=(Path(`/ethereum-mainnet-besu`) || Path(`/ethereum-mainnet-besu/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.rule=(Path(`/ethereum-mainnet-besu`) || Path(`/ethereum-mainnet-besu/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.middlewares=ethereum-mainnet-besu-pruned-bonsai-stripprefix, ipallowlist
 
   ethereum-mainnet-besu-node:

ethereum/erigon3/ethereum-hoodi-erigon3-archive-trace.yml

@@ -141,7 +141,7 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: ethereum
+    chain: hoodi
     method-groups:
       enabled:
         - debug

ethereum/erigon3/ethereum-hoodi-erigon3-minimal-trace.yml

@@ -141,7 +141,7 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: ethereum
+    chain: hoodi
     method-groups:
       enabled:
         - debug

ethereum/erigon3/ethereum-hoodi-erigon3-pruned-trace.yml

@@ -141,7 +141,7 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: ethereum
+    chain: hoodi
     method-groups:
       enabled:
         - debug

ethereum/geth/ethereum-hoodi-geth-pruned-pebble-path--nimbus.yml

@@ -162,7 +162,7 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: ethereum
+    chain: hoodi
     method-groups:
       enabled:
         - debug

ethereum/geth/ethereum-hoodi-geth-pruned-pebble-path.yml

@@ -163,7 +163,7 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: ethereum
+    chain: hoodi
     method-groups:
       enabled:
         - debug

ethereum/reth/ethereum-hoodi-reth-archive-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-hoodi-reth:
-    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_HOODI_RETH_VERSION:-v2.2.0}
+    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_HOODI_RETH_VERSION:-v2.1.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -168,7 +168,7 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: ethereum
+    chain: hoodi
     method-groups:
       enabled:
         - debug

ethereum/reth/ethereum-hoodi-reth-pruned-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-hoodi-reth-pruned:
-    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_HOODI_RETH_VERSION:-v2.2.0}
+    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_HOODI_RETH_VERSION:-v2.1.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -169,7 +169,7 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: ethereum
+    chain: hoodi
     method-groups:
       enabled:
         - debug

ethereum/reth/ethereum-mainnet-reth-archive-trace--lighthouse-pruned-blobs.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-mainnet-reth:
-    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_MAINNET_RETH_VERSION:-v2.2.0}
+    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_MAINNET_RETH_VERSION:-v2.1.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/reth/ethereum-mainnet-reth-archive-trace--nimbus.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-mainnet-reth:
-    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_MAINNET_RETH_VERSION:-v2.2.0}
+    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_MAINNET_RETH_VERSION:-v2.1.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/reth/ethereum-mainnet-reth-archive-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-mainnet-reth:
-    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_MAINNET_RETH_VERSION:-v2.2.0}
+    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_MAINNET_RETH_VERSION:-v2.1.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/reth/ethereum-mainnet-reth-minimal-trace--blsync.yml

@@ -33,7 +33,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-mainnet-reth-minimal:
-    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_MAINNET_RETH_VERSION:-v2.2.0}
+    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_MAINNET_RETH_VERSION:-v2.1.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/reth/ethereum-mainnet-reth-minimal-trace--nimbus.yml

@@ -52,7 +52,7 @@ services:
       args:
         LLVM_IMAGE: ${LLVM_IMAGE:-snowstep/llvm}
         LLVM_VERSION: ${LLVM_VERSION:-20250912105042}
-        RETH_VERSION: ${ETHEREUM_MAINNET_RETH_VERSION:-v2.2.0}
+        RETH_VERSION: ${ETHEREUM_MAINNET_RETH_VERSION:-v2.1.0}
         RETH_REPO: ${ETHEREUM_MAINNET_RETH_REPO:-https://github.com/paradigmxyz/reth}
         ARCH_TARGET: ${ARCH_TARGET:-native}
         PROFILE: ${RETH_BUILD_PROFILE:-maxperf}

ethereum/reth/ethereum-mainnet-reth-pruned-trace--lighthouse.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-mainnet-reth-pruned:
-    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_MAINNET_RETH_VERSION:-v2.2.0}
+    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_MAINNET_RETH_VERSION:-v2.1.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/reth/ethereum-mainnet-reth-pruned-trace--nimbus.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-mainnet-reth-pruned:
-    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_MAINNET_RETH_VERSION:-v2.2.0}
+    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_MAINNET_RETH_VERSION:-v2.1.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/reth/ethereum-mainnet-reth-pruned-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-mainnet-reth-pruned:
-    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_MAINNET_RETH_VERSION:-v2.2.0}
+    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_MAINNET_RETH_VERSION:-v2.1.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/reth/ethereum-sepolia-reth-archive-trace--nimbus.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-sepolia-reth:
-    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_SEPOLIA_RETH_VERSION:-v2.2.0}
+    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_SEPOLIA_RETH_VERSION:-v2.1.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/reth/ethereum-sepolia-reth-archive-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-sepolia-reth:
-    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_SEPOLIA_RETH_VERSION:-v2.2.0}
+    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_SEPOLIA_RETH_VERSION:-v2.1.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/reth/ethereum-sepolia-reth-pruned-trace--nimbus.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-sepolia-reth-pruned:
-    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_SEPOLIA_RETH_VERSION:-v2.2.0}
+    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_SEPOLIA_RETH_VERSION:-v2.1.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

ethereum/reth/ethereum-sepolia-reth-pruned-trace.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   ethereum-sepolia-reth-pruned:
-    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_SEPOLIA_RETH_VERSION:-v2.2.0}
+    image: ${ETHEREUM_RETH_IMAGE:-ghcr.io/paradigmxyz/reth}:${ETHEREUM_SEPOLIA_RETH_VERSION:-v2.1.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

haqq/haqq/haqq-mainnet-haqq-pruned.yml

@@ -92,8 +92,8 @@ services:
       - traefik.http.routers.haqq-mainnet-haqq-pruned.service=haqq-mainnet-haqq-pruned
       - ${NO_SSL:-traefik.http.routers.haqq-mainnet-haqq-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.haqq-mainnet-haqq-pruned-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.haqq-mainnet-haqq-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/haqq-mainnet`) || Path(`/haqq-mainnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.haqq-mainnet-haqq-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/haqq-mainnet`) || Path(`/haqq-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.haqq-mainnet-haqq-pruned-ws.rule=(Path(`/haqq-mainnet`) || Path(`/haqq-mainnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.haqq-mainnet-haqq-pruned-ws.rule=(Path(`/haqq-mainnet`) || Path(`/haqq-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.haqq-mainnet-haqq-pruned-ws.middlewares=haqq-mainnet-haqq-pruned-stripprefix, ipallowlist
 
 volumes:

lens/external-node/lens-mainnet-external-node-archive.yml

@@ -107,8 +107,8 @@ services:
       - traefik.http.routers.lens-mainnet-external-node-archive.service=lens-mainnet-external-node-archive
       - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-archive-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-mainnet-archive`) || Path(`/lens-mainnet-archive/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-mainnet-archive`) || Path(`/lens-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.lens-mainnet-external-node-archive-ws.rule=(Path(`/lens-mainnet-archive`) || Path(`/lens-mainnet-archive/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.lens-mainnet-external-node-archive-ws.rule=(Path(`/lens-mainnet-archive`) || Path(`/lens-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.lens-mainnet-external-node-archive-ws.middlewares=lens-mainnet-external-node-archive-stripprefix, ipallowlist
 
   lens-mainnet-archive-db:

lens/external-node/lens-mainnet-external-node-pruned.yml

@@ -107,8 +107,8 @@ services:
       - traefik.http.routers.lens-mainnet-external-node-pruned.service=lens-mainnet-external-node-pruned
       - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-mainnet`) || Path(`/lens-mainnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-mainnet`) || Path(`/lens-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.lens-mainnet-external-node-pruned-ws.rule=(Path(`/lens-mainnet`) || Path(`/lens-mainnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.lens-mainnet-external-node-pruned-ws.rule=(Path(`/lens-mainnet`) || Path(`/lens-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.lens-mainnet-external-node-pruned-ws.middlewares=lens-mainnet-external-node-pruned-stripprefix, ipallowlist
 
   lens-mainnet-db:

lens/external-node/lens-testnet-external-node-archive.yml

@@ -106,8 +106,8 @@ services:
       - traefik.http.routers.lens-testnet-external-node-archive.service=lens-testnet-external-node-archive
       - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-archive-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-testnet-archive`) || Path(`/lens-testnet-archive/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-testnet-archive`) || Path(`/lens-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.lens-testnet-external-node-archive-ws.rule=(Path(`/lens-testnet-archive`) || Path(`/lens-testnet-archive/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.lens-testnet-external-node-archive-ws.rule=(Path(`/lens-testnet-archive`) || Path(`/lens-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.lens-testnet-external-node-archive-ws.middlewares=lens-testnet-external-node-archive-stripprefix, ipallowlist
 
   lens-testnet-archive-db:

lens/external-node/lens-testnet-external-node-pruned.yml

@@ -106,8 +106,8 @@ services:
       - traefik.http.routers.lens-testnet-external-node-pruned.service=lens-testnet-external-node-pruned
       - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-testnet`) || Path(`/lens-testnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-testnet`) || Path(`/lens-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.lens-testnet-external-node-pruned-ws.rule=(Path(`/lens-testnet`) || Path(`/lens-testnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.lens-testnet-external-node-pruned-ws.rule=(Path(`/lens-testnet`) || Path(`/lens-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.lens-testnet-external-node-pruned-ws.middlewares=lens-testnet-external-node-pruned-stripprefix, ipallowlist
 
   lens-testnet-db:

linea/besu/linea-mainnet-besu-pruned-bonsai.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   linea-mainnet:
-    image: ${LINEA_BESU_IMAGE:-consensys/linea-besu-package}:${LINEA_MAINNET_BESU_VERSION:-beta-v6.2-20260413130658-9cb6f11}
+    image: ${LINEA_BESU_IMAGE:-consensys/linea-besu-package}:${LINEA_MAINNET_BESU_VERSION:-1.1.0-20260611-4b80178}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -111,8 +111,8 @@ services:
       - traefik.http.routers.linea-mainnet-besu-pruned-bonsai.service=linea-mainnet-besu-pruned-bonsai
       - ${NO_SSL:-traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/linea-mainnet`) || Path(`/linea-mainnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/linea-mainnet`) || Path(`/linea-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.rule=(Path(`/linea-mainnet`) || Path(`/linea-mainnet/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.rule=(Path(`/linea-mainnet`) || Path(`/linea-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.middlewares=linea-mainnet-besu-pruned-bonsai-stripprefix, ipallowlist
 
   linea-mainnet-node:

linea/besu/linea-sepolia-besu-pruned-bonsai.yml

@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   linea-sepolia:
-    image: ${LINEA_BESU_IMAGE:-consensys/linea-besu-package}:${LINEA_SEPOLIA_BESU_VERSION:-beta-v6.2-20260413130658-9cb6f11}
+    image: ${LINEA_BESU_IMAGE:-consensys/linea-besu-package}:${LINEA_SEPOLIA_BESU_VERSION:-1.1.0-20260611-4b80178}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -111,8 +111,8 @@ services:
       - traefik.http.routers.linea-sepolia-besu-pruned-bonsai.service=linea-sepolia-besu-pruned-bonsai
       - ${NO_SSL:-traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/linea-sepolia`) || Path(`/linea-sepolia/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/linea-sepolia`) || Path(`/linea-sepolia/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.rule=(Path(`/linea-sepolia`) || Path(`/linea-sepolia/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.rule=(Path(`/linea-sepolia`) || Path(`/linea-sepolia/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.middlewares=linea-sepolia-besu-pruned-bonsai-stripprefix, ipallowlist
 
   linea-sepolia-node:

metis-andromeda/l2geth/metis-andromeda-mainnet-l2geth-archive-leveldb-hash.yml

@@ -121,8 +121,8 @@ services:
       - traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash.service=metis-andromeda-mainnet-l2geth-archive-leveldb-hash
       - ${NO_SSL:-traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.rule=Host(`$DOMAIN`) && (Path(`/metis-andromeda-mainnet-archive`) || Path(`/metis-andromeda-mainnet-archive/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:-traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.rule=Host(`$DOMAIN`) && (Path(`/metis-andromeda-mainnet-archive`) || Path(`/metis-andromeda-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
-      - ${NO_SSL:+traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.rule=(Path(`/metis-andromeda-mainnet-archive`) || Path(`/metis-andromeda-mainnet-archive/`)) && Headers(`Upgrade`, `websocket`)}
+      - ${NO_SSL:+traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.rule=(Path(`/metis-andromeda-mainnet-archive`) || Path(`/metis-andromeda-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.middlewares=metis-andromeda-mainnet-l2geth-archive-leveldb-hash-stripprefix, ipallowlist
 
   metis-andromeda-mainnet-archive-node:

metis-andromeda/l2geth/metis-andromeda-sepolia-l2geth-archive-leveldb-hash.yml

@@ -1,9 +1,37 @@
 ---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
 # Find archive snapshots on publicnode.com
 
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:metis-andromeda/l2geth/metis-andromeda-sepolia-l2geth-archive-leveldb-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/metis-andromeda-sepolia-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
 services:
-  metis-andromeda-sepolia-archive-client:
+  metis-andromeda-sepolia-archive:
-    image: ${METIS_ANDROMEDA_L2GETH_IMAGE:-metisdao/l2geth}:${METIS_ANDROMEDA_SEPOLIA_L2GETH_VERSION:-v0.3.5}
+    image: ${METIS_ANDROMEDA_L2GETH_IMAGE:-metisdao/l2geth}:${METIS_ANDROMEDA_SEPOLIA_L2GETH_VERSION:-v0.3.9}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -75,37 +103,35 @@ services:
     volumes:
       - ${METIS_ANDROMEDA_SEPOLIA_L2GETH_ARCHIVE_LEVELDB_HASH_DATA:-metis-andromeda-sepolia-l2geth-archive-leveldb-hash}:/root/.ethereum
       - /slowdisk:/slowdisk
-
+    logging: *logging-defaults
-  metis-andromeda-sepolia-archive:
-    image: nginx
-    environment:
-      PROXY_HOST: metis-andromeda-sepolia-archive-client
-      RPC_PATH: ''
-      RPC_PORT: 8545
-      WS_PATH: ''
-      WS_PORT: 8546
-    restart: unless-stopped
-    depends_on:
-      - metis-andromeda-sepolia-archive-client
-    networks:
-      - chains
-    volumes:
-      - ./nginx-proxy:/etc/nginx/templates
     labels:
+      - prometheus-scrape.enabled=false
       - traefik.enable=true
       - traefik.http.middlewares.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-stripprefix.stripprefix.prefixes=/metis-andromeda-sepolia-archive
-      - traefik.http.services.metis-andromeda-sepolia-l2geth-archive-leveldb-hash.loadbalancer.server.port=80
+      - traefik.http.services.metis-andromeda-sepolia-l2geth-archive-leveldb-hash.loadbalancer.server.port=8545
       - ${NO_SSL:-traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash.tls.certresolver=myresolver}
       - ${NO_SSL:-traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash.rule=Host(`$DOMAIN`) && (Path(`/metis-andromeda-sepolia-archive`) || Path(`/metis-andromeda-sepolia-archive/`))}
       - ${NO_SSL:+traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash.rule=Path(`/metis-andromeda-sepolia-archive`) || Path(`/metis-andromeda-sepolia-archive/`)}
       - traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash.middlewares=metis-andromeda-sepolia-l2geth-archive-leveldb-hash-stripprefix, ipallowlist
+      - traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash.priority=50   # gets any request that is not GET with UPGRADE header
+      - traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.priority=100   # answers GET requests first
+      - traefik.http.services.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.loadbalancer.server.port=8546
+      - traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.service=metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws
+      - traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash.service=metis-andromeda-sepolia-l2geth-archive-leveldb-hash
+      - ${NO_SSL:-traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.rule=Host(`$DOMAIN`) && (Path(`/metis-andromeda-sepolia-archive`) || Path(`/metis-andromeda-sepolia-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - ${NO_SSL:+traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.rule=(Path(`/metis-andromeda-sepolia-archive`) || Path(`/metis-andromeda-sepolia-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.middlewares=metis-andromeda-sepolia-l2geth-archive-leveldb-hash-stripprefix, ipallowlist
 
   metis-andromeda-sepolia-archive-node:
-    image: ${METIS_ANDROMEDA_DTL_IMAGE:-metisdao/dtl}:${METIS_ANDROMEDA_SEPOLIA_DTL_VERSION:-v0.1.3}
+    image: ${METIS_ANDROMEDA_DTL_IMAGE:-metisdao/dtl}:${METIS_ANDROMEDA_SEPOLIA_DTL_VERSION:-v0.2.6}
     ports:
       - 19563:19563
       - 19563:19563/udp
+    expose:
+      - 7878
     environment:
       - DATA_TRANSPORT_LAYER__BATCH_INBOX_ADDRESS=0xff00000000000000000000000001115511159902
       - DATA_TRANSPORT_LAYER__BATCH_INBOX_L1_HEIGHT=5536000
@@ -138,12 +164,15 @@ services:
       - URL=https://metisprotocol.github.io/metis-networks/sepolia-testnet/addresses.json
     restart: unless-stopped
     depends_on:
-      - metis-andromeda-sepolia-archive-client
+      - metis-andromeda-sepolia-archive
     networks:
       - chains
     volumes:
       - ${METIS_ANDROMEDA_SEPOLIA_L2GETH_ARCHIVE_LEVELDB_HASH__DTL_DATA:-metis-andromeda-sepolia-l2geth-archive-leveldb-hash_dtl}:/data
       - .jwtsecret:/jwtsecret:ro
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
 
 volumes:
   metis-andromeda-sepolia-l2geth-archive-leveldb-hash:
@@ -161,7 +190,7 @@ x-upstreams:
           frameSize: 20Mb
           msgSize: 50Mb
           url: $${WS_URL}
-    chain: $${CHAIN}
+    chain: metis-sepolia
     method-groups:
       enabled:
         - debug

monitoring.yml

@@ -169,7 +169,12 @@ services:
 
   telegraf:
     image: telegraf:latest
-    user: "0:994"
+    # Run as root and bypass the image's gosu privilege-drop so telegraf reads the
+    # docker socket as its OWNER (root). Avoids hardcoding the host docker group GID,
+    # which is auto-assigned and varies per host (e.g. 994 vs 988) - a hardcoded gid
+    # silently breaks telegraf's docker input wherever the gid differs.
+    user: "0:0"
+    entrypoint: ["telegraf"]
     container_name: telegraf
     restart: unless-stopped
     networks:
@@ -183,7 +188,7 @@ services:
       - "prometheus-scrape.enabled=true"
       - "prometheus-scrape.port=9273"
       - "prometheus-scrape.job_name=telegraf"
-      - "prometheus-scrape.metrics_path=/"
+      - "prometheus-scrape.metrics_path=/metrics"
 
   cadvisor:
     image: gcr.io/cadvisor/cadvisor
@@ -205,7 +210,7 @@ services:
       - "prometheus-scrape.enabled=true"
       - "prometheus-scrape.port=8080"
       - "prometheus-scrape.job_name=cadvisor"
-      - "prometheus-scrape.metrics_path=/"
+      - "prometheus-scrape.metrics_path=/metrics"
 
   nodeexporter:
     image: prom/node-exporter
@@ -228,7 +233,7 @@ services:
       - "prometheus-scrape.enabled=true"
       - "prometheus-scrape.port=9100"
       - "prometheus-scrape.job_name=nodeexporter"
-      - "prometheus-scrape.metrics_path=/"
+      - "prometheus-scrape.metrics_path=/metrics"
 
 volumes:
   prometheus_data:

morph/l2geth/morph-mainnet-l2geth-archive-leveldb-hash-mpt.yml

@@ -0,0 +1,198 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:morph/l2geth/morph-mainnet-l2geth-archive-leveldb-hash-mpt.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/morph-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  morph-mainnet-archive:
+    image: ${MORPH_L2GETH_IMAGE:-ghcr.io/morph-l2/go-ethereum}:${MORPH_MAINNET_L2GETH_VERSION:-2.2.3}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 11860:11860
+      - 11860:11860/udp
+    expose:
+      - 8545
+      - 6060
+      - 8551
+    command:
+      - --datadir=/root/.ethereum
+      - --gcmode=archive
+      - --maxpeers=50
+      - --metrics
+      - --metrics.addr=0.0.0.0
+      - --metrics.port=6060
+      - --morph
+      - --morph-mpt
+      - --nat=extip:${IP}
+      - --port=11860
+      - --rpc.gascap=600000000
+      - --rpc.txfeecap=0
+      - --syncmode=full
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=web3,debug,eth,txpool,net,morph,engine,admin
+      - --http.port=8545
+      - --http.vhosts=*
+      - --ws
+      - --ws.addr=0.0.0.0
+      - --ws.api=web3,debug,eth,txpool,net,morph,engine,admin
+      - --ws.origins=*
+      - --ws.port=8545
+      - --authrpc.addr=0.0.0.0
+      - --authrpc.jwtsecret=/jwtsecret
+      - --authrpc.vhosts=*
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${MORPH_MAINNET_L2GETH_ARCHIVE_LEVELDB_HASH_MPT_DATA:-morph-mainnet-l2geth-archive-leveldb-hash-mpt}:/root/.ethereum
+      - ./morph/mainnet:/config
+      - .jwtsecret:/jwtsecret:ro
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6060
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.morph-mainnet-l2geth-archive-leveldb-hash-mpt-stripprefix.stripprefix.prefixes=/morph-mainnet-archive
+      - traefik.http.services.morph-mainnet-l2geth-archive-leveldb-hash-mpt.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.morph-mainnet-l2geth-archive-leveldb-hash-mpt.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.morph-mainnet-l2geth-archive-leveldb-hash-mpt.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.morph-mainnet-l2geth-archive-leveldb-hash-mpt.rule=Host(`$DOMAIN`) && (Path(`/morph-mainnet-archive`) || Path(`/morph-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.morph-mainnet-l2geth-archive-leveldb-hash-mpt.rule=Path(`/morph-mainnet-archive`) || Path(`/morph-mainnet-archive/`)}
+      - traefik.http.routers.morph-mainnet-l2geth-archive-leveldb-hash-mpt.middlewares=morph-mainnet-l2geth-archive-leveldb-hash-mpt-stripprefix, ipallowlist
+
+  morph-mainnet-archive-node-init:
+    image: alpine:3.20
+    entrypoint: [/bin/sh, -c]
+    command:
+      - |
+        mkdir -p /db/config /db/data
+        cp -n /seed/config.toml  /db/config/config.toml
+        cp -n /seed/genesis.json /db/config/genesis.json
+        [ -f /db/data/priv_validator_state.json ] || echo '{"height":"0","round":0,"step":0}' > /db/data/priv_validator_state.json
+    restart: no
+    networks:
+      - chains
+    volumes:
+      - ./morph/mainnet/node-data/config:/seed:ro
+      - morph-mainnet-l2geth-archive-leveldb-hash-mpt_morph:/db
+    logging: *logging-defaults
+
+  morph-mainnet-archive-node:
+    image: ${MORPH_MORPH_IMAGE:-ghcr.io/morph-l2/node}:${MORPH_MAINNET_MORPH_VERSION:-0.5.7}
+    ports:
+      - 26656:26656
+      - 26656:26656/udp
+    expose:
+      - 26657
+      - 26658
+    environment:
+      - MORPH_NODE_L1_CHAIN_ID=1
+      - MORPH_NODE_L1_ETH_RPC=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - MORPH_NODE_L2_ENGINE_AUTH=/jwtsecret
+      - MORPH_NODE_L2_ENGINE_RPC=http://morph-mainnet-archive:8551
+      - MORPH_NODE_L2_ETH_RPC=http://morph-mainnet-archive:8545
+      - MORPH_NODE_ROLLUP_ADDRESS=0x759894ced0e6af42c26668076ffa84d02e3cef60
+      - MORPH_NODE_SYNC_START_HEIGHT=24883052
+    entrypoint: [morphnode, --home, /db, --log.filename, /db/node.log, --mainnet]
+    restart: unless-stopped
+    depends_on:
+      morph-mainnet-archive-node-init:
+        condition: service_completed_successfully
+      morph-mainnet-archive:
+        condition: service_started
+    networks:
+      - chains
+    volumes:
+      - ${MORPH_MAINNET_L2GETH_ARCHIVE_LEVELDB_HASH_MPT__MORPH_DATA:-morph-mainnet-l2geth-archive-leveldb-hash-mpt_morph}:/db
+      - ./morph/mainnet:/config
+      - .jwtsecret:/jwtsecret:ro
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=26660
+      - prometheus-scrape.path=/metrics
+
+volumes:
+  morph-mainnet-l2geth-archive-leveldb-hash-mpt:
+  morph-mainnet-l2geth-archive-leveldb-hash-mpt_morph:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: morph
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

morph/mainnet/node-data/config/config.toml

@@ -0,0 +1,476 @@
+# This is a TOML config file.
+# For more information, see https://github.com/toml-lang/toml
+
+# NOTE: Any path below can be absolute (e.g. "/var/myawesomeapp/data") or
+# relative to the home directory (e.g. "data"). The home directory is
+# "$HOME/.tendermint" by default, but could be changed via $TMHOME env variable
+# or --home cmd flag.
+
+#######################################################################
+###                   Main Base Config Options                      ###
+#######################################################################
+
+# TCP or UNIX socket address of the ABCI application,
+# or the name of an ABCI application compiled in with the Tendermint binary
+proxy_app = "tcp://127.0.0.1:26658"
+
+# A custom human readable name for this node
+moniker = "my-morph-node"
+
+# If this node is many blocks behind the tip of the chain, BlockSync
+# allows them to catchup quickly by downloading blocks in parallel
+# and verifying their commits
+block_sync = true
+
+# Database backend: goleveldb | cleveldb | boltdb | rocksdb | badgerdb
+# * goleveldb (github.com/syndtr/goleveldb - most popular implementation)
+#   - pure go
+#   - stable
+# * cleveldb (uses levigo wrapper)
+#   - fast
+#   - requires gcc
+#   - use cleveldb build tag (go build -tags cleveldb)
+# * boltdb (uses etcd's fork of bolt - github.com/etcd-io/bbolt)
+#   - EXPERIMENTAL
+#   - may be faster is some use-cases (random reads - indexer)
+#   - use boltdb build tag (go build -tags boltdb)
+# * rocksdb (uses github.com/tecbot/gorocksdb)
+#   - EXPERIMENTAL
+#   - requires gcc
+#   - use rocksdb build tag (go build -tags rocksdb)
+# * badgerdb (uses github.com/dgraph-io/badger)
+#   - EXPERIMENTAL
+#   - use badgerdb build tag (go build -tags badgerdb)
+db_backend = "goleveldb"
+
+# Database directory
+db_dir = "data"
+
+# Output level for logging, including package level options
+log_level = "info"
+
+# Output format: 'plain' (colored text) or 'json'
+log_format = "plain"
+
+##### additional base config options #####
+
+# Path to the JSON file containing the initial validator set and other meta data
+genesis_file = "config/genesis.json"
+
+# Path to the JSON file containing the private key to use as a validator in the consensus protocol
+priv_validator_key_file = "config/priv_validator_key.json"
+
+# Path to the JSON file containing the last sign state of a validator
+priv_validator_state_file = "data/priv_validator_state.json"
+
+# TCP or UNIX socket address for Tendermint to listen on for
+# connections from an external PrivValidator process
+priv_validator_laddr = ""
+
+# Path to the JSON file containing the private key to use for node authentication in the p2p protocol
+node_key_file = "config/node_key.json"
+
+# Mechanism to connect to the ABCI application: socket | grpc
+abci = "socket"
+
+# If true, query the ABCI app on connecting to a new peer
+# so the app can decide if we should keep the connection or not
+filter_peers = false
+
+
+#######################################################################
+###                 Advanced Configuration Options                  ###
+#######################################################################
+
+#######################################################
+###       RPC Server Configuration Options          ###
+#######################################################
+[rpc]
+
+# TCP or UNIX socket address for the RPC server to listen on
+laddr = "tcp://0.0.0.0:26657"
+
+# A list of origins a cross-domain request can be executed from
+# Default value '[]' disables cors support
+# Use '["*"]' to allow any origin
+cors_allowed_origins = []
+
+# A list of methods the client is allowed to use with cross-domain requests
+cors_allowed_methods = ["HEAD", "GET", "POST"]
+
+# A list of non simple headers the client is allowed to use with cross-domain requests
+cors_allowed_headers = [
+    "Origin",
+    "Accept",
+    "Content-Type",
+    "X-Requested-With",
+    "X-Server-Time",
+]
+
+# TCP or UNIX socket address for the gRPC server to listen on
+# NOTE: This server only supports /broadcast_tx_commit
+grpc_laddr = ""
+
+# Maximum number of simultaneous connections.
+# Does not include RPC (HTTP&WebSocket) connections. See max_open_connections
+# If you want to accept a larger number than the default, make sure
+# you increase your OS limits.
+# 0 - unlimited.
+# Should be < {ulimit -Sn} - {MaxNumInboundPeers} - {MaxNumOutboundPeers} - {N of wal, db and other open files}
+# 1024 - 40 - 10 - 50 = 924 = ~900
+grpc_max_open_connections = 900
+
+# Activate unsafe RPC commands like /dial_seeds and /unsafe_flush_mempool
+unsafe = false
+
+# Maximum number of simultaneous connections (including WebSocket).
+# Does not include gRPC connections. See grpc_max_open_connections
+# If you want to accept a larger number than the default, make sure
+# you increase your OS limits.
+# 0 - unlimited.
+# Should be < {ulimit -Sn} - {MaxNumInboundPeers} - {MaxNumOutboundPeers} - {N of wal, db and other open files}
+# 1024 - 40 - 10 - 50 = 924 = ~900
+max_open_connections = 900
+
+# Maximum number of unique clientIDs that can /subscribe
+# If you're using /broadcast_tx_commit, set to the estimated maximum number
+# of broadcast_tx_commit calls per block.
+max_subscription_clients = 100
+
+# Maximum number of unique queries a given client can /subscribe to
+# If you're using GRPC (or Local RPC client) and /broadcast_tx_commit, set to
+# the estimated # maximum number of broadcast_tx_commit calls per block.
+max_subscriptions_per_client = 5
+
+# Experimental parameter to specify the maximum number of events a node will
+# buffer, per subscription, before returning an error and closing the
+# subscription. Must be set to at least 100, but higher values will accommodate
+# higher event throughput rates (and will use more memory).
+experimental_subscription_buffer_size = 200
+
+# Experimental parameter to specify the maximum number of RPC responses that
+# can be buffered per WebSocket client. If clients cannot read from the
+# WebSocket endpoint fast enough, they will be disconnected, so increasing this
+# parameter may reduce the chances of them being disconnected (but will cause
+# the node to use more memory).
+#
+# Must be at least the same as "experimental_subscription_buffer_size",
+# otherwise connections could be dropped unnecessarily. This value should
+# ideally be somewhat higher than "experimental_subscription_buffer_size" to
+# accommodate non-subscription-related RPC responses.
+experimental_websocket_write_buffer_size = 200
+
+# If a WebSocket client cannot read fast enough, at present we may
+# silently drop events instead of generating an error or disconnecting the
+# client.
+#
+# Enabling this experimental parameter will cause the WebSocket connection to
+# be closed instead if it cannot read fast enough, allowing for greater
+# predictability in subscription behavior.
+experimental_close_on_slow_client = false
+
+# How long to wait for a tx to be committed during /broadcast_tx_commit.
+# WARNING: Using a value larger than 10s will result in increasing the
+# global HTTP write timeout, which applies to all connections and endpoints.
+# See https://github.com/tendermint/tendermint/issues/3435
+timeout_broadcast_tx_commit = "10s"
+
+# Maximum size of request body, in bytes
+max_body_bytes = 1000000
+
+# Maximum size of request header, in bytes
+max_header_bytes = 1048576
+
+# The path to a file containing certificate that is used to create the HTTPS server.
+# Might be either absolute path or path related to Tendermint's config directory.
+# If the certificate is signed by a certificate authority,
+# the certFile should be the concatenation of the server's certificate, any intermediates,
+# and the CA's certificate.
+# NOTE: both tls_cert_file and tls_key_file must be present for Tendermint to create HTTPS server.
+# Otherwise, HTTP server is run.
+tls_cert_file = ""
+
+# The path to a file containing matching private key that is used to create the HTTPS server.
+# Might be either absolute path or path related to Tendermint's config directory.
+# NOTE: both tls-cert-file and tls-key-file must be present for Tendermint to create HTTPS server.
+# Otherwise, HTTP server is run.
+tls_key_file = ""
+
+# pprof listen address (https://golang.org/pkg/net/http/pprof)
+pprof_laddr = ""
+
+#######################################################
+###           P2P Configuration Options             ###
+#######################################################
+[p2p]
+
+# Address to listen for incoming connections
+laddr = "tcp://0.0.0.0:26656"
+
+# Address to advertise to peers for them to dial
+# If empty, will use the same port as the laddr,
+# and will introspect on the listener or use UPnP
+# to figure out the address. ip and port are required
+# example: 159.89.10.97:26656
+external_address = ""
+
+# Comma separated list of seed nodes to connect to
+seeds = ""
+
+# Comma separated list of nodes to keep persistent connections to
+persistent_peers = """b4ac59de479b0251d441ca0385429bc21713a208@52.68.143.73:26656,\
+35e856eea85a868ec98379d7a816efa26054460e@35.75.86.31:26656,\
+5ecba1fa6f4d351b5a6bda8de1c7ab03634dd31c@3.115.67.232:26656"""
+
+# UPNP port forwarding
+upnp = false
+
+# Path to address book
+addr_book_file = "config/addrbook.json"
+
+# Set true for strict address routability rules
+# Set false for private or local networks
+addr_book_strict = false
+
+# Maximum number of inbound peers
+max_num_inbound_peers = 40
+
+# Maximum number of outbound peers to connect to, excluding persistent peers
+max_num_outbound_peers = 10
+
+# List of node IDs, to which a connection will be (re)established ignoring any existing limits
+unconditional_peer_ids = ""
+
+# Maximum pause when redialing a persistent peer (if zero, exponential backoff is used)
+persistent_peers_max_dial_period = "0s"
+
+# Time to wait before flushing messages out on the connection
+flush_throttle_timeout = "10ms"
+
+# Maximum size of a message packet payload, in bytes
+max_packet_msg_payload_size = 1024
+
+# Rate at which packets can be sent, in bytes/second
+send_rate = 52428800
+
+# Rate at which packets can be received, in bytes/second
+recv_rate = 102428800
+
+# Set true to enable the peer-exchange reactor
+pex = true
+
+# Seed mode, in which node constantly crawls the network and looks for
+# peers. If another node asks it for addresses, it responds and disconnects.
+#
+# Does not work if the peer-exchange reactor is disabled.
+seed_mode = false
+
+# Comma separated list of peer IDs to keep private (will not be gossiped to other peers)
+private_peer_ids = ""
+
+# Toggle to disable guard against peers connecting from the same ip.
+allow_duplicate_ip = true
+
+# Peer connection configuration.
+handshake_timeout = "20s"
+dial_timeout = "3s"
+
+#######################################################
+###          Mempool Configuration Option          ###
+#######################################################
+[mempool]
+
+# Mempool version to use:
+#   1) "v0" - (default) FIFO mempool.
+#   2) "v1" - prioritized mempool.
+version = "v0"
+
+recheck = true
+broadcast = true
+wal_dir = ""
+
+# Maximum number of transactions in the mempool
+size = 5000
+
+# Limit the total size of all txs in the mempool.
+# This only accounts for raw transactions (e.g. given 1MB transactions and
+# max_txs_bytes=5MB, mempool will only accept 5 transactions).
+max_txs_bytes = 1073741824
+
+# Size of the cache (used to filter transactions we saw earlier) in transactions
+cache_size = 10000
+
+# Do not remove invalid transactions from the cache (default: false)
+# Set to true if it's not possible for any invalid transaction to become valid
+# again in the future.
+keep-invalid-txs-in-cache = false
+
+# Maximum size of a single transaction.
+# NOTE: the max size of a tx transmitted over the network is {max_tx_bytes}.
+max_tx_bytes = 1048576
+
+# Maximum size of a batch of transactions to send to a peer
+# Including space needed by encoding (one varint per transaction).
+# XXX: Unused due to https://github.com/tendermint/tendermint/issues/5796
+max_batch_bytes = 0
+
+# ttl-duration, if non-zero, defines the maximum amount of time a transaction
+# can exist for in the mempool.
+#
+# Note, if ttl-num-blocks is also defined, a transaction will be removed if it
+# has existed in the mempool at least ttl-num-blocks number of blocks or if it's
+# insertion time into the mempool is beyond ttl-duration.
+ttl-duration = "0s"
+
+# ttl-num-blocks, if non-zero, defines the maximum number of blocks a transaction
+# can exist for in the mempool.
+#
+# Note, if ttl-duration is also defined, a transaction will be removed if it
+# has existed in the mempool at least ttl-num-blocks number of blocks or if
+# it's insertion time into the mempool is beyond ttl-duration.
+ttl-num-blocks = 0
+
+#######################################################
+###         State Sync Configuration Options        ###
+#######################################################
+[statesync]
+# State sync rapidly bootstraps a new node by discovering, fetching, and restoring a state machine
+# snapshot from peers instead of fetching and replaying historical blocks. Requires some peers in
+# the network to take and serve state machine snapshots. State sync is not attempted if the node
+# has any local state (LastBlockHeight > 0). The node will have a truncated block history,
+# starting from the height of the snapshot.
+enable = false
+
+# RPC servers (comma-separated) for light client verification of the synced state machine and
+# retrieval of state data for node bootstrapping. Also needs a trusted height and corresponding
+# header hash obtained from a trusted source, and a period during which validators can be trusted.
+#
+# For Cosmos SDK-based chains, trust_period should usually be about 2/3 of the unbonding time (~2
+# weeks) during which they can be financially punished (slashed) for misbehavior.
+rpc_servers = ""
+trust_height = 0
+trust_hash = ""
+trust_period = "168h0m0s"
+
+# Time to spend discovering snapshots before initiating a restore.
+discovery_time = "15s"
+
+# Temporary directory for state sync snapshot chunks, defaults to the OS tempdir (typically /tmp).
+# Will create a new, randomly named directory within, and remove it when done.
+temp_dir = ""
+
+# The timeout duration before re-requesting a chunk, possibly from a different
+# peer (default: 1 minute).
+chunk_request_timeout = "10s"
+
+# The number of concurrent chunk fetchers to run (default: 1).
+chunk_fetchers = "4"
+
+#######################################################
+###       Block Sync Configuration Options          ###
+#######################################################
+[blocksync]
+
+# Block Sync version to use:
+# 
+# In v0.37, v1 and v2 of the block sync protocols were deprecated.
+# Please use v0 instead.
+#
+#   1) "v0" - the default block sync implementation
+version = "v0"
+
+#######################################################
+###         Consensus Configuration Options         ###
+#######################################################
+[consensus]
+
+wal_file = "data/cs.wal/wal"
+
+# How long we wait for a proposal block before prevoting nil
+timeout_propose = "3s"
+# How much timeout_propose increases with each round
+timeout_propose_delta = "500ms"
+# How long we wait after receiving +2/3 prevotes for “anything” (ie. not a single block or nil)
+timeout_prevote = "1s"
+# How much the timeout_prevote increases with each round
+timeout_prevote_delta = "500ms"
+# How long we wait after receiving +2/3 precommits for “anything” (ie. not a single block or nil)
+timeout_precommit = "1s"
+# How much the timeout_precommit increases with each round
+timeout_precommit_delta = "500ms"
+# How long we wait after committing a block, before starting on the new
+# height (this gives us a chance to receive some more precommits, even
+# though we already have +2/3).
+timeout_commit = "1s"
+
+# How many blocks to look back to check existence of the node's consensus votes before joining consensus
+# When non-zero, the node will panic upon restart
+# if the same consensus key was used to sign {double_sign_check_height} last blocks.
+# So, validators should stop the state machine, wait for some blocks, and then restart the state machine to avoid panic.
+double_sign_check_height = 0
+
+# Make progress as soon as we have all the precommits (as if TimeoutCommit = 0)
+skip_timeout_commit = false
+
+# EmptyBlocks mode and possible interval between empty blocks
+create_empty_blocks = true
+create_empty_blocks_interval = "4s"
+
+# Reactor sleep duration parameters
+peer_gossip_sleep_duration = "10ms"
+peer_query_maj23_sleep_duration = "2s"
+
+#######################################################
+###         Storage Configuration Options           ###
+#######################################################
+[storage]
+
+# Set to true to discard ABCI responses from the state store, which can save a
+# considerable amount of disk space. Set to false to ensure ABCI responses are
+# persisted. ABCI responses are required for /block_results RPC queries, and to
+# reindex events in the command-line tool.
+discard_abci_responses = false
+
+#######################################################
+###   Transaction Indexer Configuration Options     ###
+#######################################################
+[tx_index]
+
+# What indexer to use for transactions
+#
+# The application will set which txs to index. In some cases a node operator will be able
+# to decide which txs to index based on configuration set in the application.
+#
+# Options:
+#   1) "null"
+#   2) "kv" (default) - the simplest possible indexer, backed by key-value storage (defaults to levelDB; see DBBackend).
+# 		- When "kv" is chosen "tx.height" and "tx.hash" will always be indexed.
+#   3) "psql" - the indexer services backed by PostgreSQL.
+# When "kv" or "psql" is chosen "tx.height" and "tx.hash" will always be indexed.
+indexer = "kv"
+
+# The PostgreSQL connection configuration, the connection format:
+#   postgresql://<user>:<password>@<host>:<port>/<db>?<opts>
+psql-conn = ""
+
+#######################################################
+###       Instrumentation Configuration Options     ###
+#######################################################
+[instrumentation]
+
+# When true, Prometheus metrics are served under /metrics on
+# PrometheusListenAddr.
+# Check out the documentation for the list of available metrics.
+prometheus = true
+
+# Address to listen for Prometheus collector(s) connections
+prometheus_listen_addr = ":26660"
+
+# Maximum number of simultaneous connections.
+# If you want to accept a larger number than the default, make sure
+# you increase your OS limits.
+# 0 - unlimited.
+max_open_connections = 3
+
+# Instrumentation namespace
+namespace = "tendermint"

morph/mainnet/node-data/config/genesis.json

@@ -0,0 +1,96 @@
+{
+    "genesis_time": "2024-10-21T06:00:00.000000Z",
+    "chain_id": "chain-morph-mainnet",
+    "initial_height": "0",
+    "consensus_params": {
+      "batch": {
+        "blocks_interval": "600",
+        "max_bytes": "124928",
+        "timeout": "1200000000000",
+        "max_chunks": "45"
+      },
+      "block": {
+        "max_bytes": "22020096",
+        "max_gas": "-1"
+      },
+      "evidence": {
+        "max_age_num_blocks": "100000",
+        "max_age_duration": "172800000000000",
+        "max_bytes": "1048576"
+      },
+      "validator": {
+        "pub_key_types": [
+          "ed25519"
+        ]
+      },
+      "version": {
+        "app": "0"
+      }
+    },
+    "validators": [
+      {
+        "address": "C4C03D7EACF69EA292EC5CF715DF6EEB37C2511E",
+        "pub_key": {
+            "type": "tendermint/PubKeyEd25519",
+            "value": "LX3NK5P8re9F/N9lRTEYql0++uJ+MUbVBGRTGxn8r7Q="
+        },
+        "power": "1",
+        "name": "node0"
+      },
+      {
+        "address": "0C42B6A9A67987B99441CF75BC352DE67827141D",
+        "pub_key": {
+            "type": "tendermint/PubKeyEd25519",
+            "value": "Ty4Puoo/5wmw2ZI+E7aZJLkMuIn4BtPO/ppW2STzmDk="
+        },
+        "power": "1",
+        "name": "node1"
+      },
+      {
+        "address": "982B4E591331447E5D16FAD9DA714D2A12D8CB44",
+        "pub_key": {
+            "type": "tendermint/PubKeyEd25519",
+            "value": "id7Ro5uCe3oAH7tv2pwmRBtnvwpYa47lIjbK99Km68o="
+        },
+        "power": "1",
+        "name": "node2"
+      },
+      {
+        "address": "CCB261D3D07500A041CBF8DBDA8BAF6C30D442D9",
+        "pub_key": {
+            "type": "tendermint/PubKeyEd25519",
+            "value": "RTumlijhEDvRrmitZjIAUnajUI0SztEP1pFdVVH/Ct4="
+        },
+        "power": "1",
+        "name": "node3"
+      },
+      {
+        "address": "4321301E015EB29A934841DDF3F1C8DEF2FAA1B5",
+        "pub_key": {
+            "type": "tendermint/PubKeyEd25519",
+            "value": "vn5xGoYJVQVbvEl00qr+JpKw0+zrp3INKNKbJfNLJ6E="
+        },
+        "power": "1",
+        "name": "node4"
+      },
+      {
+        "address": "83ED2116E889494AB9017530EF8D833DF8358B07",
+        "pub_key": {
+            "type": "tendermint/PubKeyEd25519",
+            "value": "d6GgF1neO2k+wajm0IOgW6ymGhf6q7F1RJpjtwgFbHk="
+        },
+        "power": "1",
+        "name": "node5"
+      },
+      {
+        "address": "8E04413FCC1BA73C7AEB86D9A1479C3BE47012CE",
+        "pub_key": {
+            "type": "tendermint/PubKeyEd25519",
+            "value": "aO4/nCUoLHHYHjTUGI/CUUpByXuMtdkJzHimJLHifLo="
+        },
+        "power": "1",
+        "name": "node6"
+      }
+    ],
+    "app_hash": ""
+  }

multicurl.sh

@@ -43,7 +43,11 @@ for url in "${urls[@]}"; do
     output=$(eval "curl -s ${options[@]@Q} '$url' --fail")
     if [[ $? -eq 0 ]]; then
 
-        if cat "$temp_file" | jq -e 'has("error")' > /dev/null 2>&1; then
+        # Skip and try the next reference URL when the response is a JSON-RPC error OR has a
+        # null result (a lagging endpoint that doesn't have the requested block/data yet).
+        # Without the result==null check the first endpoint's {"result":null} was accepted as
+        # success and the remaining fallback URLs were never tried.
+        if cat "$temp_file" | jq -e 'has("error") or (.result == null)' > /dev/null 2>&1; then
             continue  # Try the next URL
         fi
 

nodeexporter.yml

@@ -18,6 +18,7 @@ services:
       - "prometheus-scrape.enabled=true"
       - "prometheus-scrape.port=9100"
       - "prometheus-scrape.job_name=nodeexporter"
+      - "prometheus-scrape.metrics_path=/metrics"
       - "org.label-schema.group=monitoring"
     networks:
       - monitoring

op/bob.by/mainnet/node.env

@@ -1 +0,0 @@
-OP_NODE_OVERRIDE_JOVIAN=1773325801

op/bob.by/sepolia/rollup.json

@@ -1,43 +0,0 @@
-{
-    "genesis": {
-      "l1": {
-        "hash": "0x3908ceae1d5aa3135f57fa1017231bb62c2e661e966a68fe80fd7dff0a2e7564",
-        "number": 6404314
-      },
-      "l2": {
-        "hash": "0xa286e5b6f82269ac1477f4136c09fb5c2ac9f005837ed2852610fc3e559b7256",
-        "number": 0
-      },
-      "l2_time": 1722352488,
-      "system_config": {
-        "batcherAddr": "0x0c2ac914b2378e5afaecbab08a171c769d34947c",
-        "overhead": "0x00000000000000000000000000000000000000000000000000000000000000bc",
-        "scalar": "0x00000000000000000000000000000000000000000000000000000000000a6fe0",
-        "gasLimit": 30000000
-      }
-    },
-    "block_time": 2,
-    "max_sequencer_drift": 600,
-    "seq_window_size": 3600,
-    "channel_timeout": 300,
-    "l1_chain_id": 11155111,
-    "l2_chain_id": 808813,
-    "regolith_time": 0,
-    "canyon_time": 0,
-    "delta_time": 0,
-    "ecotone_time": 0,
-    "fjord_time": 0,
-    "granite_time": 1725984001,
-    "holocene_time": 1732633200,
-    "isthmus_time": 1744905600,
-    "batch_inbox_address": "0x734dde12fd466c14a85de838788efe6f1993c84c",
-    "deposit_contract_address": "0xbaaf3bafdbd660380938b27d21c31bb7d072a799",
-    "l1_system_config_address": "0x3974436fa4bb4deb5a04ace51a704b10ff5a1f25",
-    "protocol_versions_address": "0x0000000000000000000000000000000000000000",
-    "chain_op_config": {
-      "eip1559Elasticity": 6,
-      "eip1559Denominator": 50,
-      "eip1559DenominatorCanyon": 250
-    }
-  }
-  

op/bob/sepolia/genesis.json

@@ -25,6 +25,7 @@
       "graniteTime": 1725984001,
       "holoceneTime": 1732633200,
       "isthmusTime": 1744905600,
+      "jovianTime": 1772548201,
       "pragueTime": 1744905600,
       "terminalTotalDifficulty": 0,
       "terminalTotalDifficultyPassed": true,

op/bob/sepolia/rollup.json

@@ -0,0 +1,44 @@
+{
+  "genesis": {
+    "l1": {
+      "hash": "0x3908ceae1d5aa3135f57fa1017231bb62c2e661e966a68fe80fd7dff0a2e7564",
+      "number": 6404314
+    },
+    "l2": {
+      "hash": "0xa286e5b6f82269ac1477f4136c09fb5c2ac9f005837ed2852610fc3e559b7256",
+      "number": 0
+    },
+    "l2_time": 1722352488,
+    "system_config": {
+      "batcherAddr": "0x0c2ac914b2378e5afaecbab08a171c769d34947c",
+      "overhead": "0x00000000000000000000000000000000000000000000000000000000000000bc",
+      "scalar": "0x00000000000000000000000000000000000000000000000000000000000a6fe0",
+      "gasLimit": 30000000
+    }
+  },
+  "block_time": 2,
+  "max_sequencer_drift": 600,
+  "seq_window_size": 3600,
+  "channel_timeout": 300,
+  "l1_chain_id": 11155111,
+  "l2_chain_id": 808813,
+  "regolith_time": 0,
+  "canyon_time": 0,
+  "delta_time": 0,
+  "ecotone_time": 0,
+  "fjord_time": 0,
+  "granite_time": 1725984001,
+  "holocene_time": 1732633200,
+  "isthmus_time": 1744905600,
+  "jovian_time": 1772548201,
+  "pectra_blob_schedule_time": 1742486400,
+  "batch_inbox_address": "0x734dde12fd466c14a85de838788efe6f1993c84c",
+  "deposit_contract_address": "0xbaaf3bafdbd660380938b27d21c31bb7d072a799",
+  "l1_system_config_address": "0x3974436fa4bb4deb5a04ace51a704b10ff5a1f25",
+  "protocol_versions_address": "0x0000000000000000000000000000000000000000",
+  "chain_op_config": {
+    "eip1559Elasticity": 6,
+    "eip1559Denominator": 50,
+    "eip1559DenominatorCanyon": 250
+  }
+}