abcore: add mainnet genesis.json and config.toml for AB Core chain (36888)

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>

.gitignore

@@ -0,0 +1,17 @@
+.env
+peer-backups/
+
+# R-2 (fleet-audit): keep chaindata/snapshots/tarballs out of git status. Some land
+# in-tree via per-host _DATA overrides or snapshot staging; evict to /slowdisk at the
+# next maintenance window — see fleet-audit-2026-07-07.md §R-2.
+*.tar
+*.tar.*
+*.lz4
+*.zst
+snapshots/
+*.bak
+*.swp
+
+# Task C local peer capture state
+peer-state/
+

CURSOR.md

@@ -0,0 +1,729 @@
+# VIBE.md — ethereum-rpc-docker Operations & Debugging Guide
+
+You are an LLM agent or operator **running or debugging blockchain RPC nodes** from this
+repository. This file is your **primary reference** for all operational tasks.
+
+This repo contains Docker Compose configurations for blockchain RPC nodes plus operational
+scripts for managing them. Everything you need to run, monitor, debug, and fix nodes is here.
+
+---
+
+## 0. WHEN A NODE IS FAULTY — Start Here
+
+### Immediate Triage (30 seconds)
+
+```bash
+# 1. Is the container running?
+./show-running.sh
+
+# 2. Check overall status of all configured nodes
+./show-status.sh
+
+# 3. If you know the config name, check its specific status
+./sync-status.sh <config-name>
+
+# 4. Check logs for the faulty node
+./logs.sh <config-name>
+```
+
+**If the container isn't running**, go to [§3. Container Lifecycle Issues](#3-container-lifecycle-issues)
+
+**If the container is running but not synced**, go to [§4. Sync Issues](#4-sync-issues)
+
+**If the container is running and synced but RPC fails**, go to [§5. RPC/Connectivity Issues](#5-rpcconnectivity-issues)
+
+**If you see errors in logs but aren't sure what they mean**, go to [§6. Log Interpretation](#6-log-interpretation)
+
+---
+
+## 1. Repository Overview
+
+### What This Repo Contains
+
+```
+rpc/
+├── *.yml                    # Docker Compose files for node configurations
+├── *.sh                     # Operational scripts (YOUR PRIMARY TOOLS)
+├── scripts/                 # Additional helper scripts (CometBFT support)
+├── <network>/               # Network directories (e.g., ethereum/, op/, arb/)
+│   ├── *.yml                # Compose files for specific chains
+│   └── <chain>/             # Chain-specific assets
+│       ├── genesis.json     # Custom genesis files
+│       ├── rollup.json      # Rollup configurations (OP Stack)
+│       └── *.Dockerfile      # Custom build files
+├── README.md                # User documentation
+└── VIBE.md                  # THIS FILE — operations guide
+```
+
+### Key Concepts
+
+- **Config name**: The compose filename WITHOUT `.yml` (e.g., `ethereum-mainnet-geth-pruned`)
+- **Service name**: Derived from config name, used in `docker compose` commands
+- **Short name**: Used in URL paths, container labels. Format: `{network}-{chain}[-{client}][-{db_type}]`
+- **Volume names**: Docker volumes follow the full config name pattern
+
+### Supported Networks
+
+**Layer 1**: Ethereum, Polygon, BSC, Avalanche, Gnosis, Fantom, Core, Berachain, Ronin, Viction, Fuse, Tron, ThunderCore, Goat, AlephZero, Haqq, Taiko, Rootstock, Dogecoin, Litecoin, Bitcoin, Bitcoin-Cash, Ripple, Solana, Tron
+
+**Layer 2 (OP Stack)**: Optimism, Base, Zora, Mode, Blast, Fraxtal, Bob, Boba, Worldchain, Metal, Ink, Lisk, SNAX, Celo
+
+**Layer 2 (Arbitrum)**: Arbitrum One, Arbitrum Nova, Everclear, Playblock, Real, Connext, OpenCampusCodex
+
+**Other L2s**: Linea, Scroll, zkSync Era, Metis, Moonbeam, Starknet, zkEVM, Immutable zkEVM, Polygon zkEVM
+
+---
+
+## 2. Essential Scripts Reference
+
+### Status & Monitoring Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `show-status.sh` | `[config-name]` | Lists ALL configured nodes with sync status, block height, health |
+| `show-running.sh` | | Lists currently running containers |
+| `sync-status.sh` | `<config-name>` | Detailed sync status for one config |
+| `latest.sh` | `<config-name>` | Latest block number + hash |
+| `logs.sh` | `<config-name>` | Tail logs from all containers in a config |
+| `show-db-size.sh` | | Disk usage of ALL Docker volumes, sorted by size |
+| `show-ram.sh` | `<config-name>` | Memory usage of containers |
+| `show-cpu.sh` | | CPU usage display |
+| `peer-count.sh` | | P2P peer count for all running nodes |
+| `time-since-last-block.sh` | `<config-name>` | How long since last block was processed |
+| `ping.sh` | `<container-name>` | Test network connectivity from container |
+| `show-errors.sh` | | Show error counts/logs across containers |
+| `show-size.sh` | | Show size of containers/volumes |
+| `show-file-size.sh` | | Show static file sizes |
+| `show-static-file-size.sh` | | Show static file sizes (alternative) |
+
+### Lifecycle Management Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `start.sh` | `<config-name>` | Start all containers for a config |
+| `stop.sh` | `<config-name>` | Stop all containers for a config |
+| `force-recreate.sh` | `<config-name>` | Force recreate containers (keeps volumes) |
+| `rm.sh` | `<config-name>` | Remove containers (keeps volumes) |
+| `delete-volumes.sh` | `<config-name>` | **DESTRUCTIVE** - Remove containers AND volumes |
+| `delete-node-keys.sh` | `<config-name>` | Remove node keys (for re-initialization) |
+
+### Backup & Restore Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `backup-node.sh` | `<config-name> [url]` | Backup volumes locally or to WebDAV |
+| `restore-volumes.sh` | `<config-name> [url]` | Restore volumes from local or HTTP |
+| `clone-node.sh` | `<config-name>` | Clone a node's state |
+| `clone-backup.sh` | | Clone backup files |
+| `clone-peers.sh` | | Clone peer information |
+| `restore-peers.sh` | | Restore peer connections |
+| `list-backups.sh` | | List available backup files |
+| `list-peer-backups.sh` | | List peer backup files |
+| `list-restorable.sh` | | List restorable configurations |
+| `cleanup-backups.sh` | | Remove old backups |
+| `cleanup-volumes.sh` | | Clean up unused volumes |
+
+### Network & Connectivity Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `upstreams.sh` | | Generate dshackle upstream configuration |
+| `connect-peers.sh` | | Connect to peer nodes |
+| `search-node.sh` | `<query>` | Search compose files for patterns |
+| `search-compose.sh` | `<query>` | Search compose files |
+| `network-to-config.sh` | | Map network names to config files |
+| `reload_dshackle.sh` | | Reload dshackle configuration |
+| `update-whitelist.sh` | | Update IP whitelist |
+| `update-ip.sh` | | Update IP configuration |
+
+### Specialized Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `op-wheel.sh` | | OP rollup maintenance (rewind, set forkchoice) |
+| `op-wheel-finalize-latest-block.sh` | `<client_svc> [node_svc]` | Finalize latest block (nuclear option) |
+| `catchup.sh` | `<config-name>` | Help node catch up to chain head |
+| `success-if-almost-synced.sh` | `<config-name> <seconds>` | Exit 0 if node is almost synced |
+| `groq.sh` | | Query using Groq |
+| `trai.sh` | | Trace transaction |
+| `multicurl.sh` | | Parallel curl requests |
+| `blocknumber.sh` | | Get block number |
+| `get-block.sh` | | Get block information |
+| `get-local-url.sh` | | Get local RPC URL |
+| `get-shortname.sh` | `<config-file>` | Get short name for a config |
+| `disk-space.sh` | | Check disk space |
+| `limit-bandwidth.sh` | | Limit bandwidth |
+| `maintenance.sh` | | Maintenance helper |
+| `random-port.sh` | | Generate random port |
+| `reference-rpc-endpoint.sh` | | Reference RPC endpoint helper |
+| `reset-terminal.sh` | | Reset terminal |
+| `setup-bandwidth-limit-cron.sh` | | Setup cron for bandwidth limiting |
+
+---
+
+## 3. Container Lifecycle Issues
+
+### Symptom: Container Won't Start
+
+```bash
+# Check why it failed
+./logs.sh <config-name> 2>&1 | tail -50
+
+# Check container exit code
+docker ps -a --filter "name=<config-name>" --format "{{.Names}} | {{.State}} | {{.Status}}"
+
+# Inspect the container
+docker inspect <container-name> | jq '.[0].State'
+```
+
+**Common causes:**
+- **Port conflict**: Two services trying to bind to same host port
+- **Volume permission issues**: Docker can't write to volume
+- **Missing environment variables**: `.env` file incomplete
+- **Invalid compose syntax**: YAML parsing error
+- **Image pull failure**: Network issue or private registry auth
+
+**Fixes:**
+```bash
+# Check for port conflicts
+grep -h "^[0-9]\{1,5\}:[0-9]" *.yml | sort | uniq -d
+
+# Validate compose syntax
+docker compose -f <config-file>.yml config
+
+# Pull images manually
+docker compose -f <config-file>.yml pull
+
+# Start with --build if using custom Dockerfiles
+docker compose -f <config-file>.yml up -d --build
+```
+
+### Symptom: Container Exits Immediately After Starting
+
+```bash
+# View the last 100 lines of logs before exit
+./logs.sh <config-name> 2>&1 | tail -100
+
+# Check exit code
+docker ps -a --filter "name=<service>" --format "{{.Status}}"
+
+# Run interactively to see error
+docker compose -f <config-file>.yml run --rm <service-name> sh
+```
+
+**Common causes:**
+- **Missing config files**: `/config/` mount empty or wrong path
+- **Invalid flags**: Command-line arguments malformed
+- **Database corruption**: Existing data incompatible with new version
+- **Checkpoint/genesis mismatch**: Chain ID or genesis doesn't match
+
+**Fixes:**
+```bash
+# Verify config directory exists (if using custom configs)
+ls -la <network>/<chain>/
+
+# Try with fresh volumes (DESTRUCTIVE)
+./delete-volumes.sh <config-name>
+./start.sh <config-name>
+```
+
+### Symptom: Container Restarts Repeatedly (Crash Loop)
+
+```bash
+# Watch logs in real-time
+./logs.sh <config-name> -f
+
+# Check restart count
+docker inspect <container-name> | jq '.[0].RestartCount'
+
+# Check last restart reason
+docker inspect <container-name> | jq '.[0].State.ExitCode, .[0].State.Error'
+```
+
+**Common causes:**
+- **OOM killed**: Memory limit exceeded
+- **Out of disk space**: No space left on device
+- **Segmentation fault**: Client bug or bad data
+- **Panic**: Go client panic
+
+**Fixes:**
+```bash
+# Check memory usage
+./show-ram.sh <config-name>
+
+# Check disk space
+df -h /var/lib/docker
+./show-db-size.sh
+
+# Increase resources in compose file or .env
+# Then force recreate
+./force-recreate.sh <config-name>
+```
+
+---
+
+## 4. Sync Issues
+
+### Symptom: Node Not Syncing (Stuck at Block 0 or Low Block)
+
+```bash
+# Check sync status
+./sync-status.sh <config-name>
+
+# Check current block
+./latest.sh <config-name>
+
+# Check logs for sync errors
+./logs.sh <config-name> | grep -i -E "sync|error|fail|warn|stuck|behind"
+
+# Check peer count
+./peer-count.sh | grep <config-name>
+```
+
+**Common causes:**
+- **No peers**: P2P network connection failed
+- **Wrong network**: Connected to wrong chain
+- **Checkpoint too old**: Checkpoint URL unavailable or outdated
+- **Snapshot download failed**: Snapshot server unreachable
+
+**Fixes:**
+```bash
+# Check if checkpoint/snapshot is configured
+grep -E "(checkpoint|snapshot)" <config-file>.yml
+
+# Test checkpoint URL manually
+curl -I $(grep checkpoint <config-file>.yml | grep -oE 'http[^ ]+')
+
+# Check peer connections (geth example)
+docker exec <client-container> admin_peers | jq '.[] | .network.remoteAddress' | wc -l
+```
+
+### Symptom: Sync is Very Slow
+
+```bash
+# Check sync speed over time
+./latest.sh <config-name>; sleep 60; ./latest.sh <config-name>
+
+# Check if node is processing blocks
+./time-since-last-block.sh <config-name>
+
+# Check CPU and memory
+top -d 1 -p $(docker inspect <container> | jq -r '.[0].State.Pid')
+```
+
+**Common causes:**
+- **Resource constrained**: CPU throttled, memory swapped
+- **Disk I/O bottleneck**: Slow storage or contention
+- **Network rate limited**: P2P or RPC rate limiting
+- **Too many peers**: P2P overhead
+- **Wrong sync mode**: Full sync instead of snap sync
+
+### Symptom: Sync Stuck at Specific Block
+
+```bash
+# Check logs around the stuck block
+./logs.sh <config-name> | grep -A 10 -B 10 "block <stuck-block-number>"
+
+# Check if it's a known bad block
+# Search online: <chain> bad block <number>
+```
+
+**Common causes:**
+- **Bad block in chain**: Requires client patch or manual intervention
+- **State trie inconsistency**: Database corruption
+- **Fork choice issue**: Node on wrong fork
+
+**Fixes for OP Stack:**
+```bash
+# Try to finalize past the block
+./op-wheel-finalize-latest-block.sh <client-service>
+```
+
+### Symptom: Node on Wrong Fork / Chain
+
+```bash
+# Check chain ID
+./latest.sh <config-name> | grep -i chain
+
+# Check what chain the node thinks it's on
+docker exec <client-container> ethdo chain --endpoint=http://localhost:8545
+
+# Compare with expected chain ID
+grep chainId <config-file>.yml
+```
+
+---
+
+## 5. RPC/Connectivity Issues
+
+### Symptom: RPC Endpoint Not Responding
+
+```bash
+# Test from host
+curl -s http://localhost:<port> | head -c 100
+
+# Check if traefik/proxy is running
+docker ps | grep -E "(traefik|proxy|nginx)"
+
+# Check traefik logs
+docker logs <traefik-container> | tail -50
+```
+
+**Common causes:**
+- **Container not running**: Client crashed
+- **Port not exposed**: Wrong port mapping
+- **Traefik misconfiguration**: Labels wrong or missing
+- **Firewall blocking**: Host firewall or cloud security group
+
+### Symptom: RPC Returns Wrong Chain ID
+
+```bash
+# Query chain ID from RPC
+curl -s -X POST http://localhost:<port> \
+  -H "Content-Type: application/json" \
+  -d '{"jsonrpc":"2.0","method":"eth_chainId","params":[],"id":1}'
+```
+
+### Symptom: Cannot Connect to P2P Network
+
+```bash
+# Check peer count
+./peer-count.sh | grep <config-name>
+
+# Test P2P connectivity from container
+docker exec <client-container> nc -zv <bootstrap-node> <p2p-port>
+```
+
+**Fixes:**
+```bash
+# Set public IP in .env
+IP=$(curl -s ipinfo.io/ip)
+echo "IP=$IP" >> .env
+./force-recreate.sh <config-name>
+```
+
+---
+
+## 6. Log Interpretation
+
+### Common Log Patterns
+
+#### Warnings (Node may still function)
+| Pattern | Meaning | Action |
+|---|---|---|
+| `WARN.*sync.*slow` | Sync slower than expected | Check resources |
+| `WARN.*peers.*low` | Fewer peers than desired | Check P2P connectivity |
+| `WARN.*rate.*limit` | API rate limiting active | Normal for public endpoints |
+
+#### Errors (Node is degraded)
+| Pattern | Meaning | Action |
+|---|---|---|
+| `Error.*database.*corrupt` | Database corruption | Restore from backup or resync |
+| `Error.*handshake.*fail` | P2P handshake failed | Check chain ID |
+| `Error.*no.*peers` | Cannot connect to P2P | Check bootstrap nodes |
+| `Error.*timeout` | RPC/HTTP timeout | Check network, increase timeout |
+
+#### Fatal (Node will not function)
+| Pattern | Meaning | Action |
+|---|---|---|
+| `Fatal.*panic` | Client crashed | Check client version |
+| `Fatal.*OOM` | Out of memory | Increase memory limit |
+| `Fatal.*disk.*full` | No disk space | Free space |
+| `Fatal.*permission.*denied` | Filesystem permissions | Fix volume permissions |
+
+---
+
+## 7. Resource Issues
+
+### High CPU Usage
+```bash
+./show-ram.sh <config-name>
+./show-cpu.sh
+docker stats <container-name> --no-stream
+```
+
+### High Memory Usage
+```bash
+./show-ram.sh <config-name>
+docker stats <container-name> --no-stream --format "{{.Container}} | {{.MemUsage}} | {{.MemPerc}}"
+```
+
+### High Disk Usage
+```bash
+./show-db-size.sh
+docker system df -v
+```
+
+### Disk I/O Bottleneck
+```bash
+iotop -o -d 1
+```
+
+---
+
+## 8. Backup and Restore
+
+### Creating a Backup
+```bash
+# Local backup (to /backup directory)
+./backup-node.sh <config-name>
+
+# Remote backup (to WebDAV)
+./backup-node.sh <config-name> https://backup-server.tld/dav
+```
+
+### Restoring from Backup
+```bash
+# List available backups
+./list-backups.sh
+
+# Restore latest backup for config
+./restore-volumes.sh <config-name>
+
+# Restore from specific URL
+./restore-volumes.sh <config-name> https://backup-server.tld/backup/
+```
+
+### Cloning a Node
+
+```bash
+# Clone a node to a new location
+./clone-node.sh <config-name>
+
+# Clone peers (for faster sync)
+./clone-peers.sh <config-name>
+```
+
+### Nuclear Option: Full Reset
+
+```bash
+# WARNING: This deletes ALL data for the config
+./stop.sh <config-name> && \
+./rm.sh <config-name> && \
+./delete-volumes.sh <config-name> && \
+./delete-node-keys.sh <config-name> && \
+./force-recreate.sh <config-name>
+
+# Then check logs
+./logs.sh <config-name>
+```
+
+---
+
+## 9. Common Error Messages
+
+### Database Errors
+| Error | Cause | Solution |
+|---|---|---|
+| `database is corrupted` | Power loss, bug | Restore from backup or resync |
+| `database version mismatch` | Client version changed | Delete and resync |
+
+### P2P Errors
+| Error | Cause | Solution |
+|---|---|---|
+| `no configured peers` | Missing bootstrap nodes | Add bootstrap nodes |
+| `handshake failed` | Chain ID mismatch | Verify genesis.json |
+
+### RPC Errors
+| Error | Cause | Solution |
+|---|---|---|
+| `method not found` | Wrong client | Use correct client |
+| `connection refused` | Port not open | Check container running, port mapping |
+
+---
+
+## 10. OP Stack Specific Debugging
+
+### OP Node Issues
+
+```bash
+# Check op-node logs
+./logs.sh <config-name> | grep -i "op-node\|rollup\|sequencer"
+
+# Check rollup configuration (if custom)
+cat op/<network>/ethereum/rollup.json | jq .
+
+# Check if rollup.json is mounted
+docker exec <op-node-container> cat /config/rollup.json | jq .
+```
+
+### OP Wheel (Manual Intervention)
+
+```bash
+# Rewind to specific block (DANGEROUS - only if you know what you're doing)
+./op-wheel.sh engine set-forkchoice \
+  --unsafe=<block-hash> \
+  --safe=<block-hash> \
+  --finalized=<block-hash> \
+  --engine=http://<client-service>:8551/ \
+  --engine.open=http://<client-service>:8545 \
+  --engine.jwt-secret-path=/jwtsecret
+
+# Nuclear option: finalize latest local block
+./op-wheel-finalize-latest-block.sh <client-service> <node-service>
+```
+
+---
+
+## 11. CometBFT Family (Cosmos, etc.) Specific
+
+### Init Container Issues
+
+```bash
+# CometBFT chains use init.sh inside the container
+# The master script is at scripts/cometbft-common.sh
+
+# Check if init completed
+./logs.sh <config-name> | grep -i "init\|setup\|complete"
+
+# Check the init script
+cat <network>/<chain>/scripts/init.sh
+```
+
+---
+
+## 12. Quick Start Guide
+
+### Starting a Node
+
+```bash
+# 1. Set up environment
+echo "IP=$(curl -s ipinfo.io/ip)" > .env
+echo "DOMAIN=${IP//./-}.traefik.me" >> .env
+echo "MAIL=your-email@example.com" >> .env
+
+# 2. Select which nodes to run
+# Add compose files to COMPOSE_FILE (colon-separated)
+echo "COMPOSE_FILE=base.yml:rpc.yml:ethereum-mainnet-geth-pruned.yml" >> .env
+
+# 3. Start the node
+docker compose up -d
+
+# 4. Verify it's running
+./show-status.sh
+```
+
+### Accessing Your Node
+
+```bash
+# Once running, access via:
+# HTTP: http://<your-domain>/ethereum-mainnet-geth-pruned
+# HTTPS: https://<your-domain>/ethereum-mainnet-geth-pruned
+# WebSocket: wss://<your-domain>/ethereum-mainnet-geth-pruned
+
+# Or locally (if NO_SSL=true):
+# HTTP: http://localhost:<port>
+```
+
+---
+
+## 13. Configuration Reference
+
+### Environment Variables
+
+**Required for most setups:**
+```bash
+IP=203.0.113.42                    # Your public IP
+DOMAIN=203-0-113-42.traefik.me    # Your domain (traefik.me for testing)
+MAIL=your-email@example.com        # For Let's Encrypt SSL
+WHITELIST=0.0.0.0/0               # IP whitelist (0.0.0.0/0 = all)
+```
+
+**Optional:**
+```bash
+NO_SSL=true                       # Disable SSL (testing only)
+CHAINS_SUBNET=192.168.0.0/26      # Docker network subnet
+```
+
+**Chain-specific (examples):**
+```bash
+ETHEREUM_MAINNET_EXECUTION_RPC=https://fallback-rpc.example.com
+ARBITRUM_SEPOLIA_EXECUTION_RPC=https://arb-sepolia-rpc.example.com
+OP_NODE_NETWORK=mainnet
+OP_NODE_L1_RPC_URL=https://l1-rpc.example.com
+```
+
+### Compose File Structure
+
+Each compose file defines one or more services:
+- **client**: Execution layer (Geth, Erigon, Reth, etc.)
+- **node**: Consensus/derivation node (op-node, lighthouse, etc.)
+- **relay**: DA relay (eigenda-proxy, op-alt, etc.)
+- **proxy**: HTTP/WS proxy (nginx, etc.)
+- **database**: External database (Postgres, etc.)
+
+### Volume Naming
+
+Volumes are named after the config:
+```
+<config-name>_<service>_data
+<config-name>_<service>_config
+```
+
+Example: `ethereum-mainnet-geth-pruned_client_data`
+
+---
+
+## 14. Quick Debugging Checklist
+
+Use this checklist when debugging an issue:
+
+- [ ] **Is the container running?** → `./show-running.sh`
+- [ ] **Are there errors in logs?** → `./logs.sh <config> | grep -i error`
+- [ ] **Is the node synced?** → `./sync-status.sh <config>`
+- [ ] **Are peers connected?** → `./peer-count.sh`
+- [ ] **Are resources adequate?** → `./show-ram.sh`, `./show-db-size.sh`
+- [ ] **Is P2P working?** → Check peer count
+- [ ] **Is RPC responding?** → Test with curl
+- [ ] **Is disk space available?** → `df -h /var/lib/docker`
+- [ ] **Is the config file correct?** → `docker compose -f <file>.yml config`
+- [ ] **Are environment variables set?** → Check `.env`
+- [ ] **Is the genesis file correct?** → Check chain ID
+
+---
+
+## 15. When to Escalate
+
+Escalate to a human operator if:
+
+- [ ] Node stuck for > 2 hours with no progress
+- [ ] Repeated `Fatal` or `panic` errors after restart
+- [ ] Database corruption confirmed
+- [ ] Issue affects multiple nodes across different chains
+- [ ] Need to force-push to this repo
+
+---
+
+## 16. File Locations Quick Reference
+
+| What You Need | Where to Find It |
+|---|---|
+| Compose files | Root of this repo (`*.yml`) |
+| Operational scripts | Root of this repo (`*.sh`) |
+| Chain assets | `<network>/<chain>/` or `<stack>/<network>/<settlement>/` |
+| Genesis files | `<stack>/<network>/<settlement>/genesis.json` |
+| Rollup configs | `op/<network>/<settlement>/rollup.json` |
+| Custom Dockerfiles | `<path>/*.Dockerfile` |
+| Init scripts | `<path>/scripts/init.sh` |
+| CometBFT common | `scripts/cometbft-common.sh` |
+| Compose registry | `compose_registry.json` |
+| RPC endpoints | `reference-rpc-endpoint.json` |
+| Environment | `.env` |
+
+---
+
+## 17. Resource Requirements Reference
+
+| Node Type | Disk | RAM | CPU |
+|---|---|---|---|
+| Ethereum pruned | ~500GB | 8GB | 2+ cores |
+| Ethereum archive | ~2TB+ | 16GB+ | 4+ cores |
+| Ethereum archive-trace | ~4TB+ | 32GB+ | 8+ cores |
+| L2 pruned | ~100-500GB | 4-8GB | 2+ cores |
+| L2 archive | ~1-2TB | 8-16GB | 4+ cores |
+
+**Note:** Requirements vary by chain. Check specific chain documentation.
+
+---
+
+*This file is your complete operations and debugging reference. For additional user documentation, see README.md.*

README.md

@@ -1,8 +1,847 @@
-### Docs
+# ethereum-rpc-docker — Blockchain RPC Node Configurations
 
-TODO:
+**ethereum-rpc-docker** provides production-ready Docker Compose configurations for running
+blockchain RPC nodes. Whether you're running a single Ethereum node or a fleet of L2s,
+this repository has everything you need to get started quickly.
 
-auto-generate .jwtsecret for beacon-execution connection
-Fix wireguard chains network for pocket-frontends
+For **debugging and troubleshooting**, see [VIBE.md](VIBE.md) — the automated operations guide.
 
-[Pocket Validator](README_POKT.md) </br>
+---
+
+## 1. What This Repository Is
+
+This is a collection of Docker Compose files and supporting scripts for operating blockchain
+RPC nodes. Each compose file defines a complete node configuration including:
+
+- **Client** (execution layer): Geth, Erigon, Reth, Nethermind, Besu, etc.
+- **Node** (consensus layer): op-node, lighthouse, prysm, nitro, etc.
+- **Relay** (data availability): eigenda-proxy, op-alt, celestia, etc.
+- **Proxy** (access layer): nginx for HTTP/WS unification
+- **Monitoring**: Prometheus metrics, Grafana dashboards
+
+You can run a single node or combine multiple compose files to create a full fleet.
+
+---
+
+## 2. Quick Start
+
+### Prerequisites
+
+- Docker and Docker Compose installed
+- Docker daemon running
+- Public IP address (for P2P connectivity)
+- At least 500GB free disk for Ethereum mainnet pruned nodes
+
+### Step 1: Create Your Environment File
+
+Create a `.env` file in this directory. Here's a complete example:
+
+```bash
+# === REQUIRED: Network Settings ===
+# Your public IP address (required for P2P on most chains)
+IP=203.0.113.42
+
+# Docker internal subnet for chain containers
+CHAINS_SUBNET=192.168.0.0/26
+
+# === REQUIRED: SSL Settings ===
+# Domain for Traefik SSL certificates (use traefik.me for testing)
+DOMAIN=203-0-113-42.traefik.me
+
+# Email for Let's Encrypt notifications
+MAIL=your-email@example.com
+
+# IP whitelist (CIDR notation, 0.0.0.0/0 allows all)
+WHITELIST=0.0.0.0/0
+
+# === OPTIONAL: SSL ===
+# Disable SSL for local testing (remove for production)
+# NO_SSL=true
+
+# === OPTIONAL: Fallback RPC Endpoints ===
+# These are used by nodes for initial sync and as fallbacks
+ETHEREUM_MAINNET_EXECUTION_RPC=https://ethereum-rpc.publicnode.com
+ETHEREUM_MAINNET_EXECUTION_WS=wss://ethereum-rpc.publicnode.com
+ETHEREUM_MAINNET_BEACON_REST=https://ethereum-beacon-api.publicnode.com
+
+ETHEREUM_SEPOLIA_EXECUTION_RPC=https://ethereum-sepolia-rpc.publicnode.com
+ETHEREUM_SEPOLIA_EXECUTION_WS=wss://ethereum-sepolia-rpc.publicnode.com
+
+ARBITRUM_SEPOLIA_EXECUTION_RPC=https://arbitrum-sepolia-rpc.publicnode.com
+```
+
+**To get your public IP:**
+```bash
+curl ipinfo.io/ip
+```
+
+**For traefik.me domain:** Replace dots with hyphens in your IP:
+```bash
+IP=203.0.113.42
+DOMAIN=203-0-113-42.traefik.me
+```
+
+### Step 2: Select Which Nodes to Run
+
+Add compose files to the `COMPOSE_FILE` variable in your `.env`. Always include
+`base.yml` and `rpc.yml` first, then add your node configurations:
+
+```bash
+# Example: Run Ethereum mainnet with Geth (pruned)
+COMPOSE_FILE=base.yml:rpc.yml:ethereum-mainnet-geth-pruned.yml
+
+# Example: Run multiple nodes
+COMPOSE_FILE=base.yml:rpc.yml:ethereum-mainnet-geth-pruned.yml:arbitrum-one.yml:optimism-mainnet.yml
+
+# Example: Include monitoring
+COMPOSE_FILE=base.yml:rpc.yml:monitoring.yml:ethereum-mainnet-geth-pruned.yml
+```
+
+### Step 3: Start Your Nodes
+
+```bash
+# Start all configured nodes
+docker compose up -d
+
+# Check status of all nodes
+./show-status.sh
+
+# View logs for a specific node
+./logs.sh ethereum-mainnet-geth-pruned
+```
+
+### Step 4: Access Your RPC Endpoints
+
+Once your nodes are running, access them at:
+
+```
+# HTTPS (via Traefik)
+https://<your-domain>/ethereum-mainnet-geth-pruned
+
+# HTTP (if NO_SSL=true)
+http://<your-domain>/ethereum-mainnet-geth-pruned
+
+# WebSocket
+wss://<your-domain>/ethereum-mainnet-geth-pruned
+```
+
+---
+
+## 3. Configuration Guide
+
+### Environment Variables Reference
+
+#### Required Variables
+
+| Variable | Description | Example |
+|---|---|---|
+| `IP` | Your public IP address | `203.0.113.42` |
+| `DOMAIN` | Your domain for SSL | `203-0-113-42.traefik.me` |
+| `MAIL` | Email for Let's Encrypt | `admin@example.com` |
+| `COMPOSE_FILE` | Which compose files to load | `base.yml:rpc.yml:ethereum-mainnet.yml` |
+
+#### Optional Variables
+
+| Variable | Description | Default |
+|---|---|---|
+| `WHITELIST` | IP whitelist (CIDR) | `0.0.0.0/0` (all) |
+| `CHAINS_SUBNET` | Docker network subnet | `192.168.0.0/26` |
+| `NO_SSL` | Disable SSL | Not set (SSL enabled) |
+
+#### Chain-Specific Variables
+
+These are automatically used by nodes that support them:
+
+| Variable | Description |
+|---|---|
+| `ETHEREUM_*_EXECUTION_RPC` | Fallback JSON-RPC endpoint |
+| `ETHEREUM_*_EXECUTION_WS` | Fallback WebSocket endpoint |
+| `ETHEREUM_*_BEACON_REST` | Fallback Beacon API endpoint |
+| `OP_NODE_NETWORK` | OP Stack network identifier |
+| `OP_NODE_L1_RPC_URL` | L1 RPC endpoint for OP Stack |
+
+### Static Compose Files
+
+These files provide infrastructure and should always be included:
+
+| File | Purpose | Required? |
+|---|---|---|
+| `base.yml` | Base Docker networking | ✅ Yes |
+| `rpc.yml` | RPC gateway configuration | ✅ Yes |
+| `monitoring.yml` | Prometheus + Grafana stack | ❌ No |
+| `prometheus.yml` | Prometheus configuration | ❌ No |
+| `nodeexporter.yml` | Node metrics exporter | ❌ No |
+| `cadvisor.yml` | Container metrics | ❌ No |
+| `drpc.yml` | DRPC gateway | ❌ No |
+| `drpc-free.yml` | DRPC free tier | ❌ No |
+| `backup-http.yml` | Backup HTTP server | ❌ No |
+| `logging-proxy.yml` | Logging infrastructure | ❌ No |
+| `portainer.yml` | Portainer UI | ❌ No |
+| `benchmark-proxy.yml` | Latency testing | ❌ No |
+
+---
+
+## 4. Available Networks
+
+### Layer 1 Networks
+
+#### Major Networks
+- **Ethereum**: Mainnet, Sepolia, Holesky
+- **BSC** (Binance Smart Chain): Mainnet
+- **Polygon**: Mainnet, Amoy
+- **Avalanche**: C-Chain Mainnet
+- **Gnosis**: Mainnet, Chiado
+
+#### Alternative L1s
+- **Fantom**: Mainnet, Testnet
+- **Core**: Mainnet
+- **Berachain**: Mainnet, Testnet
+- **Ronin**: Mainnet
+- **Viction**: Mainnet
+- **Fuse**: Mainnet
+- **Tron**: Mainnet
+- **ThunderCore**: Mainnet
+
+#### Emerging L1s
+- **Goat**: Mainnet, Testnet
+- **AlephZero**: Mainnet
+- **Haqq**: Mainnet, Testnet
+- **Taiko**: Mainnet
+- **Rootstock**: Mainnet
+
+### Layer 2 Networks
+
+#### OP Stack
+- Optimism: Mainnet, Sepolia
+- Base: Mainnet, Sepolia
+- Zora: Mainnet
+- Mode: Mainnet
+- Blast: Mainnet
+- Fraxtal: Mainnet
+- Bob: Mainnet
+- Boba: Mainnet, Testnet
+- Worldchain: Mainnet
+- Metal: Mainnet
+- Ink: Mainnet
+- Lisk: Mainnet, Sepolia
+- SNAX: Mainnet
+- Celo: Mainnet
+
+#### Arbitrum Ecosystem
+- Arbitrum One: Mainnet
+- Arbitrum Nova: Mainnet
+- Everclear: Mainnet
+- Playblock: Mainnet
+- Real: Mainnet
+- Connext: Mainnet
+- OpenCampusCodex: Mainnet
+
+#### Other L2s
+- Linea: Mainnet
+- Scroll: Mainnet, Sepolia
+- zkSync Era: Mainnet
+- Metis: Mainnet
+- Moonbeam: Mainnet
+- Starknet: Mainnet
+- zkEVM: Mainnet
+- Immutable zkEVM: Mainnet
+- Polygon zkEVM: Mainnet
+
+### Node Types Available
+
+For most networks, you can choose from:
+
+| Sync Mode | Database | Client | Use Case |
+|---|---|---|---|
+| Pruned | Various | Geth, Erigon, Reth | Standard production |
+| Archive | Various | Geth, Erigon, Reth | Full history, analytics |
+| Archive-Trace | Various | Reth, Erigon | Full history + transaction tracing |
+
+---
+
+## 5. Accessing Your Nodes
+
+### URL Patterns
+
+Each node is accessible via Traefik reverse proxy at:
+
+```
+https://<your-domain>/<config-name>
+```
+
+Where `<config-name>` is the compose filename without `.yml`, e.g.:
+- `ethereum-mainnet-geth-pruned`
+- `op-base-sepolia-op-reth-pruned-trace`
+- `arbitrum-one-arbnode-archive`
+
+### Ports
+
+| Service | Port | Protocol | Notes |
+|---|---|---|---|
+| Traefik HTTP | 80 | TCP | Redirects to HTTPS |
+| Traefik HTTPS | 443 | TCP | SSL termination |
+| Docker internal | Various | TCP/UDP | P2P and internal communications |
+
+**Note:** P2P ports are randomized to avoid conflicts. Check your compose file
+for specific port mappings.
+
+### Local Access (Without SSL)
+
+For local development/testing, set `NO_SSL=true` in your `.env`:
+
+```bash
+# Access locally without SSL
+echo "NO_SSL=true" >> .env
+docker compose up -d
+
+# Then access at:
+http://localhost:<port>
+```
+
+Find the port in your compose file or use:
+```bash
+./get-local-url.sh <config-name>
+```
+
+---
+
+## 6. Resource Requirements
+
+### Hardware Recommendations
+
+| Node Type | Disk | RAM | CPU | Notes |
+|---|---|---|---|---|
+| Ethereum Pruned | 500GB - 1TB | 8GB | 2+ cores | Standard production |
+| Ethereum Archive | 2TB - 4TB | 16GB+ | 4+ cores | Full history |
+| Ethereum Archive-Trace | 4TB - 8TB | 32GB+ | 8+ cores | Full + tracing |
+| BSC Pruned | 500GB - 800GB | 8GB | 2+ cores | |
+| BSC Archive | 2TB - 3TB | 16GB | 4+ cores | |
+| Polygon Pruned | 300GB - 500GB | 8GB | 2+ cores | |
+| Polygon Archive | 1TB - 2TB | 16GB | 4+ cores | |
+| L2 Pruned (OP Stack) | 100GB - 300GB | 4-8GB | 2+ cores | Base, Optimism, etc. |
+| L2 Archive (OP Stack) | 500GB - 1TB | 8-16GB | 4+ cores | |
+| L2 Pruned (Arbitrum) | 200GB - 500GB | 4-8GB | 2+ cores | |
+| L2 Archive (Arbitrum) | 1TB - 2TB | 8-16GB | 4+ cores | |
+
+### Storage Recommendations
+
+- **Use SSD or NVMe**: HDDs are too slow for blockchain nodes
+- **Separate volumes**: Consider separating chain data from OS
+- **Monitor usage**: Use `./show-db-size.sh` to track growth
+- **Plan for growth**: Archive nodes grow ~1-2GB/day for Ethereum
+
+### Performance Tips
+
+- **CPU**: More cores = faster sync, but diminishing returns after 8 cores
+- **RAM**: Archive nodes need sufficient RAM for state
+- **Disk I/O**: NVMe > SSD > HDD. RAID 0 can help for multiple nodes
+- **Network**: 1Gbps+ recommended for multiple nodes
+
+---
+
+## 7. SSL Certificates and Domain Setup
+
+### Traefik.me (Testing/Development)
+
+For quick testing, use the free traefik.me service:
+
+```bash
+# Get your IP
+IP=$(curl -s ipinfo.io/ip)
+
+# Create domain by replacing dots with hyphens
+DOMAIN=$(echo $IP | tr . -).traefik.me
+
+# Add to .env
+echo "DOMAIN=$DOMAIN" >> .env
+echo "MAIL=your-email@example.com" >> .env
+```
+
+Traefik.me automatically provides valid SSL certificates. No additional setup needed.
+
+### Let's Encrypt (Production)
+
+For production, use your own domain with Let's Encrypt:
+
+```bash
+# Set your domain
+DOMAIN=yourdomain.com
+
+# Set your email for notifications
+MAIL=admin@yourdomain.com
+
+# Add to .env
+echo "DOMAIN=$DOMAIN" >> .env
+echo "MAIL=$MAIL" >> .env
+```
+
+Traefik will automatically obtain and renew certificates from Let's Encrypt.
+
+### Disabling SSL
+
+For local development, you can disable SSL:
+
+```bash
+# In .env
+echo "NO_SSL=true" >> .env
+
+# Then restart
+docker compose up -d
+```
+
+---
+
+## 8. DRPC Integration — Monetize Your RPC
+
+[DRPC](https://drpc.org/) allows you to sell excess RPC capacity and earn revenue.
+
+### Quick Setup
+
+1. **Enable DRPC in your `.env`:**
+   ```bash
+   # Add to .env
+   GW_DOMAIN=your-gateway-domain.com
+   GW_REDIS_RAM=2gb
+   DRPC_VERSION=0.64.16
+   ```
+
+2. **Add DRPC to COMPOSE_FILE:**
+   ```bash
+   COMPOSE_FILE=base.yml:rpc.yml:drpc.yml:ethereum-mainnet-geth-pruned.yml
+   ```
+
+3. **Generate upstreams configuration:**
+   ```bash
+   ./upstreams.sh
+   ```
+
+The `upstreams.sh` script automatically detects all running nodes on your machine and
+generates the configuration for the dshackle load balancer.
+
+### Configuration Options
+
+| Variable | Description | Default |
+|---|---|---|
+| `GW_DOMAIN` | Your gateway domain | Required |
+| `GW_REDIS_RAM` | Redis memory limit | `2gb` |
+| `DRPC_VERSION` | DRPC version to use | Latest |
+
+### Multi-Server Setup
+
+For running DRPC across multiple servers:
+
+1. On each server, run nodes with DRPC enabled
+2. On your gateway server, run `./upstreams.sh` to generate combined config
+3. Deploy the dshackle configuration to your gateway
+
+For more information, visit [drpc.org](https://drpc.org/).
+
+---
+
+## 9. Backup and Restore System
+
+### Why Backups Matter
+
+- **Database corruption**: Power loss or bugs can corrupt your chain data
+- **Quick recovery**: Restore from backup instead of re-syncing from scratch
+- **Migration**: Move nodes between servers efficiently
+- **Cloning**: Create identical nodes for redundancy
+
+### Local Backups
+
+```bash
+# Create a backup of a node
+./backup-node.sh ethereum-mainnet-geth-pruned
+
+# Backup is stored in /backup directory
+# List available backups
+./list-backups.sh
+
+# Restore from latest backup
+./restore-volumes.sh ethereum-mainnet-geth-pruned
+```
+
+### Remote Backups (WebDAV)
+
+For multi-server setups, use WebDAV for remote backups:
+
+```bash
+# Backup to remote WebDAV
+./backup-node.sh ethereum-mainnet https://backup-server.tld/dav
+
+# Restore from remote WebDAV
+./restore-volumes.sh ethereum-mainnet https://backup-server.tld/backup/
+```
+
+### HTTP Backup Server
+
+Expose your backups via HTTP for easy access:
+
+```bash
+# Add to COMPOSE_FILE
+COMPOSE_FILE=base.yml:rpc.yml:backup-http.yml:ethereum-mainnet.yml
+
+# Access backups at:
+# - HTTP: https://yourdomain.tld/backup
+# - WebDAV: https://yourdomain.tld/dav
+```
+
+### Cross-Server Transfers
+
+Transfer node data between servers without SSH:
+
+```bash
+# On Server A (source):
+./backup-node.sh ethereum-mainnet https://server-a.domain.tld/dav
+
+# On Server B (destination):
+./restore-volumes.sh ethereum-mainnet https://server-a.domain.tld/backup/
+```
+
+### Cloning Nodes
+
+Clone a running node to create a replica:
+
+```bash
+# Clone node state
+./clone-node.sh ethereum-mainnet-geth-pruned
+
+# Clone peer connections (faster sync)
+./clone-peers.sh ethereum-mainnet-geth-pruned
+```
+
+---
+
+## 10. Security and Network Configuration
+
+### Firewall Configuration
+
+Many chains require specific ports for P2P discovery. Docker will bind to these
+ports on all interfaces (0.0.0.0).
+
+**Critical:** You must configure your firewall to:
+1. Allow inbound connections to P2P ports (UDP/TCP)
+2. Allow outbound connections from containers
+3. Block containers from reaching local networks (security)
+
+### iptables Rules
+
+Here's a systemd service and script for managing Docker firewall rules:
+
+**`/etc/systemd/system/iptables-firewall.service`:**
+```ini
+[Unit]
+Description= iptables firewall docker fix
+After=docker.service
+
+[Service]
+ExecStart=/usr/local/bin/iptables-firewall.sh start
+RemainAfterExit=true
+StandardOutput=journal
+
+[Install]
+WantedBy=multi-user.target
+```
+
+**`/usr/local/bin/iptables-firewall.sh`:**
+```bash
+#!/bin/bash
+PATH="/sbin:/usr/sbin:/bin:/usr/bin"
+
+# Flush existing rules
+iptables -F DOCKER-USER
+
+# Block local networks from containers
+# (prevents containers from reaching your LAN)
+iptables -I DOCKER-USER -s {{ chains_subnet }} -d 192.168.0.0/16  -j REJECT
+iptables -I DOCKER-USER -s {{ chains_subnet }} -d 172.16.0.0/12 -j REJECT
+iptables -I DOCKER-USER -s {{ chains_subnet }} -d 10.0.0.0/8 -j REJECT
+
+# Allow containers to reach each other
+iptables -I DOCKER-USER -s {{ chains_subnet }} -d {{ chains_subnet }} -j ACCEPT
+
+# Allow specific external networks if needed
+iptables -I DOCKER-USER -s {{ chains_subnet }} -d 10.13.13.0/24 -j ACCEPT
+```
+
+Replace `{{ chains_subnet }}` with your `CHAINS_SUBNET` value (default: `192.168.0.0/26`).
+
+### IP Whitelist
+
+Control which IPs can access your RPC endpoints:
+
+```bash
+# In .env - allow all
+WHITELIST=0.0.0.0/0
+
+# Allow specific IPs
+WHITELIST=192.0.2.0/24,203.0.113.0/24
+
+# Update whitelist without restart
+./update-whitelist.sh
+```
+
+---
+
+## 11. Daily Operations
+
+### Starting and Stopping Nodes
+
+```bash
+# Start a specific node
+./start.sh ethereum-mainnet-geth-pruned
+
+# Stop a specific node
+./stop.sh ethereum-mainnet-geth-pruned
+
+# Restart a node (keeps volumes)
+./force-recreate.sh ethereum-mainnet-geth-pruned
+```
+
+### Monitoring Node Health
+
+```bash
+# Check all nodes
+./show-status.sh
+
+# Check specific node
+./sync-status.sh ethereum-mainnet-geth-pruned
+
+# Get latest block
+./latest.sh ethereum-mainnet-geth-pruned
+
+# Check disk usage
+./show-db-size.sh
+
+# Check memory usage
+./show-ram.sh ethereum-mainnet-geth-pruned
+```
+
+### Viewing Logs
+
+```bash
+# View logs for a node
+./logs.sh ethereum-mainnet-geth-pruned
+
+# View logs with follow
+./logs.sh ethereum-mainnet-geth-pruned -f
+
+# View all container logs
+docker compose logs -f
+```
+
+### Checking Peers
+
+```bash
+# Check peer count for all nodes
+./peer-count.sh
+
+# Check specific node peers
+./peer-count.sh | grep ethereum-mainnet
+```
+
+---
+
+## 12. Node Structure and Naming
+
+### Understanding Node Components
+
+A typical node consists of one or more of these components:
+
+| Component | Purpose | Example Implementations |
+|---|---|---|
+| **Client** | Execution layer (handles transactions) | Geth, Erigon, Reth, Nethermind, Besu |
+| **Node** | Consensus/derivation layer | op-node, lighthouse, prysm, nitro, beacon-kit |
+| **Relay** | Data availability | eigenda-proxy, op-alt, celestia |
+| **Proxy** | HTTP/WS unification | nginx |
+| **Database** | External database | Postgres |
+
+### Naming Conventions
+
+**Config names** (compose filenames) follow this pattern:
+```
+{network}-{chain}-{client}-{syncmode}-{dbtype}.yml
+```
+
+Examples:
+- `ethereum-mainnet-geth-pruned.yml` — Ethereum mainnet, Geth client, pruned
+- `op-base-sepolia-op-reth-archive-trace.yml` — Base sepolia, op-reth, archive with tracing
+- `arb-arbitrum-one-arbnode-archive.yml` — Arbitrum One, arbnode, archive
+
+**Short names** (used in URLs and container labels):
+```
+{network}-{chain}[-{client}][-{syncmode}][-{dbtype}]
+```
+
+**Volume names**:
+```
+<config-name>_<service>_<type>
+```
+Example: `ethereum-mainnet-geth-pruned_client_data`
+
+### Defaults
+
+- **Default client**: geth (Ethereum), op-geth (OP Stack), arbnode (Arbitrum)
+- **Default sync mode**: pruned
+- **Default database**: Depends on client (leveldb, pebble, etc.)
+- **Default node**: op-node (OP Stack), prysm (Ethereum beacon), etc.
+
+---
+
+## 13. Syncing and Initial Setup
+
+### Sync Modes
+
+| Mode | Description | Speed | Storage |
+|---|---|---|---|
+| **Snap Sync** | Download recent state, verify | Fast | Medium |
+| **Fast Sync** | Download blocks, verify headers | Medium | Medium |
+| **Full Sync** | Verify all blocks from genesis | Slow | Full |
+| **Archive** | Full sync + keep all state | Slowest | Largest |
+
+Most nodes use **snap sync** or **fast sync** by default for pruned nodes.
+
+### Using Checkpoints
+
+Some nodes support checkpoint sync for faster startup:
+
+```bash
+# Check if checkpoint is configured
+grep checkpoint <config-file>.yml
+```
+
+Checkpoints are typically provided by trusted community members or node operators.
+
+### Snapshots
+
+For even faster sync, some nodes support snapshot downloads:
+
+```bash
+# Check snapshot configuration
+grep snapshot <config-file>.yml
+```
+
+Snapshots are large files containing the entire chain state at a point in time.
+
+### Initial Sync Time
+
+| Network | Pruned | Archive |
+|---|---|---|
+| Ethereum Mainnet | 1-3 days | 1-2 weeks |
+| BSC Mainnet | 1-2 days | 3-5 days |
+| Polygon Mainnet | 6-12 hours | 1-2 days |
+| L2 Networks | Minutes - hours | Hours - 1 day |
+
+Times vary based on hardware, network connection, and chain state.
+
+---
+
+## 14. Common Issues and Solutions
+
+### Container Won't Start
+
+**Symptom:** Container exits immediately or fails to start.
+
+**Check:**
+```bash
+./logs.sh <config-name>
+docker ps -a | grep <config-name>
+```
+
+**Common fixes:**
+- Check `.env` file has all required variables
+- Validate compose syntax: `docker compose -f <file>.yml config`
+- Ensure ports aren't conflicting
+- Pull images: `docker compose pull`
+
+### Not Syncing / Stuck
+
+**Symptom:** Node shows 0 peers or stuck at low block.
+
+**Check:**
+```bash
+./sync-status.sh <config-name>
+./peer-count.sh | grep <config-name>
+./logs.sh <config-name> | grep -i error
+```
+
+**Common fixes:**
+- Set `IP=` in `.env` (required for P2P)
+- Check firewall allows P2P ports
+- Verify checkpoint/snapshot URLs are reachable
+- Restart with fresh volumes
+
+### RPC Endpoint Not Accessible
+
+**Symptom:** Can't connect to RPC endpoint.
+
+**Check:**
+```bash
+./show-status.sh
+curl http://localhost:<port>
+docker ps | grep traefik
+```
+
+**Common fixes:**
+- Check Traefik is running
+- Verify DOMAIN is set correctly
+- Check SSL configuration
+- Test with NO_SSL=true for debugging
+
+### High Resource Usage
+
+**Symptom:** Node using too much CPU, memory, or disk.
+
+**Check:**
+```bash
+./show-ram.sh <config-name>
+./show-db-size.sh
+./show-cpu.sh
+```
+
+**Common fixes:**
+- Reduce max peers
+- Upgrade hardware
+- Switch to pruned mode
+- Limit specific resources in compose file
+
+### For More Debugging
+
+For detailed debugging workflows, error patterns, and advanced troubleshooting,
+see [VIBE.md](VIBE.md).
+
+---
+
+## 15. Utility Scripts Overview
+
+This repository includes many scripts for managing your nodes. For the complete
+debugging reference, see [VIBE.md](VIBE.md).
+
+### Most Useful for Daily Operations
+
+| Script | What It Does |
+|---|---|
+| `show-status.sh` | Show health of all running nodes |
+| `show-running.sh` | List running containers |
+| `logs.sh <name>` | View node logs |
+| `sync-status.sh <name>` | Check sync progress |
+| `latest.sh <name>` | Get latest block |
+| `stop.sh <name>` | Stop a node |
+| `start.sh <name>` | Start a node |
+| `force-recreate.sh <name>` | Restart a node |
+| `backup-node.sh <name>` | Create backup |
+| `restore-volumes.sh <name>` | Restore from backup |
+
+---
+
+## 16. Learning More
+
+- **[VIBE.md](VIBE.md)** — Complete debugging and operations guide for automated tools
+- **[DRPC Documentation](https://drpc.org/)** — For monetization setup
+- **[Traefik Documentation](https://doc.traefik.io/traefik/)** — For SSL and reverse proxy
+- **[Docker Compose Documentation](https://docs.docker.com/compose/)** — For compose file reference
+
+---
+
+*For debugging and troubleshooting, see [VIBE.md](VIBE.md).*
+*For the complete script reference and advanced operations, see [VIBE.md](VIBE.md).*

README_POKT.md

@@ -1,76 +0,0 @@
-Tested on Ubuntu 20.04.3 LTS
-
-#### Prerequisites:
-docker <br />
-docker-compose <br />
-DNS A-Record pointing to your server <br />
-Wireguard-Server: Paste wireguard wg0.conf from wireguard-server to wireguard/config/wg0.conf <br />
-.env File inside POKT-DOKT with secrets <br />
-
-#### Usage
-
-```
-git clone https://github.com/cventastic/POKT_DOKT.git
-cd POKT_DOKT
-git reset --hard origin/main && git pull && ./util/prepare.sh
-```
-
-# EXAMPLES
-
-Start POKT in relay mode:
-```
-command: pocket start --simulateRelay
-``` 
-If you want to activly relay. You also have to Stake! <br />
-Testnet-Faucet: (https://faucet.pokt.network/) <br />
-How to stake: https://docs.pokt.network/home/paths/node-runner#stake-the-validator <br />
-
-POKT QUERY for simulate-relay mode:
-```
-Pockt-Testnet:
-curl -X POST --data '{"relay_network_id":"0002","payload":{"data":"{}","method":"POST","path":"v1/query/height","headers":{}}}' http://localhost:8082/v1/client/sim
-Pocket-Mainnet:
-curl -X POST --data '{"relay_network_id":"0001","payload":{"data":"{}","method":"POST","path":"v1/query/height","headers":{}}}' http://localhost:8081/v1/client/sim
-```
-
-GETH QUERY (from whitelisted servers e.g pokt-test) for simulate-relay mode:
-```
-Pocket-Testnet:
-curl -X POST --data '{"relay_network_id":"0020","payload":{"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_getBalance\",\"params\":[\"0x1a8c807a6E4F624fCab01FEBf76a541d31B8345A\", \"latest\"],\"id\":1}","method":"POST","path":"","headers":{}}}' http://127.0.0.1:8082/v1/client/sim
-curl -v -X POST --data '{"relay_network_id":"0020","payload":{"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_syncing\",\"params\":[],\"id\":1}","method":"POST","path":"","headers":{}}}' http://127.0.0.1:8082/v1/client/sim
-Pocket-Mainnet:
-curl -X POST --data '{"relay_network_id":"0021","payload":{"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_getBalance\",\"params\":[\"0x1a8c807a6E4F624fCab01FEBf76a541d31B8345A\", \"latest\"],\"id\":1}","method":"POST","path":"","headers":{}}}' http://127.0.0.1:8081/v1/client/sim
-curl -v -X POST --data '{"relay_network_id":"0021","payload":{"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_syncing\",\"params\":[],\"id\":1}","method":"POST","path":"","headers":{}}}' http://127.0.0.1:8081/v1/client/sim
-```
-
-STANDARD GETH QUERY (from whitelistet server)
-```
-curl -X POST -H "Content-Type: application/json" --data '{"jsonrpc":"2.0","method":"eth_syncing","params":[],"id":1}' https://$RPCNODE/goerli
-```
-
-# SSL
-I you want to test SSL comment in:
-```
-# - "--certificatesresolvers.myresolver.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory" 
-```
-Check if there is a file here /traefic/letsencrypt/acme.json if yes, you have to delete it. <br /> 
-Otherwise traefik will not issue the certificate for an existing domain. <br />
-
-#### TODO !!!!
-Bootstrapping from Snapshots <br />
-Link-Timezone into containers.
-
-AVALANCHE:
-- Archive?
-- Monitoring https://docs.avax.network/build/tools/dashboards/README
-
-### Notes
-#### Monitoring
-Telegram get group ids the bot is in:
-```curl -X POST https://api.telegram.org/bot$TELEGRAM_API_TOKEN/getUpdates```
-There has to be an event in the channel for the bot to get updates
-
-### neue NODE
-.env
-rpc-timeout
-whitelist

VIBE.md

@@ -0,0 +1,729 @@
+# VIBE.md — ethereum-rpc-docker Operations & Debugging Guide
+
+You are an LLM agent or operator **running or debugging blockchain RPC nodes** from this
+repository. This file is your **primary reference** for all operational tasks.
+
+This repo contains Docker Compose configurations for blockchain RPC nodes plus operational
+scripts for managing them. Everything you need to run, monitor, debug, and fix nodes is here.
+
+---
+
+## 0. WHEN A NODE IS FAULTY — Start Here
+
+### Immediate Triage (30 seconds)
+
+```bash
+# 1. Is the container running?
+./show-running.sh
+
+# 2. Check overall status of all configured nodes
+./show-status.sh
+
+# 3. If you know the config name, check its specific status
+./sync-status.sh <config-name>
+
+# 4. Check logs for the faulty node
+./logs.sh <config-name>
+```
+
+**If the container isn't running**, go to [§3. Container Lifecycle Issues](#3-container-lifecycle-issues)
+
+**If the container is running but not synced**, go to [§4. Sync Issues](#4-sync-issues)
+
+**If the container is running and synced but RPC fails**, go to [§5. RPC/Connectivity Issues](#5-rpcconnectivity-issues)
+
+**If you see errors in logs but aren't sure what they mean**, go to [§6. Log Interpretation](#6-log-interpretation)
+
+---
+
+## 1. Repository Overview
+
+### What This Repo Contains
+
+```
+rpc/
+├── *.yml                    # Docker Compose files for node configurations
+├── *.sh                     # Operational scripts (YOUR PRIMARY TOOLS)
+├── scripts/                 # Additional helper scripts (CometBFT support)
+├── <network>/               # Network directories (e.g., ethereum/, op/, arb/)
+│   ├── *.yml                # Compose files for specific chains
+│   └── <chain>/             # Chain-specific assets
+│       ├── genesis.json     # Custom genesis files
+│       ├── rollup.json      # Rollup configurations (OP Stack)
+│       └── *.Dockerfile      # Custom build files
+├── README.md                # User documentation
+└── VIBE.md                  # THIS FILE — operations guide
+```
+
+### Key Concepts
+
+- **Config name**: The compose filename WITHOUT `.yml` (e.g., `ethereum-mainnet-geth-pruned`)
+- **Service name**: Derived from config name, used in `docker compose` commands
+- **Short name**: Used in URL paths, container labels. Format: `{network}-{chain}[-{client}][-{db_type}]`
+- **Volume names**: Docker volumes follow the full config name pattern
+
+### Supported Networks
+
+**Layer 1**: Ethereum, Polygon, BSC, Avalanche, Gnosis, Fantom, Core, Berachain, Ronin, Viction, Fuse, Tron, ThunderCore, Goat, AlephZero, Haqq, Taiko, Rootstock, Dogecoin, Litecoin, Bitcoin, Bitcoin-Cash, Ripple, Solana, Tron
+
+**Layer 2 (OP Stack)**: Optimism, Base, Zora, Mode, Blast, Fraxtal, Bob, Boba, Worldchain, Metal, Ink, Lisk, SNAX, Celo
+
+**Layer 2 (Arbitrum)**: Arbitrum One, Arbitrum Nova, Everclear, Playblock, Real, Connext, OpenCampusCodex
+
+**Other L2s**: Linea, Scroll, zkSync Era, Metis, Moonbeam, Starknet, zkEVM, Immutable zkEVM, Polygon zkEVM
+
+---
+
+## 2. Essential Scripts Reference
+
+### Status & Monitoring Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `show-status.sh` | `[config-name]` | Lists ALL configured nodes with sync status, block height, health |
+| `show-running.sh` | | Lists currently running containers |
+| `sync-status.sh` | `<config-name>` | Detailed sync status for one config |
+| `latest.sh` | `<config-name>` | Latest block number + hash |
+| `logs.sh` | `<config-name>` | Tail logs from all containers in a config |
+| `show-db-size.sh` | | Disk usage of ALL Docker volumes, sorted by size |
+| `show-ram.sh` | `<config-name>` | Memory usage of containers |
+| `show-cpu.sh` | | CPU usage display |
+| `peer-count.sh` | | P2P peer count for all running nodes |
+| `time-since-last-block.sh` | `<config-name>` | How long since last block was processed |
+| `ping.sh` | `<container-name>` | Test network connectivity from container |
+| `show-errors.sh` | | Show error counts/logs across containers |
+| `show-size.sh` | | Show size of containers/volumes |
+| `show-file-size.sh` | | Show static file sizes |
+| `show-static-file-size.sh` | | Show static file sizes (alternative) |
+
+### Lifecycle Management Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `start.sh` | `<config-name>` | Start all containers for a config |
+| `stop.sh` | `<config-name>` | Stop all containers for a config |
+| `force-recreate.sh` | `<config-name>` | Force recreate containers (keeps volumes) |
+| `rm.sh` | `<config-name>` | Remove containers (keeps volumes) |
+| `delete-volumes.sh` | `<config-name>` | **DESTRUCTIVE** - Remove containers AND volumes |
+| `delete-node-keys.sh` | `<config-name>` | Remove node keys (for re-initialization) |
+
+### Backup & Restore Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `backup-node.sh` | `<config-name> [url]` | Backup volumes locally or to WebDAV |
+| `restore-volumes.sh` | `<config-name> [url]` | Restore volumes from local or HTTP |
+| `clone-node.sh` | `<config-name>` | Clone a node's state |
+| `clone-backup.sh` | | Clone backup files |
+| `clone-peers.sh` | | Clone peer information |
+| `restore-peers.sh` | | Restore peer connections |
+| `list-backups.sh` | | List available backup files |
+| `list-peer-backups.sh` | | List peer backup files |
+| `list-restorable.sh` | | List restorable configurations |
+| `cleanup-backups.sh` | | Remove old backups |
+| `cleanup-volumes.sh` | | Clean up unused volumes |
+
+### Network & Connectivity Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `upstreams.sh` | | Generate dshackle upstream configuration |
+| `connect-peers.sh` | | Connect to peer nodes |
+| `search-node.sh` | `<query>` | Search compose files for patterns |
+| `search-compose.sh` | `<query>` | Search compose files |
+| `network-to-config.sh` | | Map network names to config files |
+| `reload_dshackle.sh` | | Reload dshackle configuration |
+| `update-whitelist.sh` | | Update IP whitelist |
+| `update-ip.sh` | | Update IP configuration |
+
+### Specialized Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `op-wheel.sh` | | OP rollup maintenance (rewind, set forkchoice) |
+| `op-wheel-finalize-latest-block.sh` | `<client_svc> [node_svc]` | Finalize latest block (nuclear option) |
+| `catchup.sh` | `<config-name>` | Help node catch up to chain head |
+| `success-if-almost-synced.sh` | `<config-name> <seconds>` | Exit 0 if node is almost synced |
+| `groq.sh` | | Query using Groq |
+| `trai.sh` | | Trace transaction |
+| `multicurl.sh` | | Parallel curl requests |
+| `blocknumber.sh` | | Get block number |
+| `get-block.sh` | | Get block information |
+| `get-local-url.sh` | | Get local RPC URL |
+| `get-shortname.sh` | `<config-file>` | Get short name for a config |
+| `disk-space.sh` | | Check disk space |
+| `limit-bandwidth.sh` | | Limit bandwidth |
+| `maintenance.sh` | | Maintenance helper |
+| `random-port.sh` | | Generate random port |
+| `reference-rpc-endpoint.sh` | | Reference RPC endpoint helper |
+| `reset-terminal.sh` | | Reset terminal |
+| `setup-bandwidth-limit-cron.sh` | | Setup cron for bandwidth limiting |
+
+---
+
+## 3. Container Lifecycle Issues
+
+### Symptom: Container Won't Start
+
+```bash
+# Check why it failed
+./logs.sh <config-name> 2>&1 | tail -50
+
+# Check container exit code
+docker ps -a --filter "name=<config-name>" --format "{{.Names}} | {{.State}} | {{.Status}}"
+
+# Inspect the container
+docker inspect <container-name> | jq '.[0].State'
+```
+
+**Common causes:**
+- **Port conflict**: Two services trying to bind to same host port
+- **Volume permission issues**: Docker can't write to volume
+- **Missing environment variables**: `.env` file incomplete
+- **Invalid compose syntax**: YAML parsing error
+- **Image pull failure**: Network issue or private registry auth
+
+**Fixes:**
+```bash
+# Check for port conflicts
+grep -h "^[0-9]\{1,5\}:[0-9]" *.yml | sort | uniq -d
+
+# Validate compose syntax
+docker compose -f <config-file>.yml config
+
+# Pull images manually
+docker compose -f <config-file>.yml pull
+
+# Start with --build if using custom Dockerfiles
+docker compose -f <config-file>.yml up -d --build
+```
+
+### Symptom: Container Exits Immediately After Starting
+
+```bash
+# View the last 100 lines of logs before exit
+./logs.sh <config-name> 2>&1 | tail -100
+
+# Check exit code
+docker ps -a --filter "name=<service>" --format "{{.Status}}"
+
+# Run interactively to see error
+docker compose -f <config-file>.yml run --rm <service-name> sh
+```
+
+**Common causes:**
+- **Missing config files**: `/config/` mount empty or wrong path
+- **Invalid flags**: Command-line arguments malformed
+- **Database corruption**: Existing data incompatible with new version
+- **Checkpoint/genesis mismatch**: Chain ID or genesis doesn't match
+
+**Fixes:**
+```bash
+# Verify config directory exists (if using custom configs)
+ls -la <network>/<chain>/
+
+# Try with fresh volumes (DESTRUCTIVE)
+./delete-volumes.sh <config-name>
+./start.sh <config-name>
+```
+
+### Symptom: Container Restarts Repeatedly (Crash Loop)
+
+```bash
+# Watch logs in real-time
+./logs.sh <config-name> -f
+
+# Check restart count
+docker inspect <container-name> | jq '.[0].RestartCount'
+
+# Check last restart reason
+docker inspect <container-name> | jq '.[0].State.ExitCode, .[0].State.Error'
+```
+
+**Common causes:**
+- **OOM killed**: Memory limit exceeded
+- **Out of disk space**: No space left on device
+- **Segmentation fault**: Client bug or bad data
+- **Panic**: Go client panic
+
+**Fixes:**
+```bash
+# Check memory usage
+./show-ram.sh <config-name>
+
+# Check disk space
+df -h /var/lib/docker
+./show-db-size.sh
+
+# Increase resources in compose file or .env
+# Then force recreate
+./force-recreate.sh <config-name>
+```
+
+---
+
+## 4. Sync Issues
+
+### Symptom: Node Not Syncing (Stuck at Block 0 or Low Block)
+
+```bash
+# Check sync status
+./sync-status.sh <config-name>
+
+# Check current block
+./latest.sh <config-name>
+
+# Check logs for sync errors
+./logs.sh <config-name> | grep -i -E "sync|error|fail|warn|stuck|behind"
+
+# Check peer count
+./peer-count.sh | grep <config-name>
+```
+
+**Common causes:**
+- **No peers**: P2P network connection failed
+- **Wrong network**: Connected to wrong chain
+- **Checkpoint too old**: Checkpoint URL unavailable or outdated
+- **Snapshot download failed**: Snapshot server unreachable
+
+**Fixes:**
+```bash
+# Check if checkpoint/snapshot is configured
+grep -E "(checkpoint|snapshot)" <config-file>.yml
+
+# Test checkpoint URL manually
+curl -I $(grep checkpoint <config-file>.yml | grep -oE 'http[^ ]+')
+
+# Check peer connections (geth example)
+docker exec <client-container> admin_peers | jq '.[] | .network.remoteAddress' | wc -l
+```
+
+### Symptom: Sync is Very Slow
+
+```bash
+# Check sync speed over time
+./latest.sh <config-name>; sleep 60; ./latest.sh <config-name>
+
+# Check if node is processing blocks
+./time-since-last-block.sh <config-name>
+
+# Check CPU and memory
+top -d 1 -p $(docker inspect <container> | jq -r '.[0].State.Pid')
+```
+
+**Common causes:**
+- **Resource constrained**: CPU throttled, memory swapped
+- **Disk I/O bottleneck**: Slow storage or contention
+- **Network rate limited**: P2P or RPC rate limiting
+- **Too many peers**: P2P overhead
+- **Wrong sync mode**: Full sync instead of snap sync
+
+### Symptom: Sync Stuck at Specific Block
+
+```bash
+# Check logs around the stuck block
+./logs.sh <config-name> | grep -A 10 -B 10 "block <stuck-block-number>"
+
+# Check if it's a known bad block
+# Search online: <chain> bad block <number>
+```
+
+**Common causes:**
+- **Bad block in chain**: Requires client patch or manual intervention
+- **State trie inconsistency**: Database corruption
+- **Fork choice issue**: Node on wrong fork
+
+**Fixes for OP Stack:**
+```bash
+# Try to finalize past the block
+./op-wheel-finalize-latest-block.sh <client-service>
+```
+
+### Symptom: Node on Wrong Fork / Chain
+
+```bash
+# Check chain ID
+./latest.sh <config-name> | grep -i chain
+
+# Check what chain the node thinks it's on
+docker exec <client-container> ethdo chain --endpoint=http://localhost:8545
+
+# Compare with expected chain ID
+grep chainId <config-file>.yml
+```
+
+---
+
+## 5. RPC/Connectivity Issues
+
+### Symptom: RPC Endpoint Not Responding
+
+```bash
+# Test from host
+curl -s http://localhost:<port> | head -c 100
+
+# Check if traefik/proxy is running
+docker ps | grep -E "(traefik|proxy|nginx)"
+
+# Check traefik logs
+docker logs <traefik-container> | tail -50
+```
+
+**Common causes:**
+- **Container not running**: Client crashed
+- **Port not exposed**: Wrong port mapping
+- **Traefik misconfiguration**: Labels wrong or missing
+- **Firewall blocking**: Host firewall or cloud security group
+
+### Symptom: RPC Returns Wrong Chain ID
+
+```bash
+# Query chain ID from RPC
+curl -s -X POST http://localhost:<port> \
+  -H "Content-Type: application/json" \
+  -d '{"jsonrpc":"2.0","method":"eth_chainId","params":[],"id":1}'
+```
+
+### Symptom: Cannot Connect to P2P Network
+
+```bash
+# Check peer count
+./peer-count.sh | grep <config-name>
+
+# Test P2P connectivity from container
+docker exec <client-container> nc -zv <bootstrap-node> <p2p-port>
+```
+
+**Fixes:**
+```bash
+# Set public IP in .env
+IP=$(curl -s ipinfo.io/ip)
+echo "IP=$IP" >> .env
+./force-recreate.sh <config-name>
+```
+
+---
+
+## 6. Log Interpretation
+
+### Common Log Patterns
+
+#### Warnings (Node may still function)
+| Pattern | Meaning | Action |
+|---|---|---|
+| `WARN.*sync.*slow` | Sync slower than expected | Check resources |
+| `WARN.*peers.*low` | Fewer peers than desired | Check P2P connectivity |
+| `WARN.*rate.*limit` | API rate limiting active | Normal for public endpoints |
+
+#### Errors (Node is degraded)
+| Pattern | Meaning | Action |
+|---|---|---|
+| `Error.*database.*corrupt` | Database corruption | Restore from backup or resync |
+| `Error.*handshake.*fail` | P2P handshake failed | Check chain ID |
+| `Error.*no.*peers` | Cannot connect to P2P | Check bootstrap nodes |
+| `Error.*timeout` | RPC/HTTP timeout | Check network, increase timeout |
+
+#### Fatal (Node will not function)
+| Pattern | Meaning | Action |
+|---|---|---|
+| `Fatal.*panic` | Client crashed | Check client version |
+| `Fatal.*OOM` | Out of memory | Increase memory limit |
+| `Fatal.*disk.*full` | No disk space | Free space |
+| `Fatal.*permission.*denied` | Filesystem permissions | Fix volume permissions |
+
+---
+
+## 7. Resource Issues
+
+### High CPU Usage
+```bash
+./show-ram.sh <config-name>
+./show-cpu.sh
+docker stats <container-name> --no-stream
+```
+
+### High Memory Usage
+```bash
+./show-ram.sh <config-name>
+docker stats <container-name> --no-stream --format "{{.Container}} | {{.MemUsage}} | {{.MemPerc}}"
+```
+
+### High Disk Usage
+```bash
+./show-db-size.sh
+docker system df -v
+```
+
+### Disk I/O Bottleneck
+```bash
+iotop -o -d 1
+```
+
+---
+
+## 8. Backup and Restore
+
+### Creating a Backup
+```bash
+# Local backup (to /backup directory)
+./backup-node.sh <config-name>
+
+# Remote backup (to WebDAV)
+./backup-node.sh <config-name> https://backup-server.tld/dav
+```
+
+### Restoring from Backup
+```bash
+# List available backups
+./list-backups.sh
+
+# Restore latest backup for config
+./restore-volumes.sh <config-name>
+
+# Restore from specific URL
+./restore-volumes.sh <config-name> https://backup-server.tld/backup/
+```
+
+### Cloning a Node
+
+```bash
+# Clone a node to a new location
+./clone-node.sh <config-name>
+
+# Clone peers (for faster sync)
+./clone-peers.sh <config-name>
+```
+
+### Nuclear Option: Full Reset
+
+```bash
+# WARNING: This deletes ALL data for the config
+./stop.sh <config-name> && \
+./rm.sh <config-name> && \
+./delete-volumes.sh <config-name> && \
+./delete-node-keys.sh <config-name> && \
+./force-recreate.sh <config-name>
+
+# Then check logs
+./logs.sh <config-name>
+```
+
+---
+
+## 9. Common Error Messages
+
+### Database Errors
+| Error | Cause | Solution |
+|---|---|---|
+| `database is corrupted` | Power loss, bug | Restore from backup or resync |
+| `database version mismatch` | Client version changed | Delete and resync |
+
+### P2P Errors
+| Error | Cause | Solution |
+|---|---|---|
+| `no configured peers` | Missing bootstrap nodes | Add bootstrap nodes |
+| `handshake failed` | Chain ID mismatch | Verify genesis.json |
+
+### RPC Errors
+| Error | Cause | Solution |
+|---|---|---|
+| `method not found` | Wrong client | Use correct client |
+| `connection refused` | Port not open | Check container running, port mapping |
+
+---
+
+## 10. OP Stack Specific Debugging
+
+### OP Node Issues
+
+```bash
+# Check op-node logs
+./logs.sh <config-name> | grep -i "op-node\|rollup\|sequencer"
+
+# Check rollup configuration (if custom)
+cat op/<network>/ethereum/rollup.json | jq .
+
+# Check if rollup.json is mounted
+docker exec <op-node-container> cat /config/rollup.json | jq .
+```
+
+### OP Wheel (Manual Intervention)
+
+```bash
+# Rewind to specific block (DANGEROUS - only if you know what you're doing)
+./op-wheel.sh engine set-forkchoice \
+  --unsafe=<block-hash> \
+  --safe=<block-hash> \
+  --finalized=<block-hash> \
+  --engine=http://<client-service>:8551/ \
+  --engine.open=http://<client-service>:8545 \
+  --engine.jwt-secret-path=/jwtsecret
+
+# Nuclear option: finalize latest local block
+./op-wheel-finalize-latest-block.sh <client-service> <node-service>
+```
+
+---
+
+## 11. CometBFT Family (Cosmos, etc.) Specific
+
+### Init Container Issues
+
+```bash
+# CometBFT chains use init.sh inside the container
+# The master script is at scripts/cometbft-common.sh
+
+# Check if init completed
+./logs.sh <config-name> | grep -i "init\|setup\|complete"
+
+# Check the init script
+cat <network>/<chain>/scripts/init.sh
+```
+
+---
+
+## 12. Quick Start Guide
+
+### Starting a Node
+
+```bash
+# 1. Set up environment
+echo "IP=$(curl -s ipinfo.io/ip)" > .env
+echo "DOMAIN=${IP//./-}.traefik.me" >> .env
+echo "MAIL=your-email@example.com" >> .env
+
+# 2. Select which nodes to run
+# Add compose files to COMPOSE_FILE (colon-separated)
+echo "COMPOSE_FILE=base.yml:rpc.yml:ethereum-mainnet-geth-pruned.yml" >> .env
+
+# 3. Start the node
+docker compose up -d
+
+# 4. Verify it's running
+./show-status.sh
+```
+
+### Accessing Your Node
+
+```bash
+# Once running, access via:
+# HTTP: http://<your-domain>/ethereum-mainnet-geth-pruned
+# HTTPS: https://<your-domain>/ethereum-mainnet-geth-pruned
+# WebSocket: wss://<your-domain>/ethereum-mainnet-geth-pruned
+
+# Or locally (if NO_SSL=true):
+# HTTP: http://localhost:<port>
+```
+
+---
+
+## 13. Configuration Reference
+
+### Environment Variables
+
+**Required for most setups:**
+```bash
+IP=203.0.113.42                    # Your public IP
+DOMAIN=203-0-113-42.traefik.me    # Your domain (traefik.me for testing)
+MAIL=your-email@example.com        # For Let's Encrypt SSL
+WHITELIST=0.0.0.0/0               # IP whitelist (0.0.0.0/0 = all)
+```
+
+**Optional:**
+```bash
+NO_SSL=true                       # Disable SSL (testing only)
+CHAINS_SUBNET=192.168.0.0/26      # Docker network subnet
+```
+
+**Chain-specific (examples):**
+```bash
+ETHEREUM_MAINNET_EXECUTION_RPC=https://fallback-rpc.example.com
+ARBITRUM_SEPOLIA_EXECUTION_RPC=https://arb-sepolia-rpc.example.com
+OP_NODE_NETWORK=mainnet
+OP_NODE_L1_RPC_URL=https://l1-rpc.example.com
+```
+
+### Compose File Structure
+
+Each compose file defines one or more services:
+- **client**: Execution layer (Geth, Erigon, Reth, etc.)
+- **node**: Consensus/derivation node (op-node, lighthouse, etc.)
+- **relay**: DA relay (eigenda-proxy, op-alt, etc.)
+- **proxy**: HTTP/WS proxy (nginx, etc.)
+- **database**: External database (Postgres, etc.)
+
+### Volume Naming
+
+Volumes are named after the config:
+```
+<config-name>_<service>_data
+<config-name>_<service>_config
+```
+
+Example: `ethereum-mainnet-geth-pruned_client_data`
+
+---
+
+## 14. Quick Debugging Checklist
+
+Use this checklist when debugging an issue:
+
+- [ ] **Is the container running?** → `./show-running.sh`
+- [ ] **Are there errors in logs?** → `./logs.sh <config> | grep -i error`
+- [ ] **Is the node synced?** → `./sync-status.sh <config>`
+- [ ] **Are peers connected?** → `./peer-count.sh`
+- [ ] **Are resources adequate?** → `./show-ram.sh`, `./show-db-size.sh`
+- [ ] **Is P2P working?** → Check peer count
+- [ ] **Is RPC responding?** → Test with curl
+- [ ] **Is disk space available?** → `df -h /var/lib/docker`
+- [ ] **Is the config file correct?** → `docker compose -f <file>.yml config`
+- [ ] **Are environment variables set?** → Check `.env`
+- [ ] **Is the genesis file correct?** → Check chain ID
+
+---
+
+## 15. When to Escalate
+
+Escalate to a human operator if:
+
+- [ ] Node stuck for > 2 hours with no progress
+- [ ] Repeated `Fatal` or `panic` errors after restart
+- [ ] Database corruption confirmed
+- [ ] Issue affects multiple nodes across different chains
+- [ ] Need to force-push to this repo
+
+---
+
+## 16. File Locations Quick Reference
+
+| What You Need | Where to Find It |
+|---|---|
+| Compose files | Root of this repo (`*.yml`) |
+| Operational scripts | Root of this repo (`*.sh`) |
+| Chain assets | `<network>/<chain>/` or `<stack>/<network>/<settlement>/` |
+| Genesis files | `<stack>/<network>/<settlement>/genesis.json` |
+| Rollup configs | `op/<network>/<settlement>/rollup.json` |
+| Custom Dockerfiles | `<path>/*.Dockerfile` |
+| Init scripts | `<path>/scripts/init.sh` |
+| CometBFT common | `scripts/cometbft-common.sh` |
+| Compose registry | `compose_registry.json` |
+| RPC endpoints | `reference-rpc-endpoint.json` |
+| Environment | `.env` |
+
+---
+
+## 17. Resource Requirements Reference
+
+| Node Type | Disk | RAM | CPU |
+|---|---|---|---|
+| Ethereum pruned | ~500GB | 8GB | 2+ cores |
+| Ethereum archive | ~2TB+ | 16GB+ | 4+ cores |
+| Ethereum archive-trace | ~4TB+ | 32GB+ | 8+ cores |
+| L2 pruned | ~100-500GB | 4-8GB | 2+ cores |
+| L2 archive | ~1-2TB | 8-16GB | 4+ cores |
+
+**Note:** Requirements vary by chain. Check specific chain documentation.
+
+---
+
+*This file is your complete operations and debugging reference. For additional user documentation, see README.md.*

abcore/mainnet/config.toml

@@ -0,0 +1,97 @@
+[Eth]
+NetworkId = 36888
+SyncMode = "snap"
+EthDiscoveryURLs = []
+SnapDiscoveryURLs = []
+NoPruning = true
+NoPrefetch = false
+TxLookupLimit = 0
+TransactionHistory = 0
+StateHistory = 90000
+LightPeers = 100
+DatabaseCache = 512
+DatabaseFreezer = ""
+TrieCleanCache = 154
+TrieDirtyCache = 256
+TrieTimeout = 3600000000000
+SnapshotCache = 102
+Preimages = true
+FilterLogCacheSize = 32
+EnablePreimageRecording = false
+RPCGasCap = 50000000
+RPCEVMTimeout = 5000000000
+RPCTxFeeCap = 0
+
+[Eth.Miner]
+GasFloor = 0
+GasCeil = 63000000
+GasPrice = 50000000000000
+Recommit = 2000000000
+NewPayloadTimeout = 2000000000
+
+[Eth.TxPool]
+Locals = []
+NoLocals = true
+Journal = "transactions.rlp"
+Rejournal = 3600000000000
+PriceLimit = 50000000000000
+PriceBump = 10
+AccountSlots = 65536
+GlobalSlots = 1048576
+AccountQueue = 65536
+GlobalQueue = 1048576
+Lifetime = 10800000000000
+
+[Eth.GPO]
+Blocks = 20
+Percentile = 60
+MaxHeaderHistory = 1024
+MaxBlockHistory = 1024
+MaxPrice = 5000000000000000
+IgnorePrice = 50000000000000
+
+[Node]
+DataDir = "/data/abcore/mainnet/nodedata"
+IPCPath = "geth.ipc"
+HTTPHost = "0.0.0.0"
+HTTPPort = 8545
+HTTPVirtualHosts = ["*"]
+HTTPModules = ["debug", "txpool", "net", "web3", "eth"]
+AuthAddr = "0.0.0.0"
+AuthPort = 8551
+AuthVirtualHosts = ["*"]
+WSHost = "0.0.0.0"
+WSPort = 8546
+WSModules = ["debug", "txpool", "net", "web3", "eth"]
+GraphQLVirtualHosts = ["*"]
+BatchRequestLimit = 1000
+BatchResponseMaxSize = 25000000
+
+[Node.P2P]
+MaxPeers = 20
+NoDiscovery = false
+DiscoveryV4 = true
+BootstrapNodes = ["enode://3965529bc8c043ead2fa9d4f235c50b35e3eda45284654a51ddc140ae4a78c8e919cf6a8645e2f48f3089cb579d7d7e90de75544e2faa7ad5300a2c3990a7e5b@54.150.187.191:33333","enode://30cf5e0262b3c1a430183de31063944a6d0164f5ab9c052df942c0f53a635c14b0cea1bcc3b989dbf2297d5939f93165fc8fc817e398fb6b9487fb39a5f342ee@57.182.215.62:33333","enode://ebbb5b7bfb13fb783412e0cc77d390455a4ce7af26c4a129ce4af3e0a91c4ad83ccd84aa85e8bccd50d6d912b2efab4f04f49b57ffcbae03886fbe1c659f98d5@13.159.65.214:33333","enode://0b0bdeff5720854e600025bdea7efb85dd0441e156d5ec32342e6ce192e396b5088cb8427dcdfc6f661632400078960acc9627eaeffc516803e1b4108f184e85@13.112.116.187:33333","enode://12c5dc3ce362f5303b04e426e1ffa1bcad3d09996c95a4fe132edee222b06652f2a3ee0a3b4423a38084767e7fd349177ec4c4f0c9624b3183df3573d08f14be@57.182.84.6:33333"]
+StaticNodes = []
+TrustedNodes = []
+ListenAddr = ":33333"
+DiscAddr = ""
+EnableMsgEvents = false
+
+[Node.HTTPTimeouts]
+ReadTimeout = 30000000000
+ReadHeaderTimeout = 30000000000
+WriteTimeout = 30000000000
+IdleTimeout = 120000000000
+
+[Metrics]
+HTTP = "127.0.0.1"
+Port = 6360
+InfluxDBEndpoint = "http://localhost:8386"
+InfluxDBDatabase = "geth"
+InfluxDBUsername = "test"
+InfluxDBPassword = "test"
+InfluxDBTags = "host=localhost"
+InfluxDBToken = "test"
+InfluxDBBucket = "geth"
+InfluxDBOrganization = "geth"

abcore/mainnet/genesis.json

@@ -0,0 +1,28 @@
+{
+  "config": {
+    "chainId": 36888,
+    "homesteadBlock": 0,
+    "eip150Block": 0,
+    "eip155Block": 0,
+    "eip158Block": 0,
+    "byzantiumBlock": 0,
+    "constantinopleBlock": 0,
+    "petersburgBlock": 0,
+    "istanbulBlock": 0,
+    "muirGlacierBlock": 0,
+    "berlinBlock": 0,
+    "clique": {
+      "period": 3,
+      "epoch": 30000
+    }
+  },
+  "timestamp": "0x67fda368",
+  "difficulty": "1",
+  "gasLimit": "63000000",
+  "extradata": "0x0000000000000000000000000000000000000000000000000000000000000000E9B95948d28EF808a9184d5fC98346EF3e56839c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
+  "alloc": {
+    "da8B88027Ac27532E1525DD67974c2377b450A08": {
+      "balance": "100000000000000000000000000000"
+    }
+  }
+}

abstract/external-node/abstract-mainnet-external-node-archive.yml

@@ -0,0 +1,162 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:abstract/external-node/abstract-mainnet-external-node-archive.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/abstract-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  abstract-mainnet-archive:
+    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_MAINNET_EXTERNAL_NODE_VERSION:-v31.0.0}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 12612:12612
+      - 12612:12612/udp
+    expose:
+      - 8545
+      - 8546
+    environment:
+      - DATABASE_POOL_SIZE=50
+      - DATABASE_URL=postgres://postgres:notsecurepassword@abstract-mainnet-archive-db:5430/zksync_local_ext_node
+      - EN_API_NAMESAPCES=eth,net,web3,debug,pubsub,debug,zks
+      - EN_ETH_CLIENT_URL=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - EN_HEALTHCHECK_PORT=3081
+      - EN_HTTP_PORT=8545
+      - EN_L1_CHAIN_ID=1
+      - EN_L2_CHAIN_ID=2741
+      - EN_MAIN_NODE_URL=https://api.mainnet.abs.xyz
+      - EN_MAX_RESPONSE_BODY_SIZE_MB=25
+      - EN_MAX_RESPONSE_BODY_SIZE_OVERRIDES_MB=eth_getLogs=100,eth_getBlockReceipts=None
+      - EN_MERKLE_TREE_PATH=./db/ext-node/lightweight
+      - EN_PROMETHEUS_PORT=3322
+      - EN_PRUNING_ENABLED=false
+      - EN_REQ_ENTITIES_LIMIT=100000
+      - EN_SNAPSHOTS_OBJECT_STORE_BUCKET_BASE_URL=raas-abstract-mainnet-external-node-snapshots
+      - EN_SNAPSHOTS_OBJECT_STORE_MODE=GCSAnonymousReadOnly
+      - EN_SNAPSHOTS_RECOVERY_ENABLED=true
+      - EN_STATE_CACHE_PATH=./db/ext-node/state_keeper
+      - EN_WS_PORT=8546
+      - RUST_LOG=warn,zksync=info,zksync_core::metadata_calculator=debug,zksync_state=info,zksync_utils=info,zksync_web3_decl::client=error
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ABSTRACT_MAINNET_EXTERNAL_NODE_ARCHIVE_DATA:-abstract-mainnet-external-node-archive}:/db
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
+      - traefik.enable=true
+      - traefik.http.middlewares.abstract-mainnet-external-node-archive-stripprefix.stripprefix.prefixes=/abstract-mainnet-archive
+      - traefik.http.services.abstract-mainnet-external-node-archive.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive.rule=Host(`$DOMAIN`) && (Path(`/abstract-mainnet-archive`) || Path(`/abstract-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.abstract-mainnet-external-node-archive.rule=Path(`/abstract-mainnet-archive`) || Path(`/abstract-mainnet-archive/`)}
+      - traefik.http.routers.abstract-mainnet-external-node-archive.middlewares=abstract-mainnet-external-node-archive-stripprefix, ipallowlist
+      - traefik.http.routers.abstract-mainnet-external-node-archive.priority=50   # gets any request that is not GET with UPGRADE header
+      - traefik.http.routers.abstract-mainnet-external-node-archive-ws.priority=100   # answers GET requests first
+      - traefik.http.services.abstract-mainnet-external-node-archive-ws.loadbalancer.server.port=8546
+      - traefik.http.routers.abstract-mainnet-external-node-archive-ws.service=abstract-mainnet-external-node-archive-ws
+      - traefik.http.routers.abstract-mainnet-external-node-archive.service=abstract-mainnet-external-node-archive
+      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
+      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-mainnet-archive`) || Path(`/abstract-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - ${NO_SSL:+traefik.http.routers.abstract-mainnet-external-node-archive-ws.rule=(Path(`/abstract-mainnet-archive`) || Path(`/abstract-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - traefik.http.routers.abstract-mainnet-external-node-archive-ws.middlewares=abstract-mainnet-external-node-archive-stripprefix, ipallowlist
+
+  abstract-mainnet-archive-db:
+    image: postgres:14
+    expose:
+      - 5430
+    environment:
+      - PGPORT=5430
+      - POSTGRES_PASSWORD=notsecurepassword
+    command: >
+      postgres
+      -c max_connections=200
+      -c log_error_verbosity=terse
+      -c shared_buffers=2GB
+      -c effective_cache_size=4GB
+      -c maintenance_work_mem=1GB
+      -c checkpoint_completion_target=0.9
+      -c random_page_cost=1.1
+      -c effective_io_concurrency=200
+      -c min_wal_size=4GB
+      -c max_wal_size=16GB
+      -c max_worker_processes=16
+      -c checkpoint_timeout=1800
+    networks:
+      - chains
+    volumes:
+      - ${ABSTRACT_MAINNET_EXTERNAL_NODE_ARCHIVE__DB_DATA:-abstract-mainnet-external-node-archive_db}:/var/lib/postgresql/data
+    healthcheck:
+      interval: 1s
+      timeout: 3s
+      test: [CMD-SHELL, psql -U postgres -c "select exists (select * from pg_stat_activity where datname = '' and application_name = 'pg_restore')" | grep -e ".f$$"]
+    logging: *logging-defaults
+
+volumes:
+  abstract-mainnet-external-node-archive:
+  abstract-mainnet-external-node-archive_db:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: abstract
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...

abstract/external-node/abstract-mainnet-external-node-pruned.yml

@@ -0,0 +1,162 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:abstract/external-node/abstract-mainnet-external-node-pruned.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/abstract-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  abstract-mainnet:
+    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_MAINNET_EXTERNAL_NODE_VERSION:-v31.0.0}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 14370:14370
+      - 14370:14370/udp
+    expose:
+      - 8545
+      - 8546
+    environment:
+      - DATABASE_POOL_SIZE=50
+      - DATABASE_URL=postgres://postgres:notsecurepassword@abstract-mainnet-db:5430/zksync_local_ext_node
+      - EN_API_NAMESAPCES=eth,net,web3,debug,pubsub,debug,zks
+      - EN_ETH_CLIENT_URL=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - EN_HEALTHCHECK_PORT=3081
+      - EN_HTTP_PORT=8545
+      - EN_L1_CHAIN_ID=1
+      - EN_L2_CHAIN_ID=2741
+      - EN_MAIN_NODE_URL=https://api.mainnet.abs.xyz
+      - EN_MAX_RESPONSE_BODY_SIZE_MB=25
+      - EN_MAX_RESPONSE_BODY_SIZE_OVERRIDES_MB=eth_getLogs=100,eth_getBlockReceipts=None
+      - EN_MERKLE_TREE_PATH=./db/ext-node/lightweight
+      - EN_PROMETHEUS_PORT=3322
+      - EN_PRUNING_ENABLED=true
+      - EN_REQ_ENTITIES_LIMIT=100000
+      - EN_SNAPSHOTS_OBJECT_STORE_BUCKET_BASE_URL=raas-abstract-mainnet-external-node-snapshots
+      - EN_SNAPSHOTS_OBJECT_STORE_MODE=GCSAnonymousReadOnly
+      - EN_SNAPSHOTS_RECOVERY_ENABLED=true
+      - EN_STATE_CACHE_PATH=./db/ext-node/state_keeper
+      - EN_WS_PORT=8546
+      - RUST_LOG=warn,zksync=info,zksync_core::metadata_calculator=debug,zksync_state=info,zksync_utils=info,zksync_web3_decl::client=error
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ABSTRACT_MAINNET_EXTERNAL_NODE_PRUNED_DATA:-abstract-mainnet-external-node-pruned}:/db
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
+      - traefik.enable=true
+      - traefik.http.middlewares.abstract-mainnet-external-node-pruned-stripprefix.stripprefix.prefixes=/abstract-mainnet
+      - traefik.http.services.abstract-mainnet-external-node-pruned.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned.rule=Host(`$DOMAIN`) && (Path(`/abstract-mainnet`) || Path(`/abstract-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.abstract-mainnet-external-node-pruned.rule=Path(`/abstract-mainnet`) || Path(`/abstract-mainnet/`)}
+      - traefik.http.routers.abstract-mainnet-external-node-pruned.middlewares=abstract-mainnet-external-node-pruned-stripprefix, ipallowlist
+      - traefik.http.routers.abstract-mainnet-external-node-pruned.priority=50   # gets any request that is not GET with UPGRADE header
+      - traefik.http.routers.abstract-mainnet-external-node-pruned-ws.priority=100   # answers GET requests first
+      - traefik.http.services.abstract-mainnet-external-node-pruned-ws.loadbalancer.server.port=8546
+      - traefik.http.routers.abstract-mainnet-external-node-pruned-ws.service=abstract-mainnet-external-node-pruned-ws
+      - traefik.http.routers.abstract-mainnet-external-node-pruned.service=abstract-mainnet-external-node-pruned
+      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
+      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-mainnet`) || Path(`/abstract-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - ${NO_SSL:+traefik.http.routers.abstract-mainnet-external-node-pruned-ws.rule=(Path(`/abstract-mainnet`) || Path(`/abstract-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - traefik.http.routers.abstract-mainnet-external-node-pruned-ws.middlewares=abstract-mainnet-external-node-pruned-stripprefix, ipallowlist
+
+  abstract-mainnet-db:
+    image: postgres:14
+    expose:
+      - 5430
+    environment:
+      - PGPORT=5430
+      - POSTGRES_PASSWORD=notsecurepassword
+    command: >
+      postgres
+      -c max_connections=200
+      -c log_error_verbosity=terse
+      -c shared_buffers=2GB
+      -c effective_cache_size=4GB
+      -c maintenance_work_mem=1GB
+      -c checkpoint_completion_target=0.9
+      -c random_page_cost=1.1
+      -c effective_io_concurrency=200
+      -c min_wal_size=4GB
+      -c max_wal_size=16GB
+      -c max_worker_processes=16
+      -c checkpoint_timeout=1800
+    networks:
+      - chains
+    volumes:
+      - ${ABSTRACT_MAINNET_EXTERNAL_NODE_PRUNED__DB_DATA:-abstract-mainnet-external-node-pruned_db}:/var/lib/postgresql/data
+    healthcheck:
+      interval: 1s
+      timeout: 3s
+      test: [CMD-SHELL, psql -U postgres -c "select exists (select * from pg_stat_activity where datname = '' and application_name = 'pg_restore')" | grep -e ".f$$"]
+    logging: *logging-defaults
+
+volumes:
+  abstract-mainnet-external-node-pruned:
+  abstract-mainnet-external-node-pruned_db:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: abstract
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...

abstract/external-node/abstract-testnet-external-node-archive.yml

@@ -0,0 +1,162 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:abstract/external-node/abstract-testnet-external-node-archive.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/abstract-testnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  abstract-testnet-archive:
+    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_TESTNET_EXTERNAL_NODE_VERSION:-v31.0.0}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 14028:14028
+      - 14028:14028/udp
+    expose:
+      - 8545
+      - 8546
+    environment:
+      - DATABASE_POOL_SIZE=50
+      - DATABASE_URL=postgres://postgres:notsecurepassword@abstract-testnet-archive-db:5430/zksync_local_ext_node
+      - EN_API_NAMESAPCES=eth,net,web3,debug,pubsub,debug,zks
+      - EN_ETH_CLIENT_URL=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - EN_HEALTHCHECK_PORT=3081
+      - EN_HTTP_PORT=8545
+      - EN_L1_CHAIN_ID=11155111
+      - EN_L2_CHAIN_ID=11124
+      - EN_MAIN_NODE_URL=https://api.testnet.abs.xyz
+      - EN_MAX_RESPONSE_BODY_SIZE_MB=25
+      - EN_MAX_RESPONSE_BODY_SIZE_OVERRIDES_MB=eth_getLogs=100,eth_getBlockReceipts=None
+      - EN_MERKLE_TREE_PATH=./db/ext-node/lightweight
+      - EN_PROMETHEUS_PORT=3322
+      - EN_PRUNING_ENABLED=false
+      - EN_REQ_ENTITIES_LIMIT=100000
+      - EN_SNAPSHOTS_OBJECT_STORE_BUCKET_BASE_URL=abstract-testnet-external-node-snapshots
+      - EN_SNAPSHOTS_OBJECT_STORE_MODE=GCSAnonymousReadOnly
+      - EN_SNAPSHOTS_RECOVERY_ENABLED=true
+      - EN_STATE_CACHE_PATH=./db/ext-node/state_keeper
+      - EN_WS_PORT=8546
+      - RUST_LOG=warn,zksync=info,zksync_core::metadata_calculator=debug,zksync_state=info,zksync_utils=info,zksync_web3_decl::client=error
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ABSTRACT_TESTNET_EXTERNAL_NODE_ARCHIVE_DATA:-abstract-testnet-external-node-archive}:/db
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
+      - traefik.enable=true
+      - traefik.http.middlewares.abstract-testnet-external-node-archive-stripprefix.stripprefix.prefixes=/abstract-testnet-archive
+      - traefik.http.services.abstract-testnet-external-node-archive.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive.rule=Host(`$DOMAIN`) && (Path(`/abstract-testnet-archive`) || Path(`/abstract-testnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.abstract-testnet-external-node-archive.rule=Path(`/abstract-testnet-archive`) || Path(`/abstract-testnet-archive/`)}
+      - traefik.http.routers.abstract-testnet-external-node-archive.middlewares=abstract-testnet-external-node-archive-stripprefix, ipallowlist
+      - traefik.http.routers.abstract-testnet-external-node-archive.priority=50   # gets any request that is not GET with UPGRADE header
+      - traefik.http.routers.abstract-testnet-external-node-archive-ws.priority=100   # answers GET requests first
+      - traefik.http.services.abstract-testnet-external-node-archive-ws.loadbalancer.server.port=8546
+      - traefik.http.routers.abstract-testnet-external-node-archive-ws.service=abstract-testnet-external-node-archive-ws
+      - traefik.http.routers.abstract-testnet-external-node-archive.service=abstract-testnet-external-node-archive
+      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
+      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-testnet-archive`) || Path(`/abstract-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - ${NO_SSL:+traefik.http.routers.abstract-testnet-external-node-archive-ws.rule=(Path(`/abstract-testnet-archive`) || Path(`/abstract-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - traefik.http.routers.abstract-testnet-external-node-archive-ws.middlewares=abstract-testnet-external-node-archive-stripprefix, ipallowlist
+
+  abstract-testnet-archive-db:
+    image: postgres:14
+    expose:
+      - 5430
+    environment:
+      - PGPORT=5430
+      - POSTGRES_PASSWORD=notsecurepassword
+    command: >
+      postgres
+      -c max_connections=200
+      -c log_error_verbosity=terse
+      -c shared_buffers=2GB
+      -c effective_cache_size=4GB
+      -c maintenance_work_mem=1GB
+      -c checkpoint_completion_target=0.9
+      -c random_page_cost=1.1
+      -c effective_io_concurrency=200
+      -c min_wal_size=4GB
+      -c max_wal_size=16GB
+      -c max_worker_processes=16
+      -c checkpoint_timeout=1800
+    networks:
+      - chains
+    volumes:
+      - ${ABSTRACT_TESTNET_EXTERNAL_NODE_ARCHIVE__DB_DATA:-abstract-testnet-external-node-archive_db}:/var/lib/postgresql/data
+    healthcheck:
+      interval: 1s
+      timeout: 3s
+      test: [CMD-SHELL, psql -U postgres -c "select exists (select * from pg_stat_activity where datname = '' and application_name = 'pg_restore')" | grep -e ".f$$"]
+    logging: *logging-defaults
+
+volumes:
+  abstract-testnet-external-node-archive:
+  abstract-testnet-external-node-archive_db:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: abstract-sepolia
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...

abstract/external-node/abstract-testnet-external-node-pruned.yml

@@ -0,0 +1,162 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:abstract/external-node/abstract-testnet-external-node-pruned.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/abstract-testnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  abstract-testnet:
+    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_TESTNET_EXTERNAL_NODE_VERSION:-v31.0.0}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 12157:12157
+      - 12157:12157/udp
+    expose:
+      - 8545
+      - 8546
+    environment:
+      - DATABASE_POOL_SIZE=50
+      - DATABASE_URL=postgres://postgres:notsecurepassword@abstract-testnet-db:5430/zksync_local_ext_node
+      - EN_API_NAMESAPCES=eth,net,web3,debug,pubsub,debug,zks
+      - EN_ETH_CLIENT_URL=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - EN_HEALTHCHECK_PORT=3081
+      - EN_HTTP_PORT=8545
+      - EN_L1_CHAIN_ID=11155111
+      - EN_L2_CHAIN_ID=11124
+      - EN_MAIN_NODE_URL=https://api.testnet.abs.xyz
+      - EN_MAX_RESPONSE_BODY_SIZE_MB=25
+      - EN_MAX_RESPONSE_BODY_SIZE_OVERRIDES_MB=eth_getLogs=100,eth_getBlockReceipts=None
+      - EN_MERKLE_TREE_PATH=./db/ext-node/lightweight
+      - EN_PROMETHEUS_PORT=3322
+      - EN_PRUNING_ENABLED=true
+      - EN_REQ_ENTITIES_LIMIT=100000
+      - EN_SNAPSHOTS_OBJECT_STORE_BUCKET_BASE_URL=abstract-testnet-external-node-snapshots
+      - EN_SNAPSHOTS_OBJECT_STORE_MODE=GCSAnonymousReadOnly
+      - EN_SNAPSHOTS_RECOVERY_ENABLED=true
+      - EN_STATE_CACHE_PATH=./db/ext-node/state_keeper
+      - EN_WS_PORT=8546
+      - RUST_LOG=warn,zksync=info,zksync_core::metadata_calculator=debug,zksync_state=info,zksync_utils=info,zksync_web3_decl::client=error
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ABSTRACT_TESTNET_EXTERNAL_NODE_PRUNED_DATA:-abstract-testnet-external-node-pruned}:/db
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
+      - traefik.enable=true
+      - traefik.http.middlewares.abstract-testnet-external-node-pruned-stripprefix.stripprefix.prefixes=/abstract-testnet
+      - traefik.http.services.abstract-testnet-external-node-pruned.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned.rule=Host(`$DOMAIN`) && (Path(`/abstract-testnet`) || Path(`/abstract-testnet/`))}
+      - ${NO_SSL:+traefik.http.routers.abstract-testnet-external-node-pruned.rule=Path(`/abstract-testnet`) || Path(`/abstract-testnet/`)}
+      - traefik.http.routers.abstract-testnet-external-node-pruned.middlewares=abstract-testnet-external-node-pruned-stripprefix, ipallowlist
+      - traefik.http.routers.abstract-testnet-external-node-pruned.priority=50   # gets any request that is not GET with UPGRADE header
+      - traefik.http.routers.abstract-testnet-external-node-pruned-ws.priority=100   # answers GET requests first
+      - traefik.http.services.abstract-testnet-external-node-pruned-ws.loadbalancer.server.port=8546
+      - traefik.http.routers.abstract-testnet-external-node-pruned-ws.service=abstract-testnet-external-node-pruned-ws
+      - traefik.http.routers.abstract-testnet-external-node-pruned.service=abstract-testnet-external-node-pruned
+      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
+      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-testnet`) || Path(`/abstract-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - ${NO_SSL:+traefik.http.routers.abstract-testnet-external-node-pruned-ws.rule=(Path(`/abstract-testnet`) || Path(`/abstract-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - traefik.http.routers.abstract-testnet-external-node-pruned-ws.middlewares=abstract-testnet-external-node-pruned-stripprefix, ipallowlist
+
+  abstract-testnet-db:
+    image: postgres:14
+    expose:
+      - 5430
+    environment:
+      - PGPORT=5430
+      - POSTGRES_PASSWORD=notsecurepassword
+    command: >
+      postgres
+      -c max_connections=200
+      -c log_error_verbosity=terse
+      -c shared_buffers=2GB
+      -c effective_cache_size=4GB
+      -c maintenance_work_mem=1GB
+      -c checkpoint_completion_target=0.9
+      -c random_page_cost=1.1
+      -c effective_io_concurrency=200
+      -c min_wal_size=4GB
+      -c max_wal_size=16GB
+      -c max_worker_processes=16
+      -c checkpoint_timeout=1800
+    networks:
+      - chains
+    volumes:
+      - ${ABSTRACT_TESTNET_EXTERNAL_NODE_PRUNED__DB_DATA:-abstract-testnet-external-node-pruned_db}:/var/lib/postgresql/data
+    healthcheck:
+      interval: 1s
+      timeout: 3s
+      test: [CMD-SHELL, psql -U postgres -c "select exists (select * from pg_stat_activity where datname = '' and application_name = 'pg_restore')" | grep -e ".f$$"]
+    logging: *logging-defaults
+
+volumes:
+  abstract-testnet-external-node-pruned:
+  abstract-testnet-external-node-pruned_db:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: abstract-sepolia
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...

accesslog-shipper.awk

@@ -0,0 +1,18 @@
+# Streams dshackle access-log lines unchanged, and every 1000 lines OR 30s
+# injects a __shipstat__ checkpoint carrying the cumulative sent-count for this
+# connection. The splits cruncher (claude host) filters these OUT of event
+# processing and uses them to reconcile shipped-vs-ingested per gateway per hour
+# — the completeness signal the time-based floor cannot see (event-loss-by-
+# rotation, 2026-07-10). `sess` = connection-start epoch so the cruncher detects
+# counter resets on shipper reconnect (retry loop resumes at file END).
+BEGIN { sess = systime(); last = sess; n = 0 }
+{
+    n++
+    print
+    now = systime()
+    if (n % 1000 == 0 || now - last >= 30) {
+        printf "{\"__shipstat__\":1,\"sess\":%d,\"sent\":%d,\"ts\":%d}\n", sess, n, now
+        fflush()
+        last = now
+    }
+}

apply-dshackle-overrides.py

@@ -0,0 +1,143 @@
+#!/usr/bin/env python3
+"""apply-dshackle-overrides.py - weave HOST-LOCAL dshackle upstream overrides into
+the generated main_configs/*.yaml so they survive every configure-drpc regeneration.
+
+Override file (NOT in the repo - host-local, like rpc-local/compose.d):
+    /root/rpc-local/dshackle-overrides.yaml
+
+Schema (match by upstream id OR by chain; id wins):
+    upstreams:
+      uk-4-base-mainnet-op-reth-pruned:        # or e.g. "chain:base"
+        method_groups_disabled: [trace, debug] # removed from enabled, added to disabled
+        methods_disabled: [eth_getFilterLogs]  # per-method disables (methods.disabled)
+        options:
+          disable-validation: true             # merged into upstream options
+
+Rationale: heavy methods at flat per-call pay poison the chain's latency scoring
+(operator method-eviction rule 2026-07-10; see method-economics.py). The disable
+decision is local to the gateway's market, so the config lives on the gateway.
+
+Called by reload_dshackle.sh before signaling dshackle - i.e. re-applied on every
+ansible config push. NOTE: dshackle only re-reads upstream method lists on RESTART;
+this keeps the on-disk config permanently correct, the next restart activates it.
+Idempotent. Silent no-op when the override file is absent.
+"""
+import glob
+import os
+import sys
+
+import yaml
+
+OVERRIDES = '/root/rpc-local/dshackle-overrides.yaml'
+CONFIG_DIR = '/root/rpc/main_configs'
+
+
+def apply(upstream, ov):
+    changed = False
+    mg = upstream.setdefault('method-groups', {}) or {}
+    for grp in ov.get('method_groups_disabled') or []:
+        en = mg.get('enabled') or []
+        if grp in en:
+            en.remove(grp)
+            mg['enabled'] = en
+            changed = True
+        dis = mg.get('disabled') or []
+        if grp not in dis:
+            dis.append(grp)
+            mg['disabled'] = dis
+            changed = True
+    if mg:
+        upstream['method-groups'] = mg
+    for meth in ov.get('methods_disabled') or []:
+        methods = upstream.setdefault('methods', {}) or {}
+        dis = methods.get('disabled') or []
+        if not any((d.get('name') if isinstance(d, dict) else d) == meth for d in dis):
+            dis.append({'name': meth})
+            methods['disabled'] = dis
+            upstream['methods'] = methods
+            changed = True
+    for k, v in (ov.get('options') or {}).items():
+        opts = upstream.setdefault('options', {}) or {}
+        if opts.get(k) != v:
+            opts[k] = v
+            upstream['options'] = opts
+            changed = True
+    return changed
+
+
+ENVFILE = '/root/rpc/.env'
+
+
+def env_overrides():
+    """Chain-level overrides from .env (rendered from host_vars env_overrides):
+        DSHACKLE_<CHAIN>_METHOD_GROUPS_DISABLED=trace,debug
+        DSHACKLE_<CHAIN>_METHODS_DISABLED=eth_getFilterLogs
+    <CHAIN> = dshackle chain name, upper, '-' -> '_' (e.g. BASE, ETH_BEACON_CHAIN)."""
+    spec = {}
+    if not os.path.exists(ENVFILE):
+        return spec
+    import re as _re
+    for line in open(ENVFILE):
+        m = _re.match(r'DSHACKLE_([A-Z0-9_]+)_(METHOD_GROUPS|METHODS)_DISABLED=(.*)', line.strip())
+        if not m:
+            continue
+        chain = m.group(1).lower().replace('_', '-')
+        key = 'method_groups_disabled' if m.group(2) == 'METHOD_GROUPS' else 'methods_disabled'
+        vals = [v.strip() for v in m.group(3).split(',') if v.strip()]
+        if vals:
+            spec.setdefault(f'chain:{chain}', {}).setdefault(key, []).extend(vals)
+    return spec
+
+
+def main():
+    spec = env_overrides()
+    if os.path.exists(OVERRIDES):
+        for k, v in ((yaml.safe_load(open(OVERRIDES)) or {}).get('upstreams') or {}).items():
+            cur = spec.setdefault(k, {})
+            for kk, vv in (v or {}).items():
+                if isinstance(vv, list):
+                    cur[kk] = sorted(set((cur.get(kk) or []) + vv))
+                else:
+                    cur.setdefault(kk, vv)
+    if not spec:
+        return
+    total = 0
+    for path in glob.glob(os.path.join(CONFIG_DIR, '*.yaml')):
+        try:
+            doc = yaml.safe_load(open(path))
+        except yaml.YAMLError:
+            continue
+        if not isinstance(doc, dict) or 'upstreams' not in doc:
+            continue
+        changed = False
+        for up in doc['upstreams'] or []:
+            if not isinstance(up, dict):
+                continue
+            ov = spec.get(up.get('id')) or spec.get(f"chain:{up.get('chain')}")
+            if ov and apply(up, ov):
+                changed = True
+        if changed:
+            text = yaml.safe_dump(doc, default_flow_style=False, sort_keys=False)
+            # dshackle silently refuses to hot-reload configs containing TABS
+            # (operator gotcha 2026-07-10) - fail loudly, never write a tabbed file.
+            if '\t' in text:
+                print(f'dshackle-overrides: REFUSING to write {path} - tab in output')
+                continue
+            with open(path, 'w') as f:
+                f.write(text)
+            total += 1
+            print(f'dshackle-overrides: rewove {path}')
+    # tab audit on ALL configs (even unchanged): a tabbed file silently fails
+    # dshackle's hot-reload, so disk and running state diverge invisibly.
+    for path in glob.glob(os.path.join(CONFIG_DIR, '*.yaml')):
+        try:
+            if '\t' in open(path, errors='replace').read():
+                print(f'dshackle-overrides: WARNING {path} contains TABS - dshackle will SILENTLY skip reloading it')
+        except OSError:
+            pass
+    if total:
+        print(f'dshackle-overrides: {total} file(s) rewoven (dshackle hot-reloads on the HUP that follows)')
+
+
+if __name__ == '__main__':
+    main()

arb/alephzero/mainnet/baseConfig.json

@@ -0,0 +1,5 @@
+{
+  "chain": {
+    "info-json": "[{\"chain-id\":41455,\"parent-chain-id\":1,\"parent-chain-is-arbitrum\":false,\"chain-config\":{\"homesteadBlock\":0,\"daoForkBlock\":null,\"daoForkSupport\":true,\"eip150Block\":0,\"eip150Hash\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"eip155Block\":0,\"eip158Block\":0,\"byzantiumBlock\":0,\"constantinopleBlock\":0,\"petersburgBlock\":0,\"istanbulBlock\":0,\"muirGlacierBlock\":0,\"berlinBlock\":0,\"londonBlock\":0,\"clique\":{\"period\":0,\"epoch\":0},\"arbitrum\":{\"EnableArbOS\":true,\"AllowDebugPrecompiles\":false,\"DataAvailabilityCommittee\":true,\"InitialArbOSVersion\":20,\"GenesisBlockNum\":0,\"MaxCodeSize\":98304,\"MaxInitCodeSize\":49152,\"InitialChainOwner\":\"0x257812604076712675ae9788F5Bd738173CA3CE0\"},\"chainId\":41455},\"rollup\":{\"bridge\":\"0x41Ec9456AB918f2aBA81F38c03Eb0B93b78E84d9\",\"inbox\":\"0x56D8EC76a421063e1907503aDd3794c395256AEb\",\"sequencer-inbox\":\"0xF75206c49c1694594E3e69252E519434f1579876\",\"rollup\":\"0x1CA12290D954CFe022323b6A6Df92113ed6b1C98\",\"validator-utils\":\"0x2b0E04Dc90e3fA58165CB41E2834B44A56E766aF\",\"validator-wallet-creator\":\"0x9CAd81628aB7D8e239F1A5B497313341578c5F71\",\"deployed-at\":20412468}}]"
+  }
+}

arb/alephzero/sepolia/baseConfig.json

@@ -0,0 +1,6 @@
+{
+    "chain": {
+	"info-json": "[{\"chain-id\":2039,\"parent-chain-id\":11155111,\"parent-chain-is-arbitrum\":false,\"chain-name\":\"Aleph Zero EVM testnet\",\"chain-config\":{\"homesteadBlock\":0,\"daoForkBlock\":null,\"daoForkSupport\":true,\"eip150Block\":0,\"eip150Hash\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"eip155Block\":0,\"eip158Block\":0,\"byzantiumBlock\":0,\"constantinopleBlock\":0,\"petersburgBlock\":0,\"istanbulBlock\":0,\"muirGlacierBlock\":0,\"berlinBlock\":0,\"londonBlock\":0,\"clique\":{\"period\":0,\"epoch\":0},\"arbitrum\":{\"EnableArbOS\":true,\"AllowDebugPrecompiles\":false,\"DataAvailabilityCommittee\":true,\"InitialArbOSVersion\":20,\"GenesisBlockNum\":0,\"MaxCodeSize\":98304,\"MaxInitCodeSize\":49152,\"InitialChainOwner\":\"0x4c6dfF3e40e82a1fB599e062051726a9f7808a18\"},\"chainId\":2039},\"rollup\":{\"bridge\":\"0xCB5c0B38C45Fad0C20591E26b0b3C3809123994A\",\"inbox\":\"0xb27fd27987a71a6B77Fb8705bFb6010C411083EB\",\"sequencer-inbox\":\"0x16Ef70c48EF4BaaCfdaa4AfdD37F69332832a0bD\",\"rollup\":\"0xC8C08A4DbbF3367c8441151591c3d935947CB42F\",\"validator-utils\":\"0xb33Dca7b17c72CFC311D68C543cd4178E0d7ce55\",\"validator-wallet-creator\":\"0x75500812ADC9E51b721BEa31Df322EEc66967DDF\",\"deployed-at\":5827184}}]",
+	"name": "Aleph Zero EVM testnet"
+    }
+}

arb/apechain/arbitrum-one/baseConfig.json

@@ -0,0 +1,5 @@
+{
+    "chain": {
+        "info-json": "[{\"chain-id\": 33139, \"parent-chain-id\": 42161, \"chain-name\": \"apechain\", \"chain-config\": {\"chainId\": 33139, \"homesteadBlock\": 0, \"daoForkBlock\": null, \"daoForkSupport\": true, \"eip150Block\": 0, \"eip150Hash\": \"0x0000000000000000000000000000000000000000000000000000000000000000\", \"eip155Block\": 0, \"eip158Block\": 0, \"byzantiumBlock\": 0, \"constantinopleBlock\": 0, \"petersburgBlock\": 0, \"istanbulBlock\": 0, \"muirGlacierBlock\": 0, \"berlinBlock\": 0, \"londonBlock\": 0, \"clique\": {\"period\": 0, \"epoch\": 0}, \"arbitrum\": {\"EnableArbOS\": true, \"AllowDebugPrecompiles\": false, \"DataAvailabilityCommittee\": false, \"InitialArbOSVersion\": 31, \"EigenDA\": false, \"InitialChainOwner\": \"0x5737cdbb3a67001441c0da8b86e6b1826705601c\", \"GenesisBlockNum\": 0}}, \"rollup\": {\"bridge\": \"0x6B71AFb4b7725227ab944c96FE018AB9dc0434b8\", \"inbox\": \"0x1B98e4ED82Ee1a91A65a38C690e2266364064D15\", \"sequencer-inbox\": \"0xE6a92Ae29E24C343eE66A2B3D3ECB783d65E4a3C\", \"rollup\": \"0x374de579AE15aD59eD0519aeAf1A23F348Df259c\", \"validator-utils\": \"0xaB36aec5517C346D21b9C19429BAA5aa87D17fCa\", \"validator-wallet-creator\": \"0x5a6C98F6A60BDC02cE4d8AD43b4Fc88Fe5b38856\", \"deployed-at\": 247653199}, \"parent-chain-is-arbitrum\": true}]"
+    }
+}

arb/arbnode/arbitrum-one-arbnode-archive-leveldb-hash.yml

@@ -0,0 +1,113 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/arbnode/arbitrum-one-arbnode-archive-leveldb-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-one-arbnode-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-one-arbnode-archive:
+    image: ${ARBITRUM_ARBNODE_IMAGE:-offchainlabs/arb-node}:${ARBITRUM_ONE_ARBNODE_VERSION:-v1.4.6-551a39b3}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+      - 8546
+    entrypoint: [/home/user/go/bin/arb-node]
+    command:
+      - --core.checkpoint-gas-frequency=156250000
+      - --l1.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --l2.disable-upstream
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=7070
+      - --node.cache.allow-slow-lookup
+      - --node.chain-id=42161
+      - --node.rpc.addr=0.0.0.0
+      - --node.rpc.enable-l1-calls
+      - --node.rpc.port=8545
+      - --node.rpc.tracing.enable
+      - --node.rpc.tracing.namespace=trace
+      - --node.ws.addr=0.0.0.0
+      - --node.ws.port=8546
+      - --persistent.chain=/data/datadir/
+      - --persistent.global-config=/data/
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_ARBNODE_ARCHIVE_LEVELDB_HASH_DATA:-arbitrum-one-arbnode-archive-leveldb-hash}:/data
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-one-arbnode-archive-leveldb-hash-stripprefix.stripprefix.prefixes=/arbitrum-one-arbnode-archive
+      - traefik.http.services.arbitrum-one-arbnode-archive-leveldb-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-arbnode-archive-leveldb-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-arbnode-archive-leveldb-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-arbnode-archive-leveldb-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-one-arbnode-archive`) || Path(`/arbitrum-one-arbnode-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-one-arbnode-archive-leveldb-hash.rule=Path(`/arbitrum-one-arbnode-archive`) || Path(`/arbitrum-one-arbnode-archive/`)}
+      - traefik.http.routers.arbitrum-one-arbnode-archive-leveldb-hash.middlewares=arbitrum-one-arbnode-archive-leveldb-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-one-arbnode-archive-leveldb-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...

arb/connext/sepolia/baseConfig.json

@@ -0,0 +1,6 @@
+{
+  "chain": {
+    "info-json": "[{\"chain-id\":6398,\"parent-chain-id\":11155111,\"parent-chain-is-arbitrum\":false,\"chain-name\":\"Connext Sepolia\",\"chain-config\":{\"homesteadBlock\":0,\"daoForkBlock\":null,\"daoForkSupport\":true,\"eip150Block\":0,\"eip150Hash\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"eip155Block\":0,\"eip158Block\":0,\"byzantiumBlock\":0,\"constantinopleBlock\":0,\"petersburgBlock\":0,\"istanbulBlock\":0,\"muirGlacierBlock\":0,\"berlinBlock\":0,\"londonBlock\":0,\"clique\":{\"period\":0,\"epoch\":0},\"arbitrum\":{\"EnableArbOS\":true,\"AllowDebugPrecompiles\":false,\"DataAvailabilityCommittee\":true,\"InitialArbOSVersion\":20,\"GenesisBlockNum\":0,\"MaxCodeSize\":24576,\"MaxInitCodeSize\":49152,\"InitialChainOwner\":\"0x8ECD393576Ca37a7e5095f31bdfE21F606FF5F75\"},\"chainId\":6398},\"rollup\":{\"bridge\":\"0xf0b58FA876005898798a66A04EE09159C199CB7A\",\"inbox\":\"0x7bc7DAF843bf57c54D41D912F8221A2eE830c320\",\"sequencer-inbox\":\"0x7f5C1a58014E9DE69663CAc441bfa4C5d94b7E64\",\"rollup\":\"0xE6D7bf11A6264BACa59e8fAD7f6985FaC8f62e60\",\"validator-utils\":\"0xb33Dca7b17c72CFC311D68C543cd4178E0d7ce55\",\"validator-wallet-creator\":\"0x75500812ADC9E51b721BEa31Df322EEc66967DDF\",\"deployed-at\":5780509}}]",
+    "name": "Connext Sepolia"
+  }
+}

arb/everclear/mainnet/baseConfig.json

@@ -0,0 +1,6 @@
+{
+  "chain": {
+    "name": "Everclear Mainnet",
+    "info-json": "[{\"chain-id\":25327,\"parent-chain-id\":1,\"parent-chain-is-arbitrum\":false,\"chain-name\":\"Everclear Mainnet\",\"chain-config\":{\"homesteadBlock\":0,\"daoForkBlock\":null,\"daoForkSupport\":true,\"eip150Block\":0,\"eip150Hash\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"eip155Block\":0,\"eip158Block\":0,\"byzantiumBlock\":0,\"constantinopleBlock\":0,\"petersburgBlock\":0,\"istanbulBlock\":0,\"muirGlacierBlock\":0,\"berlinBlock\":0,\"londonBlock\":0,\"clique\":{\"period\":0,\"epoch\":0},\"arbitrum\":{\"EnableArbOS\":true,\"AllowDebugPrecompiles\":false,\"DataAvailabilityCommittee\":true,\"InitialArbOSVersion\":20,\"GenesisBlockNum\":0,\"MaxCodeSize\":24576,\"MaxInitCodeSize\":49152,\"InitialChainOwner\":\"0x98a426C8ED821cAaef1b4BF7D29b514dcef970C0\"},\"chainId\":25327},\"rollup\":{\"bridge\":\"0x4eb4fB614e1aa3634513319F4Ec7334bC4321356\",\"inbox\":\"0x97FdC935c5E25613AA13a054C7Aa71cf751DB495\",\"sequencer-inbox\":\"0x7B0517E0104dB60198f9d573C0aB8d480207827E\",\"rollup\":\"0xc6CAd31D83E33Fc8fBc855f36ef9Cb2fCE070f5C\",\"validator-utils\":\"0x2b0E04Dc90e3fA58165CB41E2834B44A56E766aF\",\"validator-wallet-creator\":\"0x9CAd81628aB7D8e239F1A5B497313341578c5F71\",\"deployed-at\":20684364}}]"
+  }
+}

arb/fireeth/arbitrum-one-fireeth-pruned-pebble-hash.yml

@@ -0,0 +1,145 @@
+---
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/fireeth/arbitrum-one-fireeth-pruned-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-one \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: 10m
+    max-file: '3'
+
+services:
+  arbitrum-one:
+    image: ${ARBITRUM_FIREETH_IMAGE:-ghcr.io/streamingfast/firehose-ethereum}:${ARBITRUM_ONE_FIREETH_VERSION:-v2.11.7-nitro-nitro-v3.5.5-fh3.0}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    environment:
+      - ${ARBITRUM_ONE_FIREETH_PRUNED_PEBBLE_HASH_S3_BLOCKS_STORE:-/firehose-data/storage/merged-blocks}
+    entrypoint: [sh, -c, 'exec fireeth -c /config/firehose.yml start --substreams-rpc-endpoints "${ ARBITRUM_ONE_EXECUTION_RPC}" --reader-node-arguments "$*"', _]
+    command:
+      - --execution.caching.archive=false
+      - --execution.caching.state-scheme=hash
+      - --execution.rpc.gas-cap=600000000
+      - --execution.sequencer.enable=false
+      - --firehose-enabled
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,debug,admin,txpool,engine
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --init.download-path=/tmp
+      - --init.latest=pruned
+      - --persistent.chain=/firehose-data/reader/data/arbitrum-one
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_FIREETH_PRUNED_PEBBLE_HASH_DATA:-arbitrum-one-fireeth-pruned-pebble-hash}:/firehose-data
+      - ${ARBITRUM_ONE_FIREETH_PRUNED_PEBBLE_HASH_MERGED_BLOCKS_DATA:-arbitrum-one-fireeth-pruned-pebble-hash-blocks}:/firehose-data/storage/merged-blocks
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-one-fireeth-pruned-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-one
+      - traefik.http.services.arbitrum-one-fireeth-pruned-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-fireeth-pruned-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-fireeth-pruned-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-fireeth-pruned-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-one`) || Path(`/arbitrum-one/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-one-fireeth-pruned-pebble-hash.rule=Path(`/arbitrum-one`) || Path(`/arbitrum-one/`)}
+      - traefik.http.routers.arbitrum-one-fireeth-pruned-pebble-hash.middlewares=arbitrum-one-fireeth-pruned-pebble-hash-stripprefix, ipallowlist
+      - traefik.http.services.arbitrum-one-fireeth-pruned-pebble-hash-firehose.loadbalancer.server.scheme=h2c
+      - traefik.http.routers.arbitrum-one-fireeth-pruned-pebble-hash-firehose.service=arbitrum-one-fireeth-pruned-pebble-hash-firehose
+      - traefik.http.services.arbitrum-one-fireeth-pruned-pebble-hash-firehose.loadbalancer.server.port=10015
+      - traefik.http.routers.arbitrum-one-fireeth-pruned-pebble-hash-firehose.entrypoints=grpc
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-fireeth-pruned-pebble-hash-firehose.tls.certresolver=myresolver}
+      - traefik.http.routers.arbitrum-one-fireeth-pruned-pebble-hash-firehose.rule=Host(`arbitrum-one.${DOMAIN}`)
+      - traefik.http.routers.arbitrum-one-fireeth-pruned-pebble-hash-firehose.middlewares=ipallowlist
+      - traefik.http.services.arbitrum-one-fireeth-pruned-pebble-hash-substreams.loadbalancer.server.scheme=h2c
+      - traefik.http.routers.arbitrum-one-fireeth-pruned-pebble-hash-substreams.service=arbitrum-one-fireeth-pruned-pebble-hash-substreams
+      - traefik.http.services.arbitrum-one-fireeth-pruned-pebble-hash-substreams.loadbalancer.server.port=10016
+      - traefik.http.routers.arbitrum-one-fireeth-pruned-pebble-hash-substreams.entrypoints=grpc
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-fireeth-pruned-pebble-hash-substreams.tls.certresolver=myresolver}
+      - traefik.http.routers.arbitrum-one-fireeth-pruned-pebble-hash-substreams.rule=Host(`arbitrum-one-substreams.${DOMAIN}`)
+      - traefik.http.routers.arbitrum-one-fireeth-pruned-pebble-hash-substreams.middlewares=ipallowlist
+
+volumes:
+  arbitrum-one-fireeth-pruned-pebble-hash:
+  arbitrum-one-fireeth-pruned-pebble-hash-blocks:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro-erigon/arbitrum-sepolia-nitro-erigon-archive-trace.yml

@@ -0,0 +1,166 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro-erigon/arbitrum-sepolia-nitro-erigon-archive-trace.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-sepolia-nitro-erigon-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-sepolia-nitro-erigon-archive:
+    image: ${ARBITRUM_NITRO_ERIGON_IMAGE:-erigontech/nitro-erigon}:${ARBITRUM_SEPOLIA_NITRO_ERIGON_VERSION:-main-1a9771c}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: root
+    ports:
+      - 11387:11387
+      - 11387:11387/udp
+      - 31387:31387
+      - 31387:31387/udp
+      - 36387:36387
+      - 36387:36387/udp
+    expose:
+      - 8545
+    entrypoint: [erigon]
+    command:
+      - --chain=arb-sepolia
+      - --datadir=/root/.local/share/erigon
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,erigon,web3,net,debug,trace,txpool,admin,ots
+      - --http.port=8545
+      - --http.vhosts=*
+      - --l2rpc=${ARBITRUM_SEPOLIA_EXECUTION_RPC}
+      - --maxpeers=50
+      - --metrics
+      - --metrics.addr=0.0.0.0
+      - --metrics.port=6060
+      - --nat=extip:${IP}
+      - --p2p.allowed-ports=31387
+      - --p2p.allowed-ports=36387
+      - --port=11387
+      - --prune.mode=archive
+      - --rpc.evmtimeout=${ARBITRUM_SEPOLIA_NITRO_ERIGON_ARCHIVE_TRACE_EVMTIMEOUT:-5m0s}
+      - --rpc.gascap=6000000000
+      - --rpc.overlay.getlogstimeout=${ARBITRUM_SEPOLIA_NITRO_ERIGON_ARCHIVE_TRACE_GETLOGSTIMEOUT:-5m0s}
+      - --rpc.overlay.replayblocktimeout=${ARBITRUM_SEPOLIA_NITRO_ERIGON_ARCHIVE_TRACE_REPLAYBLOCKTIMEOUT:-10s}
+      - --rpc.returndata.limit=10000000
+      - --sync.loop.block.limit=100000
+      - --torrent.port=26387
+      - --ws
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_SEPOLIA_NITRO_ERIGON_ARCHIVE_TRACE_DATA:-arbitrum-sepolia-nitro-erigon-archive-trace}:/root/.local/share/erigon
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6060
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-sepolia-nitro-erigon-archive-trace-stripprefix.stripprefix.prefixes=/arbitrum-sepolia-nitro-erigon-archive
+      - traefik.http.services.arbitrum-sepolia-nitro-erigon-archive-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-erigon-archive-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-erigon-archive-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-erigon-archive-trace.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-sepolia-nitro-erigon-archive`) || Path(`/arbitrum-sepolia-nitro-erigon-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-sepolia-nitro-erigon-archive-trace.rule=Path(`/arbitrum-sepolia-nitro-erigon-archive`) || Path(`/arbitrum-sepolia-nitro-erigon-archive/`)}
+      - traefik.http.routers.arbitrum-sepolia-nitro-erigon-archive-trace.middlewares=arbitrum-sepolia-nitro-erigon-archive-trace-stripprefix, ipallowlist
+    shm_size: 2gb
+
+volumes:
+  arbitrum-sepolia-nitro-erigon-archive-trace:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum-sepolia
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+        # non standard erigon only
+        - name: eth_getBlockReceipts
+        - name: eth_protocolVersion
+        - name: eth_callMany
+        - name: eth_callBundle
+        - name: debug_accountAt
+        - name: debug_traceCallMany
+        - name: erigon_getHeaderByHash
+        - name: erigon_getBlockReceiptsByBlockHash
+        - name: erigon_getHeaderByNumber
+        - name: erigon_getLogsByHash
+        - name: erigon_forks
+        - name: erigon_getBlockByTimestamp
+        - name: erigon_BlockNumber
+        - name: erigon_getLatestLogs
+        - name: ots_getInternalOperations
+        - name: ots_hasCode
+        - name: ots_getTransactionError
+        - name: ots_traceTransaction
+        - name: ots_getBlockDetails
+        - name: ots_getBlockDetailsByHash
+        - name: ots_getBlockTransactions
+        - name: ots_searchTransactionsBefore
+        - name: ots_searchTransactionsAfter
+        - name: ots_getTransactionBySenderAndNonce
+        - name: ots_getContractCreator
+...

arb/nitro-erigon/arbitrum-sepolia-nitro-erigon-minimal-trace.yml

@@ -0,0 +1,167 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro-erigon/arbitrum-sepolia-nitro-erigon-minimal-trace.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-sepolia-nitro-erigon-minimal \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-sepolia-nitro-erigon-minimal:
+    image: ${ARBITRUM_NITRO_ERIGON_IMAGE:-erigontech/nitro-erigon}:${ARBITRUM_SEPOLIA_NITRO_ERIGON_VERSION:-main-1a9771c}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: root
+    ports:
+      - 12072:12072
+      - 12072:12072/udp
+      - 32072:32072
+      - 32072:32072/udp
+      - 37072:37072
+      - 37072:37072/udp
+    expose:
+      - 8545
+    entrypoint: [erigon]
+    command:
+      - --chain=arb-sepolia
+      - --datadir=/root/.local/share/erigon
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,erigon,web3,net,debug,trace,txpool,admin,ots
+      - --http.port=8545
+      - --http.vhosts=*
+      - --l2rpc=${ARBITRUM_SEPOLIA_EXECUTION_RPC}
+      - --maxpeers=50
+      - --metrics
+      - --metrics.addr=0.0.0.0
+      - --metrics.port=6060
+      - --nat=extip:${IP}
+      - --p2p.allowed-ports=32072
+      - --p2p.allowed-ports=37072
+      - --persist.receipts=false
+      - --port=12072
+      - --prune.mode=minimal
+      - --rpc.evmtimeout=${ARBITRUM_SEPOLIA_NITRO_ERIGON_MINIMAL_TRACE_EVMTIMEOUT:-5m0s}
+      - --rpc.gascap=6000000000
+      - --rpc.overlay.getlogstimeout=${ARBITRUM_SEPOLIA_NITRO_ERIGON_MINIMAL_TRACE_GETLOGSTIMEOUT:-5m0s}
+      - --rpc.overlay.replayblocktimeout=${ARBITRUM_SEPOLIA_NITRO_ERIGON_MINIMAL_TRACE_REPLAYBLOCKTIMEOUT:-10s}
+      - --rpc.returndata.limit=10000000
+      - --sync.loop.block.limit=100000
+      - --torrent.port=27072
+      - --ws
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_SEPOLIA_NITRO_ERIGON_MINIMAL_TRACE_DATA:-arbitrum-sepolia-nitro-erigon-minimal-trace}:/root/.local/share/erigon
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6060
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-sepolia-nitro-erigon-minimal-trace-stripprefix.stripprefix.prefixes=/arbitrum-sepolia-nitro-erigon-minimal
+      - traefik.http.services.arbitrum-sepolia-nitro-erigon-minimal-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-erigon-minimal-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-erigon-minimal-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-erigon-minimal-trace.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-sepolia-nitro-erigon-minimal`) || Path(`/arbitrum-sepolia-nitro-erigon-minimal/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-sepolia-nitro-erigon-minimal-trace.rule=Path(`/arbitrum-sepolia-nitro-erigon-minimal`) || Path(`/arbitrum-sepolia-nitro-erigon-minimal/`)}
+      - traefik.http.routers.arbitrum-sepolia-nitro-erigon-minimal-trace.middlewares=arbitrum-sepolia-nitro-erigon-minimal-trace-stripprefix, ipallowlist
+    shm_size: 2gb
+
+volumes:
+  arbitrum-sepolia-nitro-erigon-minimal-trace:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum-sepolia
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+        # non standard erigon only
+        - name: eth_getBlockReceipts
+        - name: eth_protocolVersion
+        - name: eth_callMany
+        - name: eth_callBundle
+        - name: debug_accountAt
+        - name: debug_traceCallMany
+        - name: erigon_getHeaderByHash
+        - name: erigon_getBlockReceiptsByBlockHash
+        - name: erigon_getHeaderByNumber
+        - name: erigon_getLogsByHash
+        - name: erigon_forks
+        - name: erigon_getBlockByTimestamp
+        - name: erigon_BlockNumber
+        - name: erigon_getLatestLogs
+        - name: ots_getInternalOperations
+        - name: ots_hasCode
+        - name: ots_getTransactionError
+        - name: ots_traceTransaction
+        - name: ots_getBlockDetails
+        - name: ots_getBlockDetailsByHash
+        - name: ots_getBlockTransactions
+        - name: ots_searchTransactionsBefore
+        - name: ots_searchTransactionsAfter
+        - name: ots_getTransactionBySenderAndNonce
+        - name: ots_getContractCreator
+...

arb/nitro-erigon/arbitrum-sepolia-nitro-erigon-pruned-trace.yml

@@ -0,0 +1,167 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro-erigon/arbitrum-sepolia-nitro-erigon-pruned-trace.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-sepolia-nitro-erigon \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-sepolia-nitro-erigon:
+    image: ${ARBITRUM_NITRO_ERIGON_IMAGE:-erigontech/nitro-erigon}:${ARBITRUM_SEPOLIA_NITRO_ERIGON_VERSION:-main-1a9771c}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: root
+    ports:
+      - 13369:13369
+      - 13369:13369/udp
+      - 33369:33369
+      - 33369:33369/udp
+      - 38369:38369
+      - 38369:38369/udp
+    expose:
+      - 8545
+    entrypoint: [erigon]
+    command:
+      - --chain=arb-sepolia
+      - --datadir=/root/.local/share/erigon
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,erigon,web3,net,debug,trace,txpool,admin,ots
+      - --http.port=8545
+      - --http.vhosts=*
+      - --l2rpc=${ARBITRUM_SEPOLIA_EXECUTION_RPC}
+      - --maxpeers=50
+      - --metrics
+      - --metrics.addr=0.0.0.0
+      - --metrics.port=6060
+      - --nat=extip:${IP}
+      - --p2p.allowed-ports=33369
+      - --p2p.allowed-ports=38369
+      - --persist.receipts=false
+      - --port=13369
+      - --prune.mode=full
+      - --rpc.evmtimeout=${ARBITRUM_SEPOLIA_NITRO_ERIGON_PRUNED_TRACE_EVMTIMEOUT:-5m0s}
+      - --rpc.gascap=6000000000
+      - --rpc.overlay.getlogstimeout=${ARBITRUM_SEPOLIA_NITRO_ERIGON_PRUNED_TRACE_GETLOGSTIMEOUT:-5m0s}
+      - --rpc.overlay.replayblocktimeout=${ARBITRUM_SEPOLIA_NITRO_ERIGON_PRUNED_TRACE_REPLAYBLOCKTIMEOUT:-10s}
+      - --rpc.returndata.limit=10000000
+      - --sync.loop.block.limit=100000
+      - --torrent.port=28369
+      - --ws
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_SEPOLIA_NITRO_ERIGON_PRUNED_TRACE_DATA:-arbitrum-sepolia-nitro-erigon-pruned-trace}:/root/.local/share/erigon
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6060
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-sepolia-nitro-erigon-pruned-trace-stripprefix.stripprefix.prefixes=/arbitrum-sepolia-nitro-erigon
+      - traefik.http.services.arbitrum-sepolia-nitro-erigon-pruned-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-erigon-pruned-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-erigon-pruned-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-erigon-pruned-trace.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-sepolia-nitro-erigon`) || Path(`/arbitrum-sepolia-nitro-erigon/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-sepolia-nitro-erigon-pruned-trace.rule=Path(`/arbitrum-sepolia-nitro-erigon`) || Path(`/arbitrum-sepolia-nitro-erigon/`)}
+      - traefik.http.routers.arbitrum-sepolia-nitro-erigon-pruned-trace.middlewares=arbitrum-sepolia-nitro-erigon-pruned-trace-stripprefix, ipallowlist
+    shm_size: 2gb
+
+volumes:
+  arbitrum-sepolia-nitro-erigon-pruned-trace:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum-sepolia
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+        # non standard erigon only
+        - name: eth_getBlockReceipts
+        - name: eth_protocolVersion
+        - name: eth_callMany
+        - name: eth_callBundle
+        - name: debug_accountAt
+        - name: debug_traceCallMany
+        - name: erigon_getHeaderByHash
+        - name: erigon_getBlockReceiptsByBlockHash
+        - name: erigon_getHeaderByNumber
+        - name: erigon_getLogsByHash
+        - name: erigon_forks
+        - name: erigon_getBlockByTimestamp
+        - name: erigon_BlockNumber
+        - name: erigon_getLatestLogs
+        - name: ots_getInternalOperations
+        - name: ots_hasCode
+        - name: ots_getTransactionError
+        - name: ots_traceTransaction
+        - name: ots_getBlockDetails
+        - name: ots_getBlockDetailsByHash
+        - name: ots_getBlockTransactions
+        - name: ots_searchTransactionsBefore
+        - name: ots_searchTransactionsAfter
+        - name: ots_getTransactionBySenderAndNonce
+        - name: ots_getContractCreator
+...

arb/nitro/alephzero-mainnet-nitro-archive-leveldb-hash.yml

@@ -0,0 +1,100 @@
+---
+
+services:
+  alephzero-mainnet-archive:
+    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_MAINNET_NITRO_VERSION:-v3.5.3-0a9c975}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.state-scheme=hash
+      - --execution.forwarding-target=https://rpc.alephzero.raas.gelato.cloud
+      - --execution.rpc.gas-cap=600000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --node.batch-poster.enable=false
+      - --node.data-availability.enable=true
+      - --node.data-availability.parent-chain-node-url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --node.data-availability.rest-aggregator.enable=true
+      - --node.data-availability.rest-aggregator.urls=https://das.alephzero.raas.gelato.cloud
+      - --node.data-availability.sequencer-inbox-address=0x1411949971076304187394088912578077660717096867958
+      - --node.feed.input.url=wss://feed.alephzero.raas.gelato.cloud
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/alephzero-mainnet-archive
+      - --persistent.db-engine=leveldb
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ALEPHZERO_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_DATA:-alephzero-mainnet-nitro-archive-leveldb-hash}:/root/.arbitrum
+      - ./arb/alephzero/mainnet:/config
+      - /slowdisk:/slowdisk
+    labels:
+      - traefik.enable=true
+      - traefik.http.middlewares.alephzero-mainnet-nitro-archive-leveldb-hash-stripprefix.stripprefix.prefixes=/alephzero-mainnet-archive
+      - traefik.http.services.alephzero-mainnet-nitro-archive-leveldb-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.alephzero-mainnet-nitro-archive-leveldb-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.alephzero-mainnet-nitro-archive-leveldb-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.alephzero-mainnet-nitro-archive-leveldb-hash.rule=Host(`$DOMAIN`) && PathPrefix(`/alephzero-mainnet-archive`)}
+      - ${NO_SSL:+traefik.http.routers.alephzero-mainnet-nitro-archive-leveldb-hash.rule=PathPrefix(`/alephzero-mainnet-archive`)}
+      - traefik.http.routers.alephzero-mainnet-nitro-archive-leveldb-hash.middlewares=alephzero-mainnet-nitro-archive-leveldb-hash-stripprefix, ipwhitelist
+
+volumes:
+  alephzero-mainnet-nitro-archive-leveldb-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    chain: alephzero
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/alephzero-mainnet-nitro-archive-pebble-hash.yml

@@ -0,0 +1,145 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/alephzero-mainnet-nitro-archive-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/alephzero-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  alephzero-mainnet-archive:
+    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${ALEPHZERO_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ALEPHZERO_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ALEPHZERO_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ALEPHZERO_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.alephzero.raas.gelato.cloud
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.alephzero.raas.gelato.cloud
+      - --node.feed.input.url=wss://feed.alephzero.raas.gelato.cloud
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/alephzero-mainnet-archive
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ALEPHZERO_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_DATA:-alephzero-mainnet-nitro-archive-pebble-hash}:/root/.arbitrum
+      - ./arb/alephzero/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.alephzero-mainnet-nitro-archive-pebble-hash-stripprefix.stripprefix.prefixes=/alephzero-mainnet-archive
+      - traefik.http.services.alephzero-mainnet-nitro-archive-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.alephzero-mainnet-nitro-archive-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.alephzero-mainnet-nitro-archive-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.alephzero-mainnet-nitro-archive-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/alephzero-mainnet-archive`) || Path(`/alephzero-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.alephzero-mainnet-nitro-archive-pebble-hash.rule=Path(`/alephzero-mainnet-archive`) || Path(`/alephzero-mainnet-archive/`)}
+      - traefik.http.routers.alephzero-mainnet-nitro-archive-pebble-hash.middlewares=alephzero-mainnet-nitro-archive-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  alephzero-mainnet-nitro-archive-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: alephzero
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/alephzero-mainnet-nitro-pruned-pebble-path.yml

@@ -0,0 +1,147 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/alephzero-mainnet-nitro-pruned-pebble-path.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/alephzero-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  alephzero-mainnet:
+    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${ALEPHZERO_MAINNET_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ALEPHZERO_MAINNET_NITRO_PRUNED_PEBBLE_PATH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ALEPHZERO_MAINNET_NITRO_PRUNED_PEBBLE_PATH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.state-scheme=path
+      - --execution.caching.trie-clean-cache=${ALEPHZERO_MAINNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ALEPHZERO_MAINNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.alephzero.raas.gelato.cloud
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.alephzero.raas.gelato.cloud
+      - --node.feed.input.url=wss://feed.alephzero.raas.gelato.cloud
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/alephzero-mainnet
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ALEPHZERO_MAINNET_NITRO_PRUNED_PEBBLE_PATH_DATA:-alephzero-mainnet-nitro-pruned-pebble-path}:/root/.arbitrum
+      - ./arb/alephzero/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.alephzero-mainnet-nitro-pruned-pebble-path-stripprefix.stripprefix.prefixes=/alephzero-mainnet
+      - traefik.http.services.alephzero-mainnet-nitro-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.alephzero-mainnet-nitro-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.alephzero-mainnet-nitro-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.alephzero-mainnet-nitro-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/alephzero-mainnet`) || Path(`/alephzero-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.alephzero-mainnet-nitro-pruned-pebble-path.rule=Path(`/alephzero-mainnet`) || Path(`/alephzero-mainnet/`)}
+      - traefik.http.routers.alephzero-mainnet-nitro-pruned-pebble-path.middlewares=alephzero-mainnet-nitro-pruned-pebble-path-stripprefix, ipallowlist
+
+volumes:
+  alephzero-mainnet-nitro-pruned-pebble-path:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: alephzero
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/alephzero-sepolia-nitro-archive-leveldb-hash.yml

@@ -0,0 +1,100 @@
+---
+
+services:
+  alephzero-sepolia-archive:
+    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_SEPOLIA_NITRO_VERSION:-v3.5.3-0a9c975}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.state-scheme=hash
+      - --execution.forwarding-target=https://rpc.alephzero-testnet.gelato.digital
+      - --execution.rpc.gas-cap=600000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --node.batch-poster.enable=false
+      - --node.data-availability.enable=true
+      - --node.data-availability.parent-chain-node-url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --node.data-availability.rest-aggregator.enable=true
+      - --node.data-availability.rest-aggregator.urls=https://das.alephzero-testnet.gelato.digital
+      - --node.data-availability.sequencer-inbox-address=0x130937498521962644184395825246273622310592356541
+      - --node.feed.input.url=wss://feed.alephzero-testnet.gelato.digital
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/alephzero-sepolia-archive
+      - --persistent.db-engine=leveldb
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ALEPHZERO_SEPOLIA_NITRO_ARCHIVE_LEVELDB_HASH_DATA:-alephzero-sepolia-nitro-archive-leveldb-hash}:/root/.arbitrum
+      - ./arb/alephzero/sepolia:/config
+      - /slowdisk:/slowdisk
+    labels:
+      - traefik.enable=true
+      - traefik.http.middlewares.alephzero-sepolia-nitro-archive-leveldb-hash-stripprefix.stripprefix.prefixes=/alephzero-sepolia-archive
+      - traefik.http.services.alephzero-sepolia-nitro-archive-leveldb-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.alephzero-sepolia-nitro-archive-leveldb-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.alephzero-sepolia-nitro-archive-leveldb-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.alephzero-sepolia-nitro-archive-leveldb-hash.rule=Host(`$DOMAIN`) && PathPrefix(`/alephzero-sepolia-archive`)}
+      - ${NO_SSL:+traefik.http.routers.alephzero-sepolia-nitro-archive-leveldb-hash.rule=PathPrefix(`/alephzero-sepolia-archive`)}
+      - traefik.http.routers.alephzero-sepolia-nitro-archive-leveldb-hash.middlewares=alephzero-sepolia-nitro-archive-leveldb-hash-stripprefix, ipwhitelist
+
+volumes:
+  alephzero-sepolia-nitro-archive-leveldb-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    chain: alephzero-sepolia
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/alephzero-sepolia-nitro-archive-pebble-hash.yml

@@ -0,0 +1,145 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/alephzero-sepolia-nitro-archive-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/alephzero-sepolia-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  alephzero-sepolia-archive:
+    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${ALEPHZERO_SEPOLIA_NITRO_ARCHIVE_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ALEPHZERO_SEPOLIA_NITRO_ARCHIVE_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ALEPHZERO_SEPOLIA_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ALEPHZERO_SEPOLIA_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.alephzero-testnet.gelato.digital
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.alephzero-testnet.gelato.digital
+      - --node.feed.input.url=wss://feed.alephzero-testnet.gelato.digital
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/alephzero-sepolia-archive
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ALEPHZERO_SEPOLIA_NITRO_ARCHIVE_PEBBLE_HASH_DATA:-alephzero-sepolia-nitro-archive-pebble-hash}:/root/.arbitrum
+      - ./arb/alephzero/sepolia:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.alephzero-sepolia-nitro-archive-pebble-hash-stripprefix.stripprefix.prefixes=/alephzero-sepolia-archive
+      - traefik.http.services.alephzero-sepolia-nitro-archive-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.alephzero-sepolia-nitro-archive-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.alephzero-sepolia-nitro-archive-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.alephzero-sepolia-nitro-archive-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/alephzero-sepolia-archive`) || Path(`/alephzero-sepolia-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.alephzero-sepolia-nitro-archive-pebble-hash.rule=Path(`/alephzero-sepolia-archive`) || Path(`/alephzero-sepolia-archive/`)}
+      - traefik.http.routers.alephzero-sepolia-nitro-archive-pebble-hash.middlewares=alephzero-sepolia-nitro-archive-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  alephzero-sepolia-nitro-archive-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: alephzero-sepolia
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/alephzero-sepolia-nitro-pruned-pebble-path.yml

@@ -0,0 +1,147 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/alephzero-sepolia-nitro-pruned-pebble-path.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/alephzero-sepolia \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  alephzero-sepolia:
+    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${ALEPHZERO_SEPOLIA_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ALEPHZERO_SEPOLIA_NITRO_PRUNED_PEBBLE_PATH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ALEPHZERO_SEPOLIA_NITRO_PRUNED_PEBBLE_PATH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.state-scheme=path
+      - --execution.caching.trie-clean-cache=${ALEPHZERO_SEPOLIA_NITRO_PRUNED_PEBBLE_PATH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ALEPHZERO_SEPOLIA_NITRO_PRUNED_PEBBLE_PATH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.alephzero-testnet.gelato.digital
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.alephzero-testnet.gelato.digital
+      - --node.feed.input.url=wss://feed.alephzero-testnet.gelato.digital
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/alephzero-sepolia
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ALEPHZERO_SEPOLIA_NITRO_PRUNED_PEBBLE_PATH_DATA:-alephzero-sepolia-nitro-pruned-pebble-path}:/root/.arbitrum
+      - ./arb/alephzero/sepolia:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.alephzero-sepolia-nitro-pruned-pebble-path-stripprefix.stripprefix.prefixes=/alephzero-sepolia
+      - traefik.http.services.alephzero-sepolia-nitro-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.alephzero-sepolia-nitro-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.alephzero-sepolia-nitro-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.alephzero-sepolia-nitro-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/alephzero-sepolia`) || Path(`/alephzero-sepolia/`))}
+      - ${NO_SSL:+traefik.http.routers.alephzero-sepolia-nitro-pruned-pebble-path.rule=Path(`/alephzero-sepolia`) || Path(`/alephzero-sepolia/`)}
+      - traefik.http.routers.alephzero-sepolia-nitro-pruned-pebble-path.middlewares=alephzero-sepolia-nitro-pruned-pebble-path-stripprefix, ipallowlist
+
+volumes:
+  alephzero-sepolia-nitro-pruned-pebble-path:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: alephzero-sepolia
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/apechain-mainnet-nitro-archive-pebble-hash.yml

@@ -0,0 +1,144 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/apechain-mainnet-nitro-archive-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/apechain-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  apechain-mainnet-archive:
+    image: ${APECHAIN_NITRO_IMAGE:-public.ecr.aws/i6b2w2n6/nitro-node}:${APECHAIN_MAINNET_NITRO_VERSION:-apechain-v3.5.6}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${APECHAIN_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${APECHAIN_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${APECHAIN_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${APECHAIN_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.apechain.com/http
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.data-availability.enable=true
+      - --node.data-availability.rest-aggregator.enable=true
+      - --node.data-availability.rest-aggregator.urls=https://apechain.calderachain.xyz/rest-aggregator
+      - --node.feed.input.url=wss://apechain.calderachain.xyz/feed
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.connection.url=https://arb1.arbitrum.io/rpc
+      - --persistent.chain=/root/.arbitrum/apechain-mainnet-archive
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${APECHAIN_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_DATA:-apechain-mainnet-nitro-archive-pebble-hash}:/root/.arbitrum
+      - ./arb/apechain/arbitrum-one:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.apechain-mainnet-nitro-archive-pebble-hash-stripprefix.stripprefix.prefixes=/apechain-mainnet-archive
+      - traefik.http.services.apechain-mainnet-nitro-archive-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.apechain-mainnet-nitro-archive-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.apechain-mainnet-nitro-archive-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.apechain-mainnet-nitro-archive-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/apechain-mainnet-archive`) || Path(`/apechain-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.apechain-mainnet-nitro-archive-pebble-hash.rule=Path(`/apechain-mainnet-archive`) || Path(`/apechain-mainnet-archive/`)}
+      - traefik.http.routers.apechain-mainnet-nitro-archive-pebble-hash.middlewares=apechain-mainnet-nitro-archive-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  apechain-mainnet-nitro-archive-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: apechain
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/apechain-mainnet-nitro-pruned-pebble-path.yml

@@ -0,0 +1,146 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/apechain-mainnet-nitro-pruned-pebble-path.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/apechain-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  apechain-mainnet:
+    image: ${APECHAIN_NITRO_IMAGE:-public.ecr.aws/i6b2w2n6/nitro-node}:${APECHAIN_MAINNET_NITRO_VERSION:-apechain-v3.5.6}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${APECHAIN_MAINNET_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${APECHAIN_MAINNET_NITRO_PRUNED_PEBBLE_PATH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${APECHAIN_MAINNET_NITRO_PRUNED_PEBBLE_PATH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.state-scheme=path
+      - --execution.caching.trie-clean-cache=${APECHAIN_MAINNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${APECHAIN_MAINNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.apechain.com/http
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.data-availability.enable=true
+      - --node.data-availability.rest-aggregator.enable=true
+      - --node.data-availability.rest-aggregator.urls=https://apechain.calderachain.xyz/rest-aggregator
+      - --node.feed.input.url=wss://apechain.calderachain.xyz/feed
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.connection.url=https://arb1.arbitrum.io/rpc
+      - --persistent.chain=/root/.arbitrum/apechain-mainnet
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${APECHAIN_MAINNET_NITRO_PRUNED_PEBBLE_PATH_DATA:-apechain-mainnet-nitro-pruned-pebble-path}:/root/.arbitrum
+      - ./arb/apechain/arbitrum-one:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.apechain-mainnet-nitro-pruned-pebble-path-stripprefix.stripprefix.prefixes=/apechain-mainnet
+      - traefik.http.services.apechain-mainnet-nitro-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.apechain-mainnet-nitro-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.apechain-mainnet-nitro-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.apechain-mainnet-nitro-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/apechain-mainnet`) || Path(`/apechain-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.apechain-mainnet-nitro-pruned-pebble-path.rule=Path(`/apechain-mainnet`) || Path(`/apechain-mainnet/`)}
+      - traefik.http.routers.apechain-mainnet-nitro-pruned-pebble-path.middlewares=apechain-mainnet-nitro-pruned-pebble-path-stripprefix, ipallowlist
+
+volumes:
+  apechain-mainnet-nitro-pruned-pebble-path:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: apechain
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-nova-nitro-archive-leveldb-hash.yml

@@ -0,0 +1,139 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-nova-nitro-archive-leveldb-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-nova-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-nova-archive:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=42170
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${ARBITRUM_NOVA_NITRO_ARCHIVE_LEVELDB_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_NOVA_NITRO_ARCHIVE_LEVELDB_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_NOVA_NITRO_ARCHIVE_LEVELDB_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_NOVA_NITRO_ARCHIVE_LEVELDB_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-nova-archive
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_NOVA_NITRO_ARCHIVE_LEVELDB_HASH_DATA:-arbitrum-nova-nitro-archive-leveldb-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-nova-archive:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-nova-nitro-archive-leveldb-hash-stripprefix.stripprefix.prefixes=/arbitrum-nova-archive
+      - traefik.http.services.arbitrum-nova-nitro-archive-leveldb-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-archive-leveldb-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-archive-leveldb-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-archive-leveldb-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-nova-archive`) || Path(`/arbitrum-nova-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-nova-nitro-archive-leveldb-hash.rule=Path(`/arbitrum-nova-archive`) || Path(`/arbitrum-nova-archive/`)}
+      - traefik.http.routers.arbitrum-nova-nitro-archive-leveldb-hash.middlewares=arbitrum-nova-nitro-archive-leveldb-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-nova-nitro-archive-leveldb-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum-nova
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-nova-nitro-archive-pebble-path.yml

@@ -0,0 +1,142 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-nova-nitro-archive-pebble-path.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-nova-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-nova-archive:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=42170
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${ARBITRUM_NOVA_NITRO_ARCHIVE_PEBBLE_PATH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_NOVA_NITRO_ARCHIVE_PEBBLE_PATH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.state-scheme=path
+      - --execution.caching.trie-clean-cache=${ARBITRUM_NOVA_NITRO_ARCHIVE_PEBBLE_PATH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_NOVA_NITRO_ARCHIVE_PEBBLE_PATH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-nova-archive
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_NOVA_NITRO_ARCHIVE_PEBBLE_PATH_DATA:-arbitrum-nova-nitro-archive-pebble-path}:/root/.arbitrum
+      - ./tmp/arbitrum-nova-archive:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-nova-nitro-archive-pebble-path-stripprefix.stripprefix.prefixes=/arbitrum-nova-archive
+      - traefik.http.services.arbitrum-nova-nitro-archive-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-archive-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-archive-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-archive-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-nova-archive`) || Path(`/arbitrum-nova-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-nova-nitro-archive-pebble-path.rule=Path(`/arbitrum-nova-archive`) || Path(`/arbitrum-nova-archive/`)}
+      - traefik.http.routers.arbitrum-nova-nitro-archive-pebble-path.middlewares=arbitrum-nova-nitro-archive-pebble-path-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-nova-nitro-archive-pebble-path:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum-nova
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-nova-nitro-minimal-pebble-hash.prune.yml

@@ -0,0 +1,141 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-nova-nitro-minimal-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-nova-minimal \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-nova-minimal:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=42170
+      - --execution.caching.archive=${ARBITRUM_NOVA_MINIMAL_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --init.prune=minimal
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-nova-minimal
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_DATA:-arbitrum-nova-nitro-minimal-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-nova-minimal:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-nova-nitro-minimal-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-nova-minimal
+      - traefik.http.services.arbitrum-nova-nitro-minimal-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-nova-minimal`) || Path(`/arbitrum-nova-minimal/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.rule=Path(`/arbitrum-nova-minimal`) || Path(`/arbitrum-nova-minimal/`)}
+      - traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.middlewares=arbitrum-nova-nitro-minimal-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-nova-nitro-minimal-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum-nova
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-nova-nitro-minimal-pebble-hash.yml

@@ -0,0 +1,140 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-nova-nitro-minimal-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-nova-minimal \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-nova-minimal:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=42170
+      - --execution.caching.archive=${ARBITRUM_NOVA_MINIMAL_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-nova-minimal
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_NOVA_NITRO_MINIMAL_PEBBLE_HASH_DATA:-arbitrum-nova-nitro-minimal-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-nova-minimal:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-nova-nitro-minimal-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-nova-minimal
+      - traefik.http.services.arbitrum-nova-nitro-minimal-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-nova-minimal`) || Path(`/arbitrum-nova-minimal/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.rule=Path(`/arbitrum-nova-minimal`) || Path(`/arbitrum-nova-minimal/`)}
+      - traefik.http.routers.arbitrum-nova-nitro-minimal-pebble-hash.middlewares=arbitrum-nova-nitro-minimal-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-nova-nitro-minimal-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum-nova
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-nova-nitro-pruned-pebble-hash.prune.yml

@@ -0,0 +1,141 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-nova-nitro-pruned-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-nova \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-nova:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=42170
+      - --execution.caching.archive=${ARBITRUM_NOVA_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_NOVA_NITRO_PRUNED_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_NOVA_NITRO_PRUNED_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_NOVA_NITRO_PRUNED_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_NOVA_NITRO_PRUNED_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --init.prune=full
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-nova
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_NOVA_NITRO_PRUNED_PEBBLE_HASH_DATA:-arbitrum-nova-nitro-pruned-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-nova:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-nova-nitro-pruned-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-nova
+      - traefik.http.services.arbitrum-nova-nitro-pruned-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-pruned-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-pruned-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-pruned-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-nova`) || Path(`/arbitrum-nova/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-nova-nitro-pruned-pebble-hash.rule=Path(`/arbitrum-nova`) || Path(`/arbitrum-nova/`)}
+      - traefik.http.routers.arbitrum-nova-nitro-pruned-pebble-hash.middlewares=arbitrum-nova-nitro-pruned-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-nova-nitro-pruned-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum-nova
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-nova-nitro-pruned-pebble-hash.yml

@@ -0,0 +1,140 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-nova-nitro-pruned-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-nova \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-nova:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=42170
+      - --execution.caching.archive=${ARBITRUM_NOVA_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_NOVA_NITRO_PRUNED_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_NOVA_NITRO_PRUNED_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_NOVA_NITRO_PRUNED_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_NOVA_NITRO_PRUNED_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-nova
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_NOVA_NITRO_PRUNED_PEBBLE_HASH_DATA:-arbitrum-nova-nitro-pruned-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-nova:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-nova-nitro-pruned-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-nova
+      - traefik.http.services.arbitrum-nova-nitro-pruned-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-pruned-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-pruned-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-nova-nitro-pruned-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-nova`) || Path(`/arbitrum-nova/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-nova-nitro-pruned-pebble-hash.rule=Path(`/arbitrum-nova`) || Path(`/arbitrum-nova/`)}
+      - traefik.http.routers.arbitrum-nova-nitro-pruned-pebble-hash.middlewares=arbitrum-nova-nitro-pruned-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-nova-nitro-pruned-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum-nova
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-one-nitro-archive-erigon.yml

@@ -0,0 +1,181 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-one-nitro-archive-erigon.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-one-nitro-archive-erigon \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-one-archive-erigon:
+    image: ${ARBITRUM_NITRO_IMAGE:-erigontech/nitro-erigon}:${ARBITRUM_ONE_NITRO_VERSION:-main-de68b93}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: root
+    ports:
+      - 21789:21789
+      - 21789:21789/udp
+      - 27891:27891
+      - 27891:27891/udp
+      - 38917:38917
+      - 38917:38917/udp
+      - 43123:43123
+      - 43123:43123/udp
+      - 49231:49231
+      - 49231:49231/udp
+    expose:
+      - 8545
+      - 5555
+    entrypoint: [erigon]
+    command:
+      - --datadir=/root/.local/share/erigon
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,erigon,web3,net,debug,trace,txpool,admin,ots
+      - --http.port=8545
+      - --http.vhosts=*
+      - --maxpeers=50
+      - --metrics
+      - --metrics.addr=0.0.0.0
+      - --metrics.port=6060
+      - --nat=extip:${IP}
+      - --p2p.allowed-ports=43123
+      - --p2p.allowed-ports=49231
+      - --port=21789
+      - --prune.mode=archive
+      - --l2rpc="http://arbitrum-one-archive:8545"
+      - --torrent.download.rate=${ARBITRUM_ONE_NITRO_ARCHIVE_ERIGON_MAX_DOWNLOAD_RATE:-1000mb}
+      - --torrent.port=38917
+      - --ws
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_NITRO_ARCHIVE_ERIGON_DATA:-arbitrum-one-nitro-archive-erigon}:/root/.local/share/erigon
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6060
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-one-nitro-archive-erigon-stripprefix.stripprefix.prefixes=/arbitrum-one-nitro-archive-erigon
+      - traefik.http.services.arbitrum-one-nitro-archive-erigon.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-archive-erigon.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-archive-erigon.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-archive-erigon.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-one-nitro-archive-erigon`) || Path(`/arbitrum-one-nitro-archive-erigon/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-one-nitro-archive-erigon.rule=Path(`/arbitrum-one-nitro-archive-erigon`) || Path(`/arbitrum-one-nitro-archive-erigon/`)}
+      - traefik.http.routers.arbitrum-one-nitro-archive-erigon.middlewares=arbitrum-one-nitro-archive-erigon-stripprefix, ipallowlist
+      - traefik.http.routers.arbitrum-one-nitro-archive-erigon.service=arbitrum-one-nitro-archive-erigon
+      - traefik.http.routers.arbitrum-one-nitro-archive-erigon-node.service=arbitrum-one-nitro-archive-erigon-node
+      - traefik.http.services.arbitrum-one-nitro-archive-erigon-node.loadbalancer.server.port=5555
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-archive-erigon-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-archive-erigon-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-archive-erigon-node.rule=Host(`$DOMAIN`) && PathPrefix(`/arbitrum-one-nitro-archive-erigon/eth`)}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-one-nitro-archive-erigon-node.rule=PathPrefix(`/arbitrum-one-nitro-archive-erigon/eth`)}
+      - traefik.http.routers.arbitrum-one-nitro-archive-erigon-node.middlewares=arbitrum-one-nitro-archive-erigon-stripprefix, ipallowlist
+    shm_size: 2gb
+
+volumes:
+  arbitrum-one-nitro-archive-erigon:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum-one
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+        # non standard erigon only
+        - name: eth_getBlockReceipts
+        - name: eth_protocolVersion
+        - name: eth_callMany
+        - name: eth_callBundle
+        - name: debug_accountAt
+        - name: debug_traceCallMany
+        - name: erigon_getHeaderByHash
+        - name: erigon_getBlockReceiptsByBlockHash
+        - name: erigon_getHeaderByNumber
+        - name: erigon_getLogsByHash
+        - name: erigon_forks
+        - name: erigon_getBlockByTimestamp
+        - name: erigon_BlockNumber
+        - name: erigon_getLatestLogs
+        - name: ots_getInternalOperations
+        - name: ots_hasCode
+        - name: ots_getTransactionError
+        - name: ots_traceTransaction
+        - name: ots_getBlockDetails
+        - name: ots_getBlockDetailsByHash
+        - name: ots_getBlockTransactions
+        - name: ots_searchTransactionsBefore
+        - name: ots_searchTransactionsAfter
+        - name: ots_getTransactionBySenderAndNonce
+        - name: ots_getContractCreator
+  - id: $${ID}-beacon-chain
+    chain: eth-beacon-chain
+    labels:
+      provider: $${PROVIDER}-beacon-chain
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+...

arb/nitro/arbitrum-one-nitro-archive-leveldb-hash.yml

@@ -0,0 +1,210 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-one-nitro-archive-leveldb-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-one-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-one-archive:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=42161
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${ARBITRUM_ONE_NITRO_ARCHIVE_LEVELDB_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_ONE_NITRO_ARCHIVE_LEVELDB_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_ONE_NITRO_ARCHIVE_LEVELDB_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_ONE_NITRO_ARCHIVE_LEVELDB_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.classic-redirect=http://arbitrum-one-arbnode-archive:8545
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-one-archive
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_NITRO_ARCHIVE_LEVELDB_HASH_DATA:-arbitrum-one-nitro-archive-leveldb-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-one-archive:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-one-nitro-archive-leveldb-hash-stripprefix.stripprefix.prefixes=/arbitrum-one-archive
+      - traefik.http.services.arbitrum-one-nitro-archive-leveldb-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-archive-leveldb-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-archive-leveldb-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-archive-leveldb-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-one-archive`) || Path(`/arbitrum-one-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-one-nitro-archive-leveldb-hash.rule=Path(`/arbitrum-one-archive`) || Path(`/arbitrum-one-archive/`)}
+      - traefik.http.routers.arbitrum-one-nitro-archive-leveldb-hash.middlewares=arbitrum-one-nitro-archive-leveldb-hash-stripprefix, ipallowlist
+
+  arbitrum-one-arbnode-archive:
+    image: ${ARBITRUM_ARBNODE_IMAGE:-offchainlabs/arb-node}:${ARBITRUM_ONE_ARBNODE_VERSION:-v1.4.6-551a39b3}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+      - 8546
+    entrypoint: [/home/user/go/bin/arb-node]
+    command:
+      - --core.checkpoint-gas-frequency=156250000
+      - --l1.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --l2.disable-upstream
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=7070
+      - --node.cache.allow-slow-lookup
+      - --node.chain-id=42161
+      - --node.rpc.addr=0.0.0.0
+      - --node.rpc.enable-l1-calls
+      - --node.rpc.port=8545
+      - --node.rpc.tracing.enable
+      - --node.rpc.tracing.namespace=trace
+      - --node.ws.addr=0.0.0.0
+      - --node.ws.port=8546
+      - --persistent.chain=/data/datadir/
+      - --persistent.global-config=/data/
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_ARBNODE_ARCHIVE_LEVELDB_HASH_DATA:-arbitrum-one-arbnode-archive-leveldb-hash}:/data
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
+
+volumes:
+  arbitrum-one-arbnode-archive-leveldb-hash:
+  arbitrum-one-nitro-archive-leveldb-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...

arb/nitro/arbitrum-one-nitro-archive-pebble-hash.yml

@@ -0,0 +1,211 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-one-nitro-archive-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-one-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-one-archive:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=42161
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${ARBITRUM_ONE_NITRO_ARCHIVE_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_ONE_NITRO_ARCHIVE_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_ONE_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_ONE_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.classic-redirect=http://arbitrum-one-arbnode-archive:8545
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-one-archive
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_NITRO_ARCHIVE_PEBBLE_HASH_DATA:-arbitrum-one-nitro-archive-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-one-archive:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-one-nitro-archive-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-one-archive
+      - traefik.http.services.arbitrum-one-nitro-archive-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-archive-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-archive-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-archive-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-one-archive`) || Path(`/arbitrum-one-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-one-nitro-archive-pebble-hash.rule=Path(`/arbitrum-one-archive`) || Path(`/arbitrum-one-archive/`)}
+      - traefik.http.routers.arbitrum-one-nitro-archive-pebble-hash.middlewares=arbitrum-one-nitro-archive-pebble-hash-stripprefix, ipallowlist
+
+  arbitrum-one-arbnode-archive:
+    image: ${ARBITRUM_ARBNODE_IMAGE:-offchainlabs/arb-node}:${ARBITRUM_ONE_ARBNODE_VERSION:-v1.4.6-551a39b3}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+      - 8546
+    entrypoint: [/home/user/go/bin/arb-node]
+    command:
+      - --core.checkpoint-gas-frequency=156250000
+      - --l1.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --l2.disable-upstream
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=7070
+      - --node.cache.allow-slow-lookup
+      - --node.chain-id=42161
+      - --node.rpc.addr=0.0.0.0
+      - --node.rpc.enable-l1-calls
+      - --node.rpc.port=8545
+      - --node.rpc.tracing.enable
+      - --node.rpc.tracing.namespace=trace
+      - --node.ws.addr=0.0.0.0
+      - --node.ws.port=8546
+      - --persistent.chain=/data/datadir/
+      - --persistent.global-config=/data/
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_ARBNODE_ARCHIVE_LEVELDB_HASH_DATA:-arbitrum-one-arbnode-archive-leveldb-hash}:/data
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
+
+volumes:
+  arbitrum-one-arbnode-archive-leveldb-hash:
+  arbitrum-one-nitro-archive-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...

arb/nitro/arbitrum-one-nitro-archive-pebble-path.yml

@@ -0,0 +1,142 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-one-nitro-archive-pebble-path.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-one-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-one-archive:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=42161
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${ARBITRUM_ONE_NITRO_ARCHIVE_PEBBLE_PATH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_ONE_NITRO_ARCHIVE_PEBBLE_PATH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.state-scheme=path
+      - --execution.caching.trie-clean-cache=${ARBITRUM_ONE_NITRO_ARCHIVE_PEBBLE_PATH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_ONE_NITRO_ARCHIVE_PEBBLE_PATH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-one-archive
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_NITRO_ARCHIVE_PEBBLE_PATH_DATA:-arbitrum-one-nitro-archive-pebble-path}:/root/.arbitrum
+      - ./tmp/arbitrum-one-archive:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-one-nitro-archive-pebble-path-stripprefix.stripprefix.prefixes=/arbitrum-one-archive
+      - traefik.http.services.arbitrum-one-nitro-archive-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-archive-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-archive-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-archive-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-one-archive`) || Path(`/arbitrum-one-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-one-nitro-archive-pebble-path.rule=Path(`/arbitrum-one-archive`) || Path(`/arbitrum-one-archive/`)}
+      - traefik.http.routers.arbitrum-one-nitro-archive-pebble-path.middlewares=arbitrum-one-nitro-archive-pebble-path-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-one-nitro-archive-pebble-path:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-one-nitro-minimal-pebble-hash.prune.yml

@@ -0,0 +1,141 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-one-nitro-minimal-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-one-minimal \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-one-minimal:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=42161
+      - --execution.caching.archive=${ARBITRUM_ONE_MINIMAL_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --init.prune=minimal
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-one-minimal
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_DATA:-arbitrum-one-nitro-minimal-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-one-minimal:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-one-nitro-minimal-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-one-minimal
+      - traefik.http.services.arbitrum-one-nitro-minimal-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-one-minimal`) || Path(`/arbitrum-one-minimal/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.rule=Path(`/arbitrum-one-minimal`) || Path(`/arbitrum-one-minimal/`)}
+      - traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.middlewares=arbitrum-one-nitro-minimal-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-one-nitro-minimal-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-one-nitro-minimal-pebble-hash.yml

@@ -0,0 +1,140 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-one-nitro-minimal-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-one-minimal \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-one-minimal:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=42161
+      - --execution.caching.archive=${ARBITRUM_ONE_MINIMAL_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-one-minimal
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_NITRO_MINIMAL_PEBBLE_HASH_DATA:-arbitrum-one-nitro-minimal-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-one-minimal:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-one-nitro-minimal-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-one-minimal
+      - traefik.http.services.arbitrum-one-nitro-minimal-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-one-minimal`) || Path(`/arbitrum-one-minimal/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.rule=Path(`/arbitrum-one-minimal`) || Path(`/arbitrum-one-minimal/`)}
+      - traefik.http.routers.arbitrum-one-nitro-minimal-pebble-hash.middlewares=arbitrum-one-nitro-minimal-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-one-nitro-minimal-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-one-nitro-pruned-pebble-hash--fireeth.prune.yml

@@ -0,0 +1,205 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-one-nitro-pruned-pebble-hash--fireeth.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-one \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-one:
+    image: ${ARBITRUM_FIREETH_IMAGE:-ghcr.io/streamingfast/go-ethereum}:${ARBITRUM_ONE_FIREETH_VERSION:-v2.12.4-nitro-nitro-v3.6.7-fh3.0}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    entrypoint: [sh, -c, exec fireeth start reader-node --log-to-file=false --reader-node-arguments "$*", _]
+    command:
+      - --chain.id=42161
+      - --execution.caching.archive=${ARBITRUM_ONE_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --init.prune=full
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-one
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_FIREETH_DATA:-arbitrum-one-fireeth}:/app/firehose-data
+      - ${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_DATA:-arbitrum-one-nitro-pruned-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-one:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-one-nitro-pruned-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-one
+      - traefik.http.services.arbitrum-one-nitro-pruned-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-one`) || Path(`/arbitrum-one/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.rule=Path(`/arbitrum-one`) || Path(`/arbitrum-one/`)}
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.middlewares=arbitrum-one-nitro-pruned-pebble-hash-stripprefix, ipallowlist
+
+  arbitrum-one-firehose:
+    image: ${ARBITRUM_FIREETH_IMAGE:-ghcr.io/streamingfast/go-ethereum}:${ARBITRUM_ONE_FIREETH_VERSION:-v2.12.4-nitro-nitro-v3.6.7-fh3.0}
+    expose:
+      - 10015
+      - 10014
+    environment:
+      - ${ARBITRUM_ONE_FIREETH_BLOCKS_STORE:-/app/firehose-data/storage/merged-blocks}
+    entrypoint: [sh, -c, exec fireeth --config-file="" --log-to-file=false start firehose index-builder relayer merger $@, _]
+    command:
+      - --firehose-rate-limit-bucket-fill-rate=${ARBITRUM_ONE_FIREHOSE_RATE_LIMIT_BUCKET_FILL_RATE:-1s}
+      - --firehose-rate-limit-bucket-size=${ARBITRUM_ONE_FIREHOSE_RATE_LIMIT_BUCKET_SIZE:-200}
+      - --log-to-file=false
+      - --relayer-source=arbitrum-one:10010
+    restart: unless-stopped
+    depends_on:
+      - arbitrum-one
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_FIREETH_DATA:-arbitrum-one-fireeth}:/app/firehose-data
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
+      - traefik.enable=true
+      - traefik.http.services.arbitrum-one-nitro-pruned-pebble-hash-firehose.loadbalancer.server.scheme=h2c
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-firehose.service=arbitrum-one-nitro-pruned-pebble-hash-firehose
+      - traefik.http.services.arbitrum-one-nitro-pruned-pebble-hash-firehose.loadbalancer.server.port=10015
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-firehose.entrypoints=grpc
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-firehose.tls.certresolver=myresolver}
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-firehose.rule=Host(`arbitrum-one-firehose.${DOMAIN}`)
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-firehose.middlewares=ipallowlist
+
+  arbitrum-one-events:
+    image: ${ARBITRUM_FIREETH_IMAGE:-ghcr.io/streamingfast/go-ethereum}:${ARBITRUM_ONE_FIREETH_VERSION:-v2.12.4-nitro-nitro-v3.6.7-fh3.0}
+    expose:
+      - 10016
+    entrypoint: [sh, -c, exec fireeth --config-file="" --log-to-file=false start substreams-tier1 substreams-tier2 $@, _]
+    command:
+      - --common-live-blocks-addr=arbitrum-one-firehose:10014
+      - --log-to-file=false
+      - --substreams-block-execution-timeout=${ARBITRUM_ONE_SUBSTREAMS_BLOCK_EXECUTION_TIMEOUT:-3m0s}
+      - --substreams-rpc-endpoints=${ARBITRUM_ONE_EXECUTION_ARCHIVE_RPC}
+      - --substreams-tier1-max-subrequests=${ARBITRUM_ONE_SUBSTREAMS_TIER1_MAX_SUBREQUESTS:-4}
+    restart: unless-stopped
+    depends_on:
+      - arbitrum-one
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_FIREETH_DATA:-arbitrum-one-fireeth}:/app/firehose-data
+    logging: *logging-defaults
+    labels:
+      - traefik.enable=true
+      - traefik.http.services.arbitrum-one-nitro-pruned-pebble-hash-events.loadbalancer.server.scheme=h2c
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-events.service=arbitrum-one-nitro-pruned-pebble-hash-events
+      - traefik.http.services.arbitrum-one-nitro-pruned-pebble-hash-events.loadbalancer.server.port=10016
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-events.entrypoints=grpc
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-events.tls.certresolver=myresolver}
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-events.rule=Host(`arbitrum-one-events.${DOMAIN}`)
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-events.middlewares=ipallowlist
+
+volumes:
+  arbitrum-one-nitro-pruned-pebble-hash:
+  arbitrum-one-nitro-pruned-pebble-hash_fireeth:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-one-nitro-pruned-pebble-hash--fireeth.yml

@@ -0,0 +1,204 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-one-nitro-pruned-pebble-hash--fireeth.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-one \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-one:
+    image: ${ARBITRUM_FIREETH_IMAGE:-ghcr.io/streamingfast/go-ethereum}:${ARBITRUM_ONE_FIREETH_VERSION:-v2.12.4-nitro-nitro-v3.6.7-fh3.0}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    entrypoint: [sh, -c, exec fireeth start reader-node --log-to-file=false --reader-node-arguments "$*", _]
+    command:
+      - --chain.id=42161
+      - --execution.caching.archive=${ARBITRUM_ONE_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-one
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_FIREETH_DATA:-arbitrum-one-fireeth}:/app/firehose-data
+      - ${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_DATA:-arbitrum-one-nitro-pruned-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-one:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-one-nitro-pruned-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-one
+      - traefik.http.services.arbitrum-one-nitro-pruned-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-one`) || Path(`/arbitrum-one/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.rule=Path(`/arbitrum-one`) || Path(`/arbitrum-one/`)}
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.middlewares=arbitrum-one-nitro-pruned-pebble-hash-stripprefix, ipallowlist
+
+  arbitrum-one-firehose:
+    image: ${ARBITRUM_FIREETH_IMAGE:-ghcr.io/streamingfast/go-ethereum}:${ARBITRUM_ONE_FIREETH_VERSION:-v2.12.4-nitro-nitro-v3.6.7-fh3.0}
+    expose:
+      - 10015
+      - 10014
+    environment:
+      - ${ARBITRUM_ONE_FIREETH_BLOCKS_STORE:-/app/firehose-data/storage/merged-blocks}
+    entrypoint: [sh, -c, exec fireeth --config-file="" --log-to-file=false start firehose index-builder relayer merger $@, _]
+    command:
+      - --firehose-rate-limit-bucket-fill-rate=${ARBITRUM_ONE_FIREHOSE_RATE_LIMIT_BUCKET_FILL_RATE:-1s}
+      - --firehose-rate-limit-bucket-size=${ARBITRUM_ONE_FIREHOSE_RATE_LIMIT_BUCKET_SIZE:-200}
+      - --log-to-file=false
+      - --relayer-source=arbitrum-one:10010
+    restart: unless-stopped
+    depends_on:
+      - arbitrum-one
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_FIREETH_DATA:-arbitrum-one-fireeth}:/app/firehose-data
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
+      - traefik.enable=true
+      - traefik.http.services.arbitrum-one-nitro-pruned-pebble-hash-firehose.loadbalancer.server.scheme=h2c
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-firehose.service=arbitrum-one-nitro-pruned-pebble-hash-firehose
+      - traefik.http.services.arbitrum-one-nitro-pruned-pebble-hash-firehose.loadbalancer.server.port=10015
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-firehose.entrypoints=grpc
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-firehose.tls.certresolver=myresolver}
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-firehose.rule=Host(`arbitrum-one-firehose.${DOMAIN}`)
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-firehose.middlewares=ipallowlist
+
+  arbitrum-one-events:
+    image: ${ARBITRUM_FIREETH_IMAGE:-ghcr.io/streamingfast/go-ethereum}:${ARBITRUM_ONE_FIREETH_VERSION:-v2.12.4-nitro-nitro-v3.6.7-fh3.0}
+    expose:
+      - 10016
+    entrypoint: [sh, -c, exec fireeth --config-file="" --log-to-file=false start substreams-tier1 substreams-tier2 $@, _]
+    command:
+      - --common-live-blocks-addr=arbitrum-one-firehose:10014
+      - --log-to-file=false
+      - --substreams-block-execution-timeout=${ARBITRUM_ONE_SUBSTREAMS_BLOCK_EXECUTION_TIMEOUT:-3m0s}
+      - --substreams-rpc-endpoints=${ARBITRUM_ONE_EXECUTION_ARCHIVE_RPC}
+      - --substreams-tier1-max-subrequests=${ARBITRUM_ONE_SUBSTREAMS_TIER1_MAX_SUBREQUESTS:-4}
+    restart: unless-stopped
+    depends_on:
+      - arbitrum-one
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_FIREETH_DATA:-arbitrum-one-fireeth}:/app/firehose-data
+    logging: *logging-defaults
+    labels:
+      - traefik.enable=true
+      - traefik.http.services.arbitrum-one-nitro-pruned-pebble-hash-events.loadbalancer.server.scheme=h2c
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-events.service=arbitrum-one-nitro-pruned-pebble-hash-events
+      - traefik.http.services.arbitrum-one-nitro-pruned-pebble-hash-events.loadbalancer.server.port=10016
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-events.entrypoints=grpc
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-events.tls.certresolver=myresolver}
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-events.rule=Host(`arbitrum-one-events.${DOMAIN}`)
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash-events.middlewares=ipallowlist
+
+volumes:
+  arbitrum-one-nitro-pruned-pebble-hash:
+  arbitrum-one-nitro-pruned-pebble-hash_fireeth:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-one-nitro-pruned-pebble-hash.prune.yml

@@ -0,0 +1,141 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-one-nitro-pruned-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-one \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-one:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=42161
+      - --execution.caching.archive=${ARBITRUM_ONE_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --init.prune=full
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-one
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_DATA:-arbitrum-one-nitro-pruned-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-one:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-one-nitro-pruned-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-one
+      - traefik.http.services.arbitrum-one-nitro-pruned-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-one`) || Path(`/arbitrum-one/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.rule=Path(`/arbitrum-one`) || Path(`/arbitrum-one/`)}
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.middlewares=arbitrum-one-nitro-pruned-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-one-nitro-pruned-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-one-nitro-pruned-pebble-hash.yml

@@ -0,0 +1,140 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-one-nitro-pruned-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-one \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-one:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=42161
+      - --execution.caching.archive=${ARBITRUM_ONE_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-one
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_ONE_NITRO_PRUNED_PEBBLE_HASH_DATA:-arbitrum-one-nitro-pruned-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-one:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-one-nitro-pruned-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-one
+      - traefik.http.services.arbitrum-one-nitro-pruned-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-one`) || Path(`/arbitrum-one/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.rule=Path(`/arbitrum-one`) || Path(`/arbitrum-one/`)}
+      - traefik.http.routers.arbitrum-one-nitro-pruned-pebble-hash.middlewares=arbitrum-one-nitro-pruned-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-one-nitro-pruned-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-sepolia-nitro-archive-pebble-hash.yml

@@ -0,0 +1,141 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-sepolia-nitro-archive-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-sepolia-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-sepolia-archive:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=421614
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${ARBITRUM_SEPOLIA_NITRO_ARCHIVE_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_SEPOLIA_NITRO_ARCHIVE_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_SEPOLIA_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_SEPOLIA_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --init.validate-genesis-assertion=false
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-sepolia-archive
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_SEPOLIA_NITRO_ARCHIVE_PEBBLE_HASH_DATA:-arbitrum-sepolia-nitro-archive-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-sepolia-archive:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-sepolia-nitro-archive-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-sepolia-archive
+      - traefik.http.services.arbitrum-sepolia-nitro-archive-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-archive-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-archive-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-archive-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-sepolia-archive`) || Path(`/arbitrum-sepolia-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-sepolia-nitro-archive-pebble-hash.rule=Path(`/arbitrum-sepolia-archive`) || Path(`/arbitrum-sepolia-archive/`)}
+      - traefik.http.routers.arbitrum-sepolia-nitro-archive-pebble-hash.middlewares=arbitrum-sepolia-nitro-archive-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-sepolia-nitro-archive-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum-sepolia
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-sepolia-nitro-minimal-pebble-hash.prune.yml

@@ -0,0 +1,142 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-sepolia-nitro-minimal-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-sepolia-minimal \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-sepolia-minimal:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=421614
+      - --execution.caching.archive=${ARBITRUM_SEPOLIA_MINIMAL_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --init.prune=minimal
+      - --init.validate-genesis-assertion=false
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-sepolia-minimal
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_DATA:-arbitrum-sepolia-nitro-minimal-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-sepolia-minimal:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-sepolia-nitro-minimal-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-sepolia-minimal
+      - traefik.http.services.arbitrum-sepolia-nitro-minimal-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-sepolia-minimal`) || Path(`/arbitrum-sepolia-minimal/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.rule=Path(`/arbitrum-sepolia-minimal`) || Path(`/arbitrum-sepolia-minimal/`)}
+      - traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.middlewares=arbitrum-sepolia-nitro-minimal-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-sepolia-nitro-minimal-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum-sepolia
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-sepolia-nitro-minimal-pebble-hash.yml

@@ -0,0 +1,141 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-sepolia-nitro-minimal-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-sepolia-minimal \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-sepolia-minimal:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=421614
+      - --execution.caching.archive=${ARBITRUM_SEPOLIA_MINIMAL_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --init.validate-genesis-assertion=false
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-sepolia-minimal
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_SEPOLIA_NITRO_MINIMAL_PEBBLE_HASH_DATA:-arbitrum-sepolia-nitro-minimal-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-sepolia-minimal:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-sepolia-nitro-minimal-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-sepolia-minimal
+      - traefik.http.services.arbitrum-sepolia-nitro-minimal-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-sepolia-minimal`) || Path(`/arbitrum-sepolia-minimal/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.rule=Path(`/arbitrum-sepolia-minimal`) || Path(`/arbitrum-sepolia-minimal/`)}
+      - traefik.http.routers.arbitrum-sepolia-nitro-minimal-pebble-hash.middlewares=arbitrum-sepolia-nitro-minimal-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-sepolia-nitro-minimal-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum-sepolia
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-sepolia-nitro-pruned-pebble-hash.prune.yml

@@ -0,0 +1,142 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-sepolia-nitro-pruned-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-sepolia \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-sepolia:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=421614
+      - --execution.caching.archive=${ARBITRUM_SEPOLIA_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_SEPOLIA_NITRO_PRUNED_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_SEPOLIA_NITRO_PRUNED_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_SEPOLIA_NITRO_PRUNED_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_SEPOLIA_NITRO_PRUNED_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --init.prune=full
+      - --init.validate-genesis-assertion=false
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-sepolia
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_SEPOLIA_NITRO_PRUNED_PEBBLE_HASH_DATA:-arbitrum-sepolia-nitro-pruned-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-sepolia:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-sepolia-nitro-pruned-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-sepolia
+      - traefik.http.services.arbitrum-sepolia-nitro-pruned-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-pruned-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-pruned-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-pruned-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-sepolia`) || Path(`/arbitrum-sepolia/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-sepolia-nitro-pruned-pebble-hash.rule=Path(`/arbitrum-sepolia`) || Path(`/arbitrum-sepolia/`)}
+      - traefik.http.routers.arbitrum-sepolia-nitro-pruned-pebble-hash.middlewares=arbitrum-sepolia-nitro-pruned-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-sepolia-nitro-pruned-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum-sepolia
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-sepolia-nitro-pruned-pebble-hash.yml

@@ -0,0 +1,141 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/arbitrum-sepolia-nitro-pruned-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arbitrum-sepolia \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arbitrum-sepolia:
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --chain.id=421614
+      - --execution.caching.archive=${ARBITRUM_SEPOLIA_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ARBITRUM_SEPOLIA_NITRO_PRUNED_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ARBITRUM_SEPOLIA_NITRO_PRUNED_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ARBITRUM_SEPOLIA_NITRO_PRUNED_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ARBITRUM_SEPOLIA_NITRO_PRUNED_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --init.validate-genesis-assertion=false
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/arbitrum-sepolia
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ARBITRUM_SEPOLIA_NITRO_PRUNED_PEBBLE_HASH_DATA:-arbitrum-sepolia-nitro-pruned-pebble-hash}:/root/.arbitrum
+      - ./tmp/arbitrum-sepolia:/tmp
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.arbitrum-sepolia-nitro-pruned-pebble-hash-stripprefix.stripprefix.prefixes=/arbitrum-sepolia
+      - traefik.http.services.arbitrum-sepolia-nitro-pruned-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-pruned-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-pruned-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arbitrum-sepolia-nitro-pruned-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/arbitrum-sepolia`) || Path(`/arbitrum-sepolia/`))}
+      - ${NO_SSL:+traefik.http.routers.arbitrum-sepolia-nitro-pruned-pebble-hash.rule=Path(`/arbitrum-sepolia`) || Path(`/arbitrum-sepolia/`)}
+      - traefik.http.routers.arbitrum-sepolia-nitro-pruned-pebble-hash.middlewares=arbitrum-sepolia-nitro-pruned-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  arbitrum-sepolia-nitro-pruned-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: arbitrum-sepolia
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/arbitrum-sepolia-nitro-pruned-pebble-path.yml

@@ -0,0 +1,57 @@
+
+
+services:
+  arbitrum-sepolia:
+    image: 'offchainlabs/nitro-node:${NITRO_VERSION:-v3.5.3-0a9c975}'
+    stop_grace_period: 3m
+    user: root
+    volumes:
+      - 'arbitrum-sepolia-nitro-pruned-pebble-path:/root/.arbitrum'
+      
+      - './tmp/arbitrum-sepolia:/tmp'
+    expose:
+      - 8545
+    command:
+      - --chain.id=421614      
+      - --execution.caching.state-scheme=path      
+      - --execution.rpc.gas-cap=600000000
+      - --execution.caching.archive=false
+      - --execution.sequencer.enable=false      
+      - --persistent.db-engine=pebble
+      - --persistent.chain=/root/.arbitrum/arbitrum-sepolia
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --http.addr=0.0.0.0
+      - --http.port=8545
+      - --http.vhosts=*
+      - --http.corsdomain=*
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --ws.port=8545
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.api=eth,net,web3,arb,txpool,debug
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --log-type=json
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --node.batch-poster.enable=false            
+      
+      
+            
+            
+    restart: unless-stopped                 
+    labels:                     
+      - "traefik.enable=true"
+      - "traefik.http.middlewares.arbitrum-sepolia-nitro-pruned-pebble-path-stripprefix.stripprefix.prefixes=/arbitrum-sepolia"                      
+      - "traefik.http.services.arbitrum-sepolia-nitro-pruned-pebble-path.loadbalancer.server.port=8545"
+      - "traefik.http.routers.arbitrum-sepolia-nitro-pruned-pebble-path.entrypoints=websecure"                                              
+      - "traefik.http.routers.arbitrum-sepolia-nitro-pruned-pebble-path.tls.certresolver=myresolver"                                        
+      - "traefik.http.routers.arbitrum-sepolia-nitro-pruned-pebble-path.rule=Host(`$DOMAIN`) && PathPrefix(`/arbitrum-sepolia`)"                     
+      - "traefik.http.routers.arbitrum-sepolia-nitro-pruned-pebble-path.middlewares=arbitrum-sepolia-nitro-pruned-pebble-path-stripprefix, ipwhitelist"                           
+    networks:                                                                                         
+      - chains
+
+volumes:  
+  arbitrum-sepolia-nitro-pruned-pebble-path:

arb/nitro/connext-sepolia-nitro-archive-leveldb-hash.yml

@@ -0,0 +1,144 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/connext-sepolia-nitro-archive-leveldb-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/connext-sepolia-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  connext-sepolia-archive:
+    image: ${CONNEXT_NITRO_IMAGE:-offchainlabs/nitro-node}:${CONNEXT_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${CONNEXT_SEPOLIA_NITRO_ARCHIVE_LEVELDB_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${CONNEXT_SEPOLIA_NITRO_ARCHIVE_LEVELDB_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${CONNEXT_SEPOLIA_NITRO_ARCHIVE_LEVELDB_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${CONNEXT_SEPOLIA_NITRO_ARCHIVE_LEVELDB_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.connext-sepolia.gelato.digital
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.connext-sepolia.gelato.digital
+      - --node.feed.input.url=wss://feed.connext-sepolia.gelato.digital
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/connext-sepolia-archive
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${CONNEXT_SEPOLIA_NITRO_ARCHIVE_LEVELDB_HASH_DATA:-connext-sepolia-nitro-archive-leveldb-hash}:/root/.arbitrum
+      - ./arb/connext/sepolia:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.connext-sepolia-nitro-archive-leveldb-hash-stripprefix.stripprefix.prefixes=/connext-sepolia-archive
+      - traefik.http.services.connext-sepolia-nitro-archive-leveldb-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.connext-sepolia-nitro-archive-leveldb-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.connext-sepolia-nitro-archive-leveldb-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.connext-sepolia-nitro-archive-leveldb-hash.rule=Host(`$DOMAIN`) && (Path(`/connext-sepolia-archive`) || Path(`/connext-sepolia-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.connext-sepolia-nitro-archive-leveldb-hash.rule=Path(`/connext-sepolia-archive`) || Path(`/connext-sepolia-archive/`)}
+      - traefik.http.routers.connext-sepolia-nitro-archive-leveldb-hash.middlewares=connext-sepolia-nitro-archive-leveldb-hash-stripprefix, ipallowlist
+
+volumes:
+  connext-sepolia-nitro-archive-leveldb-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain:
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/connext-sepolia-nitro-pruned-pebble-path.yml

@@ -0,0 +1,147 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/connext-sepolia-nitro-pruned-pebble-path.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/connext-sepolia \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  connext-sepolia:
+    image: ${CONNEXT_NITRO_IMAGE:-offchainlabs/nitro-node}:${CONNEXT_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${CONNEXT_SEPOLIA_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${CONNEXT_SEPOLIA_NITRO_PRUNED_PEBBLE_PATH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${CONNEXT_SEPOLIA_NITRO_PRUNED_PEBBLE_PATH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.state-scheme=path
+      - --execution.caching.trie-clean-cache=${CONNEXT_SEPOLIA_NITRO_PRUNED_PEBBLE_PATH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${CONNEXT_SEPOLIA_NITRO_PRUNED_PEBBLE_PATH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.connext-sepolia.gelato.digital
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.connext-sepolia.gelato.digital
+      - --node.feed.input.url=wss://feed.connext-sepolia.gelato.digital
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/connext-sepolia
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${CONNEXT_SEPOLIA_NITRO_PRUNED_PEBBLE_PATH_DATA:-connext-sepolia-nitro-pruned-pebble-path}:/root/.arbitrum
+      - ./arb/connext/sepolia:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.connext-sepolia-nitro-pruned-pebble-path-stripprefix.stripprefix.prefixes=/connext-sepolia
+      - traefik.http.services.connext-sepolia-nitro-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.connext-sepolia-nitro-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.connext-sepolia-nitro-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.connext-sepolia-nitro-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/connext-sepolia`) || Path(`/connext-sepolia/`))}
+      - ${NO_SSL:+traefik.http.routers.connext-sepolia-nitro-pruned-pebble-path.rule=Path(`/connext-sepolia`) || Path(`/connext-sepolia/`)}
+      - traefik.http.routers.connext-sepolia-nitro-pruned-pebble-path.middlewares=connext-sepolia-nitro-pruned-pebble-path-stripprefix, ipallowlist
+
+volumes:
+  connext-sepolia-nitro-pruned-pebble-path:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain:
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/everclear-mainnet-nitro-archive-leveldb-hash.yml

@@ -0,0 +1,144 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/everclear-mainnet-nitro-archive-leveldb-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/everclear-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  everclear-mainnet-archive:
+    image: ${EVERCLEAR_NITRO_IMAGE:-offchainlabs/nitro-node}:${EVERCLEAR_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${EVERCLEAR_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${EVERCLEAR_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${EVERCLEAR_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${EVERCLEAR_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.everclear.raas.gelato.cloud
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.everclear.raas.gelato.cloud
+      - --node.feed.input.url=wss://feed.everclear.raas.gelato.cloud
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/everclear-mainnet-archive
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${EVERCLEAR_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_DATA:-everclear-mainnet-nitro-archive-leveldb-hash}:/root/.arbitrum
+      - ./arb/everclear/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.everclear-mainnet-nitro-archive-leveldb-hash-stripprefix.stripprefix.prefixes=/everclear-mainnet-archive
+      - traefik.http.services.everclear-mainnet-nitro-archive-leveldb-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.everclear-mainnet-nitro-archive-leveldb-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.everclear-mainnet-nitro-archive-leveldb-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.everclear-mainnet-nitro-archive-leveldb-hash.rule=Host(`$DOMAIN`) && (Path(`/everclear-mainnet-archive`) || Path(`/everclear-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.everclear-mainnet-nitro-archive-leveldb-hash.rule=Path(`/everclear-mainnet-archive`) || Path(`/everclear-mainnet-archive/`)}
+      - traefik.http.routers.everclear-mainnet-nitro-archive-leveldb-hash.middlewares=everclear-mainnet-nitro-archive-leveldb-hash-stripprefix, ipallowlist
+
+volumes:
+  everclear-mainnet-nitro-archive-leveldb-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: everclear
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/everclear-mainnet-nitro-pruned-pebble-path.yml

@@ -0,0 +1,147 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/everclear-mainnet-nitro-pruned-pebble-path.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/everclear-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  everclear-mainnet:
+    image: ${EVERCLEAR_NITRO_IMAGE:-offchainlabs/nitro-node}:${EVERCLEAR_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${EVERCLEAR_MAINNET_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${EVERCLEAR_MAINNET_NITRO_PRUNED_PEBBLE_PATH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${EVERCLEAR_MAINNET_NITRO_PRUNED_PEBBLE_PATH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.state-scheme=path
+      - --execution.caching.trie-clean-cache=${EVERCLEAR_MAINNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${EVERCLEAR_MAINNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.everclear.raas.gelato.cloud
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.everclear.raas.gelato.cloud
+      - --node.feed.input.url=wss://feed.everclear.raas.gelato.cloud
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/everclear-mainnet
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${EVERCLEAR_MAINNET_NITRO_PRUNED_PEBBLE_PATH_DATA:-everclear-mainnet-nitro-pruned-pebble-path}:/root/.arbitrum
+      - ./arb/everclear/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.everclear-mainnet-nitro-pruned-pebble-path-stripprefix.stripprefix.prefixes=/everclear-mainnet
+      - traefik.http.services.everclear-mainnet-nitro-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.everclear-mainnet-nitro-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.everclear-mainnet-nitro-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.everclear-mainnet-nitro-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/everclear-mainnet`) || Path(`/everclear-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.everclear-mainnet-nitro-pruned-pebble-path.rule=Path(`/everclear-mainnet`) || Path(`/everclear-mainnet/`)}
+      - traefik.http.routers.everclear-mainnet-nitro-pruned-pebble-path.middlewares=everclear-mainnet-nitro-pruned-pebble-path-stripprefix, ipallowlist
+
+volumes:
+  everclear-mainnet-nitro-pruned-pebble-path:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: everclear
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/opencampuscodex-sepolia-nitro-archive-leveldb-hash.yml

@@ -0,0 +1,143 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/opencampuscodex-sepolia-nitro-archive-leveldb-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/opencampuscodex-sepolia-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  opencampuscodex-sepolia-archive:
+    image: ${OPENCAMPUSCODEX_NITRO_IMAGE:-offchainlabs/nitro-node}:${OPENCAMPUSCODEX_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${OPENCAMPUSCODEX_SEPOLIA_NITRO_ARCHIVE_LEVELDB_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${OPENCAMPUSCODEX_SEPOLIA_NITRO_ARCHIVE_LEVELDB_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${OPENCAMPUSCODEX_SEPOLIA_NITRO_ARCHIVE_LEVELDB_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${OPENCAMPUSCODEX_SEPOLIA_NITRO_ARCHIVE_LEVELDB_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.open-campus-codex.gelato.digital
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.open-campus-codex.gelato.digital
+      - --node.feed.input.url=wss://feed.open-campus-codex.gelato.digital
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.connection.url=${ARBITRUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/opencampuscodex-sepolia-archive
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${OPENCAMPUSCODEX_SEPOLIA_NITRO_ARCHIVE_LEVELDB_HASH_DATA:-opencampuscodex-sepolia-nitro-archive-leveldb-hash}:/root/.arbitrum
+      - ./arb/opencampuscodex/arbitrum-sepolia:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.opencampuscodex-sepolia-nitro-archive-leveldb-hash-stripprefix.stripprefix.prefixes=/opencampuscodex-sepolia-archive
+      - traefik.http.services.opencampuscodex-sepolia-nitro-archive-leveldb-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.opencampuscodex-sepolia-nitro-archive-leveldb-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.opencampuscodex-sepolia-nitro-archive-leveldb-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.opencampuscodex-sepolia-nitro-archive-leveldb-hash.rule=Host(`$DOMAIN`) && (Path(`/opencampuscodex-sepolia-archive`) || Path(`/opencampuscodex-sepolia-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.opencampuscodex-sepolia-nitro-archive-leveldb-hash.rule=Path(`/opencampuscodex-sepolia-archive`) || Path(`/opencampuscodex-sepolia-archive/`)}
+      - traefik.http.routers.opencampuscodex-sepolia-nitro-archive-leveldb-hash.middlewares=opencampuscodex-sepolia-nitro-archive-leveldb-hash-stripprefix, ipallowlist
+
+volumes:
+  opencampuscodex-sepolia-nitro-archive-leveldb-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: open-campus-codex-sepolia
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/opencampuscodex-sepolia-nitro-pruned-pebble-hash.yml

@@ -0,0 +1,120 @@
+# use at your own risk
+
+services:
+  opencampuscodex-sepolia:
+    image: ${OPENCAMPUSCODEX_NITRO_IMAGE:-offchainlabs/nitro-node}:${OPENCAMPUSCODEX_SEPOLIA_NITRO_VERSION:-v3.5.3-0a9c975}
+    user: root
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    expose:
+      - 8545
+      - 8551
+
+    ports:
+      - 10938:10938
+      - 10938:10938/udp
+    volumes:
+      - ${OPENCAMPUSCODEX_SEPOLIA_NITRO_PRUNED_PEBBLE_HASH_DATA:-opencampuscodex-sepolia-nitro-pruned-pebble-hash}:/root/.arbitrum
+      - /slowdisk:/slowdisk
+
+      - .jwtsecret:/jwtsecret:ro
+
+      - ./tmp/opencampuscodex-sepolia:/tmp
+
+    command:
+      - --datadir=/root/.arbitrum
+      - --port=10938
+      - --bind=0.0.0.0
+      - --nat=extip:${IP}
+      - --http
+      - --http.port=8545
+      - --http.vhosts=*
+      - --ws
+      - --ws.port=8545
+      - --ws.origins=*
+      - --ws.addr=0.0.0.0
+      - --http.addr=0.0.0.0
+      - --maxpeers=50
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --ws.api=eth,net,web3,arb,txpool,debug
+
+      - --rpc.gascap=600000000
+      - --rpc.returndatalimit=10000000
+      - --rpc.txfeecap=0
+
+      - --execution.caching.state-scheme=hash
+      - --execution.rpc.gas-cap=600000000
+      - --execution.caching.archive=false
+      - --execution.sequencer.enable=false
+      - --persistent.db-engine=pebble
+      - --persistent.chain=/root/.arbitrum/opencampuscodex-sepolia
+
+      - --conf.file=/config/baseConfig.json
+
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --node.batch-poster.enable=false
+      - --node.data-availability.enable=true
+      - --node.data-availability.sequencer-inbox-address=0xe347C1223381b9Dcd6c0F61cf81c90175A7Bae77
+      - --node.data-availability.parent-chain-node-url=${ARBITRUM_SEPOLIA_EXECUTION_RPC}
+      - --node.data-availability.rest-aggregator.enable=true
+      - --node.data-availability.rest-aggregator.urls=https://das.open-campus-codex.gelato.digital
+
+      - --node.feed.input.url=wss://feed.open-campus-codex.gelato.digital
+      - --execution.forwarding-target=https://rpc.open-campus-codex.gelato.digital
+      - --parent-chain.connection.url=${ARBITRUM_SEPOLIA_EXECUTION_RPC}
+
+    networks:
+      - chains
+    restart: unless-stopped
+    stop_grace_period: 5m
+    labels:
+      - traefik.enable=true
+      - traefik.http.middlewares.opencampuscodex-sepolia-nitro-pruned-pebble-hash-stripprefix.stripprefix.prefixes=/opencampuscodex-sepolia
+      - traefik.http.services.opencampuscodex-sepolia-nitro-pruned-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.opencampuscodex-sepolia-nitro-pruned-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.opencampuscodex-sepolia-nitro-pruned-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.opencampuscodex-sepolia-nitro-pruned-pebble-hash.rule=Host(`$DOMAIN`) && PathPrefix(`/opencampuscodex-sepolia`)}
+      - ${NO_SSL:+traefik.http.routers.opencampuscodex-sepolia-nitro-pruned-pebble-hash.rule=PathPrefix(`/opencampuscodex-sepolia`)}
+      - traefik.http.routers.opencampuscodex-sepolia-nitro-pruned-pebble-hash.middlewares=opencampuscodex-sepolia-nitro-pruned-pebble-hash-stripprefix, ipwhitelist
+
+volumes:
+  opencampuscodex-sepolia-nitro-pruned-pebble-hash:
+
+x-upstreams:
+  - chain: open-campus-codex-sepolia
+    method-groups:
+      enabled:
+        - debug
+        - filter
+
+    methods:
+      disabled:
+      enabled:
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex

arb/nitro/opencampuscodex-sepolia-nitro-pruned-pebble-path.yml

@@ -0,0 +1,146 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/opencampuscodex-sepolia-nitro-pruned-pebble-path.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/opencampuscodex-sepolia \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  opencampuscodex-sepolia:
+    image: ${OPENCAMPUSCODEX_NITRO_IMAGE:-offchainlabs/nitro-node}:${OPENCAMPUSCODEX_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${OPENCAMPUSCODEX_SEPOLIA_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${OPENCAMPUSCODEX_SEPOLIA_NITRO_PRUNED_PEBBLE_PATH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${OPENCAMPUSCODEX_SEPOLIA_NITRO_PRUNED_PEBBLE_PATH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.state-scheme=path
+      - --execution.caching.trie-clean-cache=${OPENCAMPUSCODEX_SEPOLIA_NITRO_PRUNED_PEBBLE_PATH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${OPENCAMPUSCODEX_SEPOLIA_NITRO_PRUNED_PEBBLE_PATH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.open-campus-codex.gelato.digital
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.open-campus-codex.gelato.digital
+      - --node.feed.input.url=wss://feed.open-campus-codex.gelato.digital
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.connection.url=${ARBITRUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/opencampuscodex-sepolia
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${OPENCAMPUSCODEX_SEPOLIA_NITRO_PRUNED_PEBBLE_PATH_DATA:-opencampuscodex-sepolia-nitro-pruned-pebble-path}:/root/.arbitrum
+      - ./arb/opencampuscodex/arbitrum-sepolia:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.opencampuscodex-sepolia-nitro-pruned-pebble-path-stripprefix.stripprefix.prefixes=/opencampuscodex-sepolia
+      - traefik.http.services.opencampuscodex-sepolia-nitro-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.opencampuscodex-sepolia-nitro-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.opencampuscodex-sepolia-nitro-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.opencampuscodex-sepolia-nitro-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/opencampuscodex-sepolia`) || Path(`/opencampuscodex-sepolia/`))}
+      - ${NO_SSL:+traefik.http.routers.opencampuscodex-sepolia-nitro-pruned-pebble-path.rule=Path(`/opencampuscodex-sepolia`) || Path(`/opencampuscodex-sepolia/`)}
+      - traefik.http.routers.opencampuscodex-sepolia-nitro-pruned-pebble-path.middlewares=opencampuscodex-sepolia-nitro-pruned-pebble-path-stripprefix, ipallowlist
+
+volumes:
+  opencampuscodex-sepolia-nitro-pruned-pebble-path:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: open-campus-codex-sepolia
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/playblock-mainnet-nitro-archive-leveldb-hash.yml

@@ -0,0 +1,143 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/playblock-mainnet-nitro-archive-leveldb-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/playblock-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  playblock-mainnet-archive:
+    image: ${PLAYBLOCK_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLAYBLOCK_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${PLAYBLOCK_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${PLAYBLOCK_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${PLAYBLOCK_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${PLAYBLOCK_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.playblock.io
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.playblock.io
+      - --node.feed.input.url=wss://feed.playblock.io
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.connection.url=${ARBITRUM_NOVA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/playblock-mainnet-archive
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${PLAYBLOCK_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_DATA:-playblock-mainnet-nitro-archive-leveldb-hash}:/root/.arbitrum
+      - ./arb/playblock/arbitrum-nova:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.playblock-mainnet-nitro-archive-leveldb-hash-stripprefix.stripprefix.prefixes=/playblock-mainnet-archive
+      - traefik.http.services.playblock-mainnet-nitro-archive-leveldb-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.playblock-mainnet-nitro-archive-leveldb-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.playblock-mainnet-nitro-archive-leveldb-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.playblock-mainnet-nitro-archive-leveldb-hash.rule=Host(`$DOMAIN`) && (Path(`/playblock-mainnet-archive`) || Path(`/playblock-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.playblock-mainnet-nitro-archive-leveldb-hash.rule=Path(`/playblock-mainnet-archive`) || Path(`/playblock-mainnet-archive/`)}
+      - traefik.http.routers.playblock-mainnet-nitro-archive-leveldb-hash.middlewares=playblock-mainnet-nitro-archive-leveldb-hash-stripprefix, ipallowlist
+
+volumes:
+  playblock-mainnet-nitro-archive-leveldb-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: playnance
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/playblock-mainnet-nitro-pruned-pebble-path.yml

@@ -0,0 +1,146 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/playblock-mainnet-nitro-pruned-pebble-path.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/playblock-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  playblock-mainnet:
+    image: ${PLAYBLOCK_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLAYBLOCK_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${PLAYBLOCK_MAINNET_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${PLAYBLOCK_MAINNET_NITRO_PRUNED_PEBBLE_PATH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${PLAYBLOCK_MAINNET_NITRO_PRUNED_PEBBLE_PATH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.state-scheme=path
+      - --execution.caching.trie-clean-cache=${PLAYBLOCK_MAINNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${PLAYBLOCK_MAINNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.playblock.io
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.playblock.io
+      - --node.feed.input.url=wss://feed.playblock.io
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.connection.url=${ARBITRUM_NOVA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/playblock-mainnet
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${PLAYBLOCK_MAINNET_NITRO_PRUNED_PEBBLE_PATH_DATA:-playblock-mainnet-nitro-pruned-pebble-path}:/root/.arbitrum
+      - ./arb/playblock/arbitrum-nova:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.playblock-mainnet-nitro-pruned-pebble-path-stripprefix.stripprefix.prefixes=/playblock-mainnet
+      - traefik.http.services.playblock-mainnet-nitro-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.playblock-mainnet-nitro-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.playblock-mainnet-nitro-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.playblock-mainnet-nitro-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/playblock-mainnet`) || Path(`/playblock-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.playblock-mainnet-nitro-pruned-pebble-path.rule=Path(`/playblock-mainnet`) || Path(`/playblock-mainnet/`)}
+      - traefik.http.routers.playblock-mainnet-nitro-pruned-pebble-path.middlewares=playblock-mainnet-nitro-pruned-pebble-path-stripprefix, ipallowlist
+
+volumes:
+  playblock-mainnet-nitro-pruned-pebble-path:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: playnance
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/plume-mainnet-nitro-archive-leveldb-hash.yml

@@ -0,0 +1,144 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/plume-mainnet-nitro-archive-leveldb-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/plume-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  plume-mainnet-archive:
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${PLUME_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${PLUME_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${PLUME_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${PLUME_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.plume.org
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das-plume-mainnet-1.t.conduit.xyz
+      - --node.feed.input.url=wss://relay-plume-mainnet-1.t.conduit.xyz
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/plume-mainnet-archive
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${PLUME_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_DATA:-plume-mainnet-nitro-archive-leveldb-hash}:/root/.arbitrum
+      - ./arb/plume/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.plume-mainnet-nitro-archive-leveldb-hash-stripprefix.stripprefix.prefixes=/plume-mainnet-archive
+      - traefik.http.services.plume-mainnet-nitro-archive-leveldb-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.plume-mainnet-nitro-archive-leveldb-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.plume-mainnet-nitro-archive-leveldb-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.plume-mainnet-nitro-archive-leveldb-hash.rule=Host(`$DOMAIN`) && (Path(`/plume-mainnet-archive`) || Path(`/plume-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.plume-mainnet-nitro-archive-leveldb-hash.rule=Path(`/plume-mainnet-archive`) || Path(`/plume-mainnet-archive/`)}
+      - traefik.http.routers.plume-mainnet-nitro-archive-leveldb-hash.middlewares=plume-mainnet-nitro-archive-leveldb-hash-stripprefix, ipallowlist
+
+volumes:
+  plume-mainnet-nitro-archive-leveldb-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: plume
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/plume-mainnet-nitro-archive-pebble-hash.yml

@@ -0,0 +1,145 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/plume-mainnet-nitro-archive-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/plume-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  plume-mainnet-archive:
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${PLUME_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${PLUME_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${PLUME_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${PLUME_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.plume.org
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das-plume-mainnet-1.t.conduit.xyz
+      - --node.feed.input.url=wss://relay-plume-mainnet-1.t.conduit.xyz
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/plume-mainnet-archive
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${PLUME_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_DATA:-plume-mainnet-nitro-archive-pebble-hash}:/root/.arbitrum
+      - ./arb/plume/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.plume-mainnet-nitro-archive-pebble-hash-stripprefix.stripprefix.prefixes=/plume-mainnet-archive
+      - traefik.http.services.plume-mainnet-nitro-archive-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.plume-mainnet-nitro-archive-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.plume-mainnet-nitro-archive-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.plume-mainnet-nitro-archive-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/plume-mainnet-archive`) || Path(`/plume-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.plume-mainnet-nitro-archive-pebble-hash.rule=Path(`/plume-mainnet-archive`) || Path(`/plume-mainnet-archive/`)}
+      - traefik.http.routers.plume-mainnet-nitro-archive-pebble-hash.middlewares=plume-mainnet-nitro-archive-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  plume-mainnet-nitro-archive-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: plume
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/plume-mainnet-nitro-pruned-leveldb-hash.yml

@@ -0,0 +1,144 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/plume-mainnet-nitro-pruned-leveldb-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/plume-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  plume-mainnet:
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${PLUME_MAINNET_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${PLUME_MAINNET_NITRO_PRUNED_LEVELDB_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${PLUME_MAINNET_NITRO_PRUNED_LEVELDB_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${PLUME_MAINNET_NITRO_PRUNED_LEVELDB_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${PLUME_MAINNET_NITRO_PRUNED_LEVELDB_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.plume.org
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das-plume-mainnet-1.t.conduit.xyz
+      - --node.feed.input.url=wss://relay-plume-mainnet-1.t.conduit.xyz
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/plume-mainnet
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${PLUME_MAINNET_NITRO_PRUNED_LEVELDB_HASH_DATA:-plume-mainnet-nitro-pruned-leveldb-hash}:/root/.arbitrum
+      - ./arb/plume/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.plume-mainnet-nitro-pruned-leveldb-hash-stripprefix.stripprefix.prefixes=/plume-mainnet
+      - traefik.http.services.plume-mainnet-nitro-pruned-leveldb-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.plume-mainnet-nitro-pruned-leveldb-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.plume-mainnet-nitro-pruned-leveldb-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.plume-mainnet-nitro-pruned-leveldb-hash.rule=Host(`$DOMAIN`) && (Path(`/plume-mainnet`) || Path(`/plume-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.plume-mainnet-nitro-pruned-leveldb-hash.rule=Path(`/plume-mainnet`) || Path(`/plume-mainnet/`)}
+      - traefik.http.routers.plume-mainnet-nitro-pruned-leveldb-hash.middlewares=plume-mainnet-nitro-pruned-leveldb-hash-stripprefix, ipallowlist
+
+volumes:
+  plume-mainnet-nitro-pruned-leveldb-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: plume
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/plume-mainnet-nitro-pruned-pebble-path.yml

@@ -0,0 +1,147 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/plume-mainnet-nitro-pruned-pebble-path.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/plume-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  plume-mainnet:
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${PLUME_MAINNET_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${PLUME_MAINNET_NITRO_PRUNED_PEBBLE_PATH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${PLUME_MAINNET_NITRO_PRUNED_PEBBLE_PATH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.state-scheme=path
+      - --execution.caching.trie-clean-cache=${PLUME_MAINNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${PLUME_MAINNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.plume.org
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das-plume-mainnet-1.t.conduit.xyz
+      - --node.feed.input.url=wss://relay-plume-mainnet-1.t.conduit.xyz
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/plume-mainnet
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${PLUME_MAINNET_NITRO_PRUNED_PEBBLE_PATH_DATA:-plume-mainnet-nitro-pruned-pebble-path}:/root/.arbitrum
+      - ./arb/plume/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.plume-mainnet-nitro-pruned-pebble-path-stripprefix.stripprefix.prefixes=/plume-mainnet
+      - traefik.http.services.plume-mainnet-nitro-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.plume-mainnet-nitro-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.plume-mainnet-nitro-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.plume-mainnet-nitro-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/plume-mainnet`) || Path(`/plume-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.plume-mainnet-nitro-pruned-pebble-path.rule=Path(`/plume-mainnet`) || Path(`/plume-mainnet/`)}
+      - traefik.http.routers.plume-mainnet-nitro-pruned-pebble-path.middlewares=plume-mainnet-nitro-pruned-pebble-path-stripprefix, ipallowlist
+
+volumes:
+  plume-mainnet-nitro-pruned-pebble-path:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: plume
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/plume-testnet-nitro-archive-leveldb-hash.yml

@@ -0,0 +1,144 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/plume-testnet-nitro-archive-leveldb-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/plume-testnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  plume-testnet-archive:
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${PLUME_TESTNET_NITRO_ARCHIVE_LEVELDB_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${PLUME_TESTNET_NITRO_ARCHIVE_LEVELDB_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${PLUME_TESTNET_NITRO_ARCHIVE_LEVELDB_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${PLUME_TESTNET_NITRO_ARCHIVE_LEVELDB_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://testnet-rpc.plume.org
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das-plume-testnet-1.t.conduit.xyz
+      - --node.feed.input.url=wss://relay-plume-testnet-1.t.conduit.xyz
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/plume-testnet-archive
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${PLUME_TESTNET_NITRO_ARCHIVE_LEVELDB_HASH_DATA:-plume-testnet-nitro-archive-leveldb-hash}:/root/.arbitrum
+      - ./arb/plume/testnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.plume-testnet-nitro-archive-leveldb-hash-stripprefix.stripprefix.prefixes=/plume-testnet-archive
+      - traefik.http.services.plume-testnet-nitro-archive-leveldb-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.plume-testnet-nitro-archive-leveldb-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.plume-testnet-nitro-archive-leveldb-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.plume-testnet-nitro-archive-leveldb-hash.rule=Host(`$DOMAIN`) && (Path(`/plume-testnet-archive`) || Path(`/plume-testnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.plume-testnet-nitro-archive-leveldb-hash.rule=Path(`/plume-testnet-archive`) || Path(`/plume-testnet-archive/`)}
+      - traefik.http.routers.plume-testnet-nitro-archive-leveldb-hash.middlewares=plume-testnet-nitro-archive-leveldb-hash-stripprefix, ipallowlist
+
+volumes:
+  plume-testnet-nitro-archive-leveldb-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: plume-testnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/plume-testnet-nitro-archive-pebble-hash.yml

@@ -0,0 +1,145 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/plume-testnet-nitro-archive-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/plume-testnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  plume-testnet-archive:
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${PLUME_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${PLUME_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${PLUME_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${PLUME_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://testnet-rpc.plume.org
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das-plume-testnet-1.t.conduit.xyz
+      - --node.feed.input.url=wss://relay-plume-testnet-1.t.conduit.xyz
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/plume-testnet-archive
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${PLUME_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_DATA:-plume-testnet-nitro-archive-pebble-hash}:/root/.arbitrum
+      - ./arb/plume/testnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.plume-testnet-nitro-archive-pebble-hash-stripprefix.stripprefix.prefixes=/plume-testnet-archive
+      - traefik.http.services.plume-testnet-nitro-archive-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.plume-testnet-nitro-archive-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.plume-testnet-nitro-archive-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.plume-testnet-nitro-archive-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/plume-testnet-archive`) || Path(`/plume-testnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.plume-testnet-nitro-archive-pebble-hash.rule=Path(`/plume-testnet-archive`) || Path(`/plume-testnet-archive/`)}
+      - traefik.http.routers.plume-testnet-nitro-archive-pebble-hash.middlewares=plume-testnet-nitro-archive-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  plume-testnet-nitro-archive-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: plume-testnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/plume-testnet-nitro-pruned-leveldb-hash.yml

@@ -0,0 +1,144 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/plume-testnet-nitro-pruned-leveldb-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/plume-testnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  plume-testnet:
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${PLUME_TESTNET_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${PLUME_TESTNET_NITRO_PRUNED_LEVELDB_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${PLUME_TESTNET_NITRO_PRUNED_LEVELDB_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${PLUME_TESTNET_NITRO_PRUNED_LEVELDB_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${PLUME_TESTNET_NITRO_PRUNED_LEVELDB_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://testnet-rpc.plume.org
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das-plume-testnet-1.t.conduit.xyz
+      - --node.feed.input.url=wss://relay-plume-testnet-1.t.conduit.xyz
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/plume-testnet
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${PLUME_TESTNET_NITRO_PRUNED_LEVELDB_HASH_DATA:-plume-testnet-nitro-pruned-leveldb-hash}:/root/.arbitrum
+      - ./arb/plume/testnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.plume-testnet-nitro-pruned-leveldb-hash-stripprefix.stripprefix.prefixes=/plume-testnet
+      - traefik.http.services.plume-testnet-nitro-pruned-leveldb-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.plume-testnet-nitro-pruned-leveldb-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.plume-testnet-nitro-pruned-leveldb-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.plume-testnet-nitro-pruned-leveldb-hash.rule=Host(`$DOMAIN`) && (Path(`/plume-testnet`) || Path(`/plume-testnet/`))}
+      - ${NO_SSL:+traefik.http.routers.plume-testnet-nitro-pruned-leveldb-hash.rule=Path(`/plume-testnet`) || Path(`/plume-testnet/`)}
+      - traefik.http.routers.plume-testnet-nitro-pruned-leveldb-hash.middlewares=plume-testnet-nitro-pruned-leveldb-hash-stripprefix, ipallowlist
+
+volumes:
+  plume-testnet-nitro-pruned-leveldb-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: plume-testnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/plume-testnet-nitro-pruned-pebble-path.yml

@@ -0,0 +1,147 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/plume-testnet-nitro-pruned-pebble-path.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/plume-testnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  plume-testnet:
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${PLUME_TESTNET_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${PLUME_TESTNET_NITRO_PRUNED_PEBBLE_PATH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${PLUME_TESTNET_NITRO_PRUNED_PEBBLE_PATH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.state-scheme=path
+      - --execution.caching.trie-clean-cache=${PLUME_TESTNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${PLUME_TESTNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://testnet-rpc.plume.org
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das-plume-testnet-1.t.conduit.xyz
+      - --node.feed.input.url=wss://relay-plume-testnet-1.t.conduit.xyz
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/plume-testnet
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${PLUME_TESTNET_NITRO_PRUNED_PEBBLE_PATH_DATA:-plume-testnet-nitro-pruned-pebble-path}:/root/.arbitrum
+      - ./arb/plume/testnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.plume-testnet-nitro-pruned-pebble-path-stripprefix.stripprefix.prefixes=/plume-testnet
+      - traefik.http.services.plume-testnet-nitro-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.plume-testnet-nitro-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.plume-testnet-nitro-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.plume-testnet-nitro-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/plume-testnet`) || Path(`/plume-testnet/`))}
+      - ${NO_SSL:+traefik.http.routers.plume-testnet-nitro-pruned-pebble-path.rule=Path(`/plume-testnet`) || Path(`/plume-testnet/`)}
+      - traefik.http.routers.plume-testnet-nitro-pruned-pebble-path.middlewares=plume-testnet-nitro-pruned-pebble-path-stripprefix, ipallowlist
+
+volumes:
+  plume-testnet-nitro-pruned-pebble-path:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: plume-testnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/real-mainnet-nitro-archive-leveldb-hash.yml

@@ -0,0 +1,144 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/real-mainnet-nitro-archive-leveldb-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/real-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  real-mainnet-archive:
+    image: ${REAL_NITRO_IMAGE:-offchainlabs/nitro-node}:${REAL_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${REAL_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${REAL_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${REAL_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${REAL_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.realforreal.gelato.digital
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.realforreal.gelato.digital
+      - --node.feed.input.url=wss://feed.realforreal.gelato.digital
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/real-mainnet-archive
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${REAL_MAINNET_NITRO_ARCHIVE_LEVELDB_HASH_DATA:-real-mainnet-nitro-archive-leveldb-hash}:/root/.arbitrum
+      - ./arb/real/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.real-mainnet-nitro-archive-leveldb-hash-stripprefix.stripprefix.prefixes=/real-mainnet-archive
+      - traefik.http.services.real-mainnet-nitro-archive-leveldb-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.real-mainnet-nitro-archive-leveldb-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.real-mainnet-nitro-archive-leveldb-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.real-mainnet-nitro-archive-leveldb-hash.rule=Host(`$DOMAIN`) && (Path(`/real-mainnet-archive`) || Path(`/real-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.real-mainnet-nitro-archive-leveldb-hash.rule=Path(`/real-mainnet-archive`) || Path(`/real-mainnet-archive/`)}
+      - traefik.http.routers.real-mainnet-nitro-archive-leveldb-hash.middlewares=real-mainnet-nitro-archive-leveldb-hash-stripprefix, ipallowlist
+
+volumes:
+  real-mainnet-nitro-archive-leveldb-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: real
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/real-mainnet-nitro-archive-pebble-hash.yml

@@ -0,0 +1,145 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/real-mainnet-nitro-archive-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/real-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  real-mainnet-archive:
+    image: ${REAL_NITRO_IMAGE:-offchainlabs/nitro-node}:${REAL_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${REAL_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${REAL_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${REAL_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${REAL_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.realforreal.gelato.digital
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.realforreal.gelato.digital
+      - --node.feed.input.url=wss://feed.realforreal.gelato.digital
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/real-mainnet-archive
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${REAL_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_DATA:-real-mainnet-nitro-archive-pebble-hash}:/root/.arbitrum
+      - ./arb/real/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.real-mainnet-nitro-archive-pebble-hash-stripprefix.stripprefix.prefixes=/real-mainnet-archive
+      - traefik.http.services.real-mainnet-nitro-archive-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.real-mainnet-nitro-archive-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.real-mainnet-nitro-archive-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.real-mainnet-nitro-archive-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/real-mainnet-archive`) || Path(`/real-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.real-mainnet-nitro-archive-pebble-hash.rule=Path(`/real-mainnet-archive`) || Path(`/real-mainnet-archive/`)}
+      - traefik.http.routers.real-mainnet-nitro-archive-pebble-hash.middlewares=real-mainnet-nitro-archive-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  real-mainnet-nitro-archive-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: real
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/real-mainnet-nitro-pruned-pebble-path.yml

@@ -0,0 +1,147 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/real-mainnet-nitro-pruned-pebble-path.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/real-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  real-mainnet:
+    image: ${REAL_NITRO_IMAGE:-offchainlabs/nitro-node}:${REAL_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${REAL_MAINNET_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${REAL_MAINNET_NITRO_PRUNED_PEBBLE_PATH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${REAL_MAINNET_NITRO_PRUNED_PEBBLE_PATH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.state-scheme=path
+      - --execution.caching.trie-clean-cache=${REAL_MAINNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${REAL_MAINNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.realforreal.gelato.digital
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.realforreal.gelato.digital
+      - --node.feed.input.url=wss://feed.realforreal.gelato.digital
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/real-mainnet
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${REAL_MAINNET_NITRO_PRUNED_PEBBLE_PATH_DATA:-real-mainnet-nitro-pruned-pebble-path}:/root/.arbitrum
+      - ./arb/real/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.real-mainnet-nitro-pruned-pebble-path-stripprefix.stripprefix.prefixes=/real-mainnet
+      - traefik.http.services.real-mainnet-nitro-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.real-mainnet-nitro-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.real-mainnet-nitro-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.real-mainnet-nitro-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/real-mainnet`) || Path(`/real-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.real-mainnet-nitro-pruned-pebble-path.rule=Path(`/real-mainnet`) || Path(`/real-mainnet/`)}
+      - traefik.http.routers.real-mainnet-nitro-pruned-pebble-path.middlewares=real-mainnet-nitro-pruned-pebble-path-stripprefix, ipallowlist
+
+volumes:
+  real-mainnet-nitro-pruned-pebble-path:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: real
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/robinhood-mainnet-nitro-archive-pebble-hash.yml

@@ -0,0 +1,143 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/robinhood-mainnet-nitro-archive-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/robinhood-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  robinhood-mainnet-archive:
+    image: ${ROBINHOOD_NITRO_IMAGE:-offchainlabs/nitro-node}:${ROBINHOOD_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${ROBINHOOD_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ROBINHOOD_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ROBINHOOD_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ROBINHOOD_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.mainnet.chain.robinhood.com
+      - --execution.rpc.filter-log-cache-size=${ROBINHOOD_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_FILTER_LOG_CACHE:-32}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.feed.input.url=wss://feed.mainnet.chain.robinhood.com
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/robinhood-mainnet-archive
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ROBINHOOD_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_DATA:-robinhood-mainnet-nitro-archive-pebble-hash}:/root/.arbitrum
+      - ./arb/robinhood/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.robinhood-mainnet-nitro-archive-pebble-hash-stripprefix.stripprefix.prefixes=/robinhood-mainnet-archive
+      - traefik.http.services.robinhood-mainnet-nitro-archive-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.robinhood-mainnet-nitro-archive-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.robinhood-mainnet-nitro-archive-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.robinhood-mainnet-nitro-archive-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/robinhood-mainnet-archive`) || Path(`/robinhood-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.robinhood-mainnet-nitro-archive-pebble-hash.rule=Path(`/robinhood-mainnet-archive`) || Path(`/robinhood-mainnet-archive/`)}
+      - traefik.http.routers.robinhood-mainnet-nitro-archive-pebble-hash.middlewares=robinhood-mainnet-nitro-archive-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  robinhood-mainnet-nitro-archive-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: robinhood
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/robinhood-mainnet-nitro-pruned-pebble-path.yml

@@ -0,0 +1,144 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/robinhood-mainnet-nitro-pruned-pebble-path.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/robinhood-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  robinhood-mainnet:
+    image: ${ROBINHOOD_NITRO_IMAGE:-offchainlabs/nitro-node}:${ROBINHOOD_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${ROBINHOOD_MAINNET_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ROBINHOOD_MAINNET_NITRO_PRUNED_PEBBLE_PATH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ROBINHOOD_MAINNET_NITRO_PRUNED_PEBBLE_PATH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.state-scheme=path
+      - --execution.caching.trie-clean-cache=${ROBINHOOD_MAINNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ROBINHOOD_MAINNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.mainnet.chain.robinhood.com
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.feed.input.url=wss://feed.mainnet.chain.robinhood.com
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/robinhood-mainnet
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ROBINHOOD_MAINNET_NITRO_PRUNED_PEBBLE_PATH_DATA:-robinhood-mainnet-nitro-pruned-pebble-path}:/root/.arbitrum
+      - ./arb/robinhood/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.robinhood-mainnet-nitro-pruned-pebble-path-stripprefix.stripprefix.prefixes=/robinhood-mainnet
+      - traefik.http.services.robinhood-mainnet-nitro-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.robinhood-mainnet-nitro-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.robinhood-mainnet-nitro-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.robinhood-mainnet-nitro-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/robinhood-mainnet`) || Path(`/robinhood-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.robinhood-mainnet-nitro-pruned-pebble-path.rule=Path(`/robinhood-mainnet`) || Path(`/robinhood-mainnet/`)}
+      - traefik.http.routers.robinhood-mainnet-nitro-pruned-pebble-path.middlewares=robinhood-mainnet-nitro-pruned-pebble-path-stripprefix, ipallowlist
+
+volumes:
+  robinhood-mainnet-nitro-pruned-pebble-path:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: robinhood
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/robinhood-testnet-nitro-archive-pebble-hash.yml

@@ -0,0 +1,143 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/robinhood-testnet-nitro-archive-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/robinhood-testnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  robinhood-testnet-archive:
+    image: ${ROBINHOOD_NITRO_IMAGE:-offchainlabs/nitro-node}:${ROBINHOOD_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${ROBINHOOD_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ROBINHOOD_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ROBINHOOD_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ROBINHOOD_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.testnet.chain.robinhood.com
+      - --execution.rpc.filter-log-cache-size=${ROBINHOOD_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_FILTER_LOG_CACHE:-32}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.feed.input.url=wss://feed.testnet.chain.robinhood.com
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/robinhood-testnet-archive
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ROBINHOOD_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_DATA:-robinhood-testnet-nitro-archive-pebble-hash}:/root/.arbitrum
+      - ./arb/robinhood/testnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.robinhood-testnet-nitro-archive-pebble-hash-stripprefix.stripprefix.prefixes=/robinhood-testnet-archive
+      - traefik.http.services.robinhood-testnet-nitro-archive-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.robinhood-testnet-nitro-archive-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.robinhood-testnet-nitro-archive-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.robinhood-testnet-nitro-archive-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/robinhood-testnet-archive`) || Path(`/robinhood-testnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.robinhood-testnet-nitro-archive-pebble-hash.rule=Path(`/robinhood-testnet-archive`) || Path(`/robinhood-testnet-archive/`)}
+      - traefik.http.routers.robinhood-testnet-nitro-archive-pebble-hash.middlewares=robinhood-testnet-nitro-archive-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  robinhood-testnet-nitro-archive-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: robinhood-testnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/robinhood-testnet-nitro-pruned-pebble-path.yml

@@ -0,0 +1,144 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/robinhood-testnet-nitro-pruned-pebble-path.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/robinhood-testnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  robinhood-testnet:
+    image: ${ROBINHOOD_NITRO_IMAGE:-offchainlabs/nitro-node}:${ROBINHOOD_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${ROBINHOOD_TESTNET_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ROBINHOOD_TESTNET_NITRO_PRUNED_PEBBLE_PATH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ROBINHOOD_TESTNET_NITRO_PRUNED_PEBBLE_PATH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.state-scheme=path
+      - --execution.caching.trie-clean-cache=${ROBINHOOD_TESTNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ROBINHOOD_TESTNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.testnet.chain.robinhood.com
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.feed.input.url=wss://feed.testnet.chain.robinhood.com
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/robinhood-testnet
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ROBINHOOD_TESTNET_NITRO_PRUNED_PEBBLE_PATH_DATA:-robinhood-testnet-nitro-pruned-pebble-path}:/root/.arbitrum
+      - ./arb/robinhood/testnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.robinhood-testnet-nitro-pruned-pebble-path-stripprefix.stripprefix.prefixes=/robinhood-testnet
+      - traefik.http.services.robinhood-testnet-nitro-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.robinhood-testnet-nitro-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.robinhood-testnet-nitro-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.robinhood-testnet-nitro-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/robinhood-testnet`) || Path(`/robinhood-testnet/`))}
+      - ${NO_SSL:+traefik.http.routers.robinhood-testnet-nitro-pruned-pebble-path.rule=Path(`/robinhood-testnet`) || Path(`/robinhood-testnet/`)}
+      - traefik.http.routers.robinhood-testnet-nitro-pruned-pebble-path.middlewares=robinhood-testnet-nitro-pruned-pebble-path-stripprefix, ipallowlist
+
+volumes:
+  robinhood-testnet-nitro-pruned-pebble-path:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: robinhood-testnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/opencampuscodex/arbitrum-sepolia/baseConfig.json

@@ -0,0 +1,6 @@
+{
+  "chain": {
+    "info-json": "[{\"chain-id\":656476,\"parent-chain-id\":421614,\"parent-chain-is-arbitrum\":true,\"chain-name\":\"Codex\",\"chain-config\":{\"homesteadBlock\":0,\"daoForkBlock\":null,\"daoForkSupport\":true,\"eip150Block\":0,\"eip150Hash\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"eip155Block\":0,\"eip158Block\":0,\"byzantiumBlock\":0,\"constantinopleBlock\":0,\"petersburgBlock\":0,\"istanbulBlock\":0,\"muirGlacierBlock\":0,\"berlinBlock\":0,\"londonBlock\":0,\"clique\":{\"period\":0,\"epoch\":0},\"arbitrum\":{\"EnableArbOS\":true,\"AllowDebugPrecompiles\":false,\"DataAvailabilityCommittee\":true,\"InitialArbOSVersion\":20,\"GenesisBlockNum\":0,\"MaxCodeSize\":24576,\"MaxInitCodeSize\":49152,\"InitialChainOwner\":\"0xF46B08D9E85df74b6f24Ad85A6a655c02857D5b8\"},\"chainId\":656476},\"rollup\":{\"bridge\":\"0xbf3D64671154D1FB0b27Cb1decbE1094d7016448\",\"inbox\":\"0x67F231eDC83a66556148673863e73D705422A678\",\"sequencer-inbox\":\"0xd5131c1924f080D45CA3Ae97262c0015F675004b\",\"rollup\":\"0x0A94003d3482128c89395aBd94a41DA8eeBB59f7\",\"validator-utils\":\"0xB11EB62DD2B352886A4530A9106fE427844D515f\",\"validator-wallet-creator\":\"0xEb9885B6c0e117D339F47585cC06a2765AaE2E0b\",\"deployed-at\":41549214}}]",
+    "name": "Codex"
+  }
+}

arb/playblock/arbitrum-nova/baseConfig.json

@@ -0,0 +1,6 @@
+{
+  "chain": {
+    "info-json": "[{\"chain-id\":1829,\"parent-chain-id\":42170,\"parent-chain-is-arbitrum\":true,\"chain-name\":\"Playblock\",\"chain-config\":{\"homesteadBlock\":0,\"daoForkBlock\":null,\"daoForkSupport\":true,\"eip150Block\":0,\"eip150Hash\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"eip155Block\":0,\"eip158Block\":0,\"byzantiumBlock\":0,\"constantinopleBlock\":0,\"petersburgBlock\":0,\"istanbulBlock\":0,\"muirGlacierBlock\":0,\"berlinBlock\":0,\"londonBlock\":0,\"clique\":{\"period\":0,\"epoch\":0},\"arbitrum\":{\"EnableArbOS\":true,\"AllowDebugPrecompiles\":false,\"DataAvailabilityCommittee\":true,\"InitialArbOSVersion\":11,\"GenesisBlockNum\":0,\"MaxCodeSize\":24576,\"MaxInitCodeSize\":49152,\"InitialChainOwner\":\"0x10Fe3cb853F7ef551E1598d91436e95d41Aea45a\"},\"chainId\":1829},\"rollup\":{\"bridge\":\"0xD4FE46D2533E7d03382ac6cACF0547F336e59DC0\",\"inbox\":\"0xFF55fB76F5671dD9eB6c62EffF8D693Bb161a3ad\",\"sequencer-inbox\":\"0xe347C1223381b9Dcd6c0F61cf81c90175A7Bae77\",\"rollup\":\"0x04ea347cC6A258A7F65D67aFb60B1d487062A1d0\",\"validator-utils\":\"0x6c21303F5986180B1394d2C89f3e883890E2867b\",\"validator-wallet-creator\":\"0x2b0E04Dc90e3fA58165CB41E2834B44A56E766aF\",\"deployed-at\":55663578}}]",
+    "name": "Playblock"
+  }
+}

arb/plume/mainnet/baseConfig.json

@@ -0,0 +1,5 @@
+{
+    "chain": {
+      "info-json": "[{\"chain-id\":98866,\"parent-chain-id\":1,\"chain-name\":\"conduit-orbit-deployer\",\"chain-config\":{\"chainId\":98866,\"homesteadBlock\":0,\"daoForkBlock\":null,\"daoForkSupport\":true,\"eip150Block\":0,\"eip150Hash\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"eip155Block\":0,\"eip158Block\":0,\"byzantiumBlock\":0,\"constantinopleBlock\":0,\"petersburgBlock\":0,\"istanbulBlock\":0,\"muirGlacierBlock\":0,\"berlinBlock\":0,\"londonBlock\":0,\"clique\":{\"period\":0,\"epoch\":0},\"arbitrum\":{\"EnableArbOS\":true,\"AllowDebugPrecompiles\":false,\"DataAvailabilityCommittee\":true,\"InitialArbOSVersion\":32,\"InitialChainOwner\":\"0x5Ec32984332eaB190cA431545664320259D755d8\",\"GenesisBlockNum\":0}},\"rollup\":{\"bridge\":\"0x35381f63091926750F43b2A7401B083263aDEF83\",\"inbox\":\"0x943fc691242291B74B105e8D19bd9E5DC2fcBa1D\",\"sequencer-inbox\":\"0x85eC1b9138a8b9659A51e2b51bb0861901040b59\",\"rollup\":\"0x35c60Cc77b0A8bf6F938B11bd3E9D319a876c2aC\",\"validator-utils\":\"0x84eA2523b271029FFAeB58fc6E6F1435a280db44\",\"validator-wallet-creator\":\"0x0A5eC2286bB15893d5b8f320aAbc823B2186BA09\",\"deployed-at\":21887008}}]"
+    }
+}

arb/real/mainnet/baseConfig.json

@@ -0,0 +1,6 @@
+{
+  "chain": {
+    "info-json": "[{\"chain-id\":111188,\"parent-chain-id\":1,\"parent-chain-is-arbitrum\":false,\"chain-name\":\"real\",\"chain-config\":{\"homesteadBlock\":0,\"daoForkBlock\":null,\"daoForkSupport\":true,\"eip150Block\":0,\"eip150Hash\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"eip155Block\":0,\"eip158Block\":0,\"byzantiumBlock\":0,\"constantinopleBlock\":0,\"petersburgBlock\":0,\"istanbulBlock\":0,\"muirGlacierBlock\":0,\"berlinBlock\":0,\"londonBlock\":0,\"clique\":{\"period\":0,\"epoch\":0},\"arbitrum\":{\"EnableArbOS\":true,\"AllowDebugPrecompiles\":false,\"DataAvailabilityCommittee\":true,\"InitialArbOSVersion\":11,\"GenesisBlockNum\":0,\"MaxCodeSize\":24576,\"MaxInitCodeSize\":49152,\"InitialChainOwner\":\"0xbB0385FebfD25E01527617938129A34bD497331e\"},\"chainId\":111188},\"rollup\":{\"bridge\":\"0x39D2EEcC8B55f46aE64789E2494dE777cDDeED03\",\"inbox\":\"0xf538671ddd60eE54BdD6FBb0E309c491A7A2df11\",\"sequencer-inbox\":\"0x51C4a227D59E49E26Ea07D8e4E9Af163da4c87A0\",\"rollup\":\"0xc4F7B37bE2bBbcF07373F28c61b1A259dfe49d2a\",\"validator-utils\":\"0x2b0E04Dc90e3fA58165CB41E2834B44A56E766aF\",\"validator-wallet-creator\":\"0x9CAd81628aB7D8e239F1A5B497313341578c5F71\",\"deployed-at\":19446518}}]",
+    "name": "real"
+  }
+}

arb/robinhood/mainnet/baseConfig.json

@@ -0,0 +1,8 @@
+{
+  "chain": {
+    "info-json": "[{\"chain-id\":4663,\"parent-chain-id\":1,\"parent-chain-is-arbitrum\":false,\"chain-name\":\"robinhood\",\"chain-config\":{\"chainId\":4663,\"homesteadBlock\":0,\"daoForkBlock\":null,\"daoForkSupport\":true,\"eip150Block\":0,\"eip150Hash\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"eip155Block\":0,\"eip158Block\":0,\"byzantiumBlock\":0,\"constantinopleBlock\":0,\"petersburgBlock\":0,\"istanbulBlock\":0,\"muirGlacierBlock\":0,\"berlinBlock\":0,\"londonBlock\":0,\"clique\":{\"period\":0,\"epoch\":0},\"arbitrum\":{\"EnableArbOS\":true,\"AllowDebugPrecompiles\":false,\"DataAvailabilityCommittee\":false,\"InitialArbOSVersion\":51,\"InitialChainOwner\":\"0xc8451c5DE260E7ea1b879e7994967077e71230Ca\",\"GenesisBlockNum\":0,\"MaxCodeSize\":98304,\"MaxInitCodeSize\":196608}},\"rollup\":{\"bridge\":\"0xDf8755334ce7A73cCF6b581C02eA649AE3E864b3\",\"inbox\":\"0x1A07cc4BD17E0118BdB54D70990D2158AbAD7a2D\",\"sequencer-inbox\":\"0xBd0D173EEb87D57A09521c24388a12789F33ba96\",\"rollup\":\"0x23A19d23e89166adedbDcB432518AB01e4272D94\",\"validator-wallet-creator\":\"0xB7FE37712e46F28C8f22Ec4bAA33A09fb8B52BD0\",\"stake-token\":\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"deployed-at\":24994238}}]"
+  },
+  "init": {
+    "genesis-json-file": "/config/robinhood-genesis.json"
+  }
+}

arb/robinhood/testnet/baseConfig.json

@@ -0,0 +1,5 @@
+{
+  "chain": {
+    "info-json": "[{\"chain-id\":46630,\"parent-chain-id\":11155111,\"parent-chain-is-arbitrum\":false,\"chain-name\":\"Robinhood Chain Sepolia\",\"chain-config\":{\"chainId\":46630,\"homesteadBlock\":0,\"daoForkBlock\":null,\"daoForkSupport\":true,\"eip150Block\":0,\"eip150Hash\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"eip155Block\":0,\"eip158Block\":0,\"byzantiumBlock\":0,\"constantinopleBlock\":0,\"petersburgBlock\":0,\"istanbulBlock\":0,\"muirGlacierBlock\":0,\"berlinBlock\":0,\"londonBlock\":0,\"clique\":{\"period\":0,\"epoch\":0},\"arbitrum\":{\"EnableArbOS\":true,\"AllowDebugPrecompiles\":false,\"DataAvailabilityCommittee\":false,\"InitialArbOSVersion\":51,\"InitialChainOwner\":\"0x7131b1c28Df46d845Ee044f2f79AC19Ba14526a8\",\"GenesisBlockNum\":0,\"MaxCodeSize\":98304,\"MaxInitCodeSize\":196608}},\"rollup\":{\"bridge\":\"0x96295BDad104eaD97cC08797b3dC68efF59CcF30\",\"inbox\":\"0xF2939afA86F6f933A3CE17fCAB007907B6b0B7a4\",\"sequencer-inbox\":\"0xA0D9dB3DC9791D54b5183C1C1866eFe1eCA7D414\",\"rollup\":\"0xdc5F8E399DBd8a9F5F87AeC4C23Beb12431b386D\",\"validator-utils\":\"0x0000000000000000000000000000000000000000\",\"validator-wallet-creator\":\"0xB7FE37712e46F28C8f22Ec4bAA33A09fb8B52BD0\",\"stake-token\":\"0x7b79995e5f793A07Bc00c21412e50Ecae098E7f9\",\"deployed-at\":10204516}}]"
+  }
+}

arbitrum-one-mainnet-arbnode-archive-trace.yml

@@ -0,0 +1,45 @@
+services:
+  arbitrum-classic:
+    image: 'offchainlabs/arb-node:v1.4.5-e97c1a4'
+    stop_grace_period: 30s
+    user: root
+    volumes:
+      - ${ARBITRUM_ONE_MAINNET_ARBNODE_ARCHIVE_TRACE_DATA:-arbitrum-one-mainnet-arbnode-archive-trace}:/data
+      - ./arbitrum/classic-entrypoint.sh:/entrypoint.sh
+    expose:
+      - 8547
+      - 8548
+    entrypoint: ["/home/user/go/bin/arb-node"]
+    command: 
+        - --l1.url=http://eth.drpc.org
+        - --core.checkpoint-gas-frequency=156250000
+        - --node.rpc.enable-l1-calls
+        - --node.cache.allow-slow-lookup
+        - --node.rpc.tracing.enable
+        - --node.rpc.addr=0.0.0.0
+        - --node.rpc.port=8547        
+        - --node.rpc.tracing.namespace=trace
+        - --node.chain-id=42161
+        - --node.ws.addr=0.0.0.0
+        - --node.ws.port=8548
+        - --metrics
+        - --metrics-server.addr=0.0.0.0
+        - --metrics-server.port=7070
+        - --l2.disable-upstream
+        - --persistent.chain=/data/datadir/
+        - --persistent.global-config=/data/
+    restart: unless-stopped         
+    labels:                     
+      - "traefik.enable=true"
+      - "traefik.http.middlewares.arbitrum-one-mainnet-arbnode-archive-trace-stripprefix.stripprefix.prefixes=/arbitrum-classic"                      
+      - "traefik.http.services.arbitrum-one-mainnet-arbnode-archive-trace.loadbalancer.server.port=8547"
+      - "${NO_SSL:-traefik.http.routers.arbitrum-one-mainnet-arbnode-archive-trace.entrypoints=websecure}"                           
+      - "${NO_SSL:-traefik.http.routers.arbitrum-one-mainnet-arbnode-archive-trace.tls.certresolver=myresolver}"                                        
+      - "${NO_SSL:-traefik.http.routers.arbitrum-one-mainnet-arbnode-archive-trace.rule=Host(`$DOMAIN`) && PathPrefix(`/arbitrum-classic`)}"
+      - "${NO_SSL:+traefik.http.routers.arbitrum-one-mainnet-arbnode-archive-trace.rule=PathPrefix(`/arbitrum-classic`)}"      
+      - "traefik.http.routers.arbitrum-one-mainnet-arbnode-archive-trace.middlewares=arbitrum-one-mainnet-arbnode-archive-trace-stripprefix, ipwhitelist"                           
+    networks:                                                                                         
+      - chains
+      
+volumes:  
+    arbitrum-one-mainnet-arbnode-archive-trace:

arc/reth/arc-mainnet-reth-archive-trace.yml

@@ -0,0 +1,183 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arc/reth/arc-mainnet-reth-archive-trace.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arc-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arc-mainnet-archive-consensus-init:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-v0.7.3}
+    user: 0:0
+    entrypoint: [/usr/local/bin/arc-node-consensus, init]
+    command:
+      - --home=/data/consensus
+    restart: no
+    networks:
+      - chains
+    volumes:
+      - ${ARC_MAINNET_RETH_ARCHIVE_TRACE_CONSENSUS_DATA:-arc-mainnet-reth-archive-trace-consensus}:/data/consensus
+    logging: *logging-defaults
+
+  arc-mainnet-archive-sockets-init:
+    image: debian:bookworm-slim
+    entrypoint: [/bin/sh, -c]
+    command: [chown 999:999 /sockets]
+    restart: no
+    depends_on:
+      arc-mainnet-archive-consensus-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - arc-mainnet-reth-archive-trace-sockets:/sockets
+    logging: *logging-defaults
+
+  arc-mainnet-archive:
+    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_MAINNET_RETH_VERSION:-v0.7.3}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: 0:0
+    expose:
+      - 8545
+      - 9001
+    entrypoint: [/usr/local/bin/arc-node-execution, node]
+    command:
+      - --auth-ipc
+      - --auth-ipc.path=/sockets/auth.ipc
+      - --chain=arc-mainnet
+      - --datadir=/data/execution
+      - --disable-discovery
+      - --enable-arc-rpc
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,txpool,trace,debug
+      - --http.port=8545
+      - --ipcpath=/sockets/reth.ipc
+      - --log.file.directory=/data/execution/logs
+      - --metrics=0.0.0.0:9001
+      - --rpc.forwarder=https://rpc.arc.network/
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-mainnet-archive-sockets-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - ${ARC_MAINNET_RETH_ARCHIVE_TRACE_EXECUTION_DATA:-arc-mainnet-reth-archive-trace-execution}:/data/execution
+      - /slowdisk:/slowdisk
+      - arc-mainnet-reth-archive-trace-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=9001
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.arc-mainnet-reth-archive-trace-stripprefix.stripprefix.prefixes=/arc-mainnet-archive
+      - traefik.http.services.arc-mainnet-reth-archive-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arc-mainnet-reth-archive-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arc-mainnet-reth-archive-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arc-mainnet-reth-archive-trace.rule=Host(`$DOMAIN`) && (Path(`/arc-mainnet-archive`) || Path(`/arc-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.arc-mainnet-reth-archive-trace.rule=Path(`/arc-mainnet-archive`) || Path(`/arc-mainnet-archive/`)}
+      - traefik.http.routers.arc-mainnet-reth-archive-trace.middlewares=arc-mainnet-reth-archive-trace-stripprefix, ipallowlist
+    shm_size: 2gb
+
+  arc-mainnet-archive-node:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-v0.7.3}
+    user: 0:0
+    expose:
+      - 31000
+      - 29000
+    entrypoint: [/usr/local/bin/arc-node-consensus, start]
+    command:
+      - --eth-socket=/sockets/reth.ipc
+      - --execution-persistence-backpressure
+      - --execution-persistence-backpressure-threshold=200
+      - --execution-socket=/sockets/auth.ipc
+      - --follow
+      - --follow.endpoint=https://rpc.arc.network,wss=rpc.arc.network
+      - --follow.endpoint=https://arc.drpc.org,wss=arc.drpc.org
+      - --full
+      - --home=/data/consensus
+      - --metrics=0.0.0.0:29000
+      - --rpc.addr=0.0.0.0:31000
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-mainnet-archive-consensus-init:
+        condition: service_completed_successfully
+      arc-mainnet-archive:
+        condition: service_started
+        restart: true
+    networks:
+      - chains
+    volumes:
+      - ${ARC_MAINNET_RETH_ARCHIVE_TRACE_CONSENSUS_DATA:-arc-mainnet-reth-archive-trace-consensus}:/data/consensus
+      - arc-mainnet-reth-archive-trace-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=29000
+
+volumes:
+  arc-mainnet-reth-archive-trace-consensus:
+  arc-mainnet-reth-archive-trace-execution:
+  arc-mainnet-reth-archive-trace-sockets:
+
+x-ephemeral-volumes:
+  - arc-mainnet-reth-archive-trace-sockets
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+    chain: arc
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      enabled:
+        - name: txpool_content
+...

arc/reth/arc-mainnet-reth-pruned-trace.yml

@@ -0,0 +1,184 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arc/reth/arc-mainnet-reth-pruned-trace.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arc-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arc-mainnet-consensus-init:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-v0.7.3}
+    user: 0:0
+    entrypoint: [/usr/local/bin/arc-node-consensus, init]
+    command:
+      - --home=/data/consensus
+    restart: no
+    networks:
+      - chains
+    volumes:
+      - ${ARC_MAINNET_RETH_PRUNED_TRACE_CONSENSUS_DATA:-arc-mainnet-reth-pruned-trace-consensus}:/data/consensus
+    logging: *logging-defaults
+
+  arc-mainnet-sockets-init:
+    image: debian:bookworm-slim
+    entrypoint: [/bin/sh, -c]
+    command: [chown 999:999 /sockets]
+    restart: no
+    depends_on:
+      arc-mainnet-consensus-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - arc-mainnet-reth-pruned-trace-sockets:/sockets
+    logging: *logging-defaults
+
+  arc-mainnet:
+    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_MAINNET_RETH_VERSION:-v0.7.3}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: 0:0
+    expose:
+      - 8545
+      - 9001
+    entrypoint: [/usr/local/bin/arc-node-execution, node]
+    command:
+      - --auth-ipc
+      - --auth-ipc.path=/sockets/auth.ipc
+      - --chain=arc-mainnet
+      - --datadir=/data/execution
+      - --disable-discovery
+      - --enable-arc-rpc
+      - --full
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,txpool,trace,debug
+      - --http.port=8545
+      - --ipcpath=/sockets/reth.ipc
+      - --log.file.directory=/data/execution/logs
+      - --metrics=0.0.0.0:9001
+      - --rpc.forwarder=https://rpc.arc.network/
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-mainnet-sockets-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - ${ARC_MAINNET_RETH_PRUNED_TRACE_EXECUTION_DATA:-arc-mainnet-reth-pruned-trace-execution}:/data/execution
+      - /slowdisk:/slowdisk
+      - arc-mainnet-reth-pruned-trace-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=9001
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.arc-mainnet-reth-pruned-trace-stripprefix.stripprefix.prefixes=/arc-mainnet
+      - traefik.http.services.arc-mainnet-reth-pruned-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arc-mainnet-reth-pruned-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arc-mainnet-reth-pruned-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arc-mainnet-reth-pruned-trace.rule=Host(`$DOMAIN`) && (Path(`/arc-mainnet`) || Path(`/arc-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.arc-mainnet-reth-pruned-trace.rule=Path(`/arc-mainnet`) || Path(`/arc-mainnet/`)}
+      - traefik.http.routers.arc-mainnet-reth-pruned-trace.middlewares=arc-mainnet-reth-pruned-trace-stripprefix, ipallowlist
+    shm_size: 2gb
+
+  arc-mainnet-node:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-v0.7.3}
+    user: 0:0
+    expose:
+      - 31000
+      - 29000
+    entrypoint: [/usr/local/bin/arc-node-consensus, start]
+    command:
+      - --eth-socket=/sockets/reth.ipc
+      - --execution-persistence-backpressure
+      - --execution-persistence-backpressure-threshold=200
+      - --execution-socket=/sockets/auth.ipc
+      - --follow
+      - --follow.endpoint=https://rpc.arc.network,wss=rpc.arc.network
+      - --follow.endpoint=https://arc.drpc.org,wss=arc.drpc.org
+      - --full
+      - --home=/data/consensus
+      - --metrics=0.0.0.0:29000
+      - --rpc.addr=0.0.0.0:31000
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-mainnet-consensus-init:
+        condition: service_completed_successfully
+      arc-mainnet:
+        condition: service_started
+        restart: true
+    networks:
+      - chains
+    volumes:
+      - ${ARC_MAINNET_RETH_PRUNED_TRACE_CONSENSUS_DATA:-arc-mainnet-reth-pruned-trace-consensus}:/data/consensus
+      - arc-mainnet-reth-pruned-trace-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=29000
+
+volumes:
+  arc-mainnet-reth-pruned-trace-consensus:
+  arc-mainnet-reth-pruned-trace-execution:
+  arc-mainnet-reth-pruned-trace-sockets:
+
+x-ephemeral-volumes:
+  - arc-mainnet-reth-pruned-trace-sockets
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+    chain: arc
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      enabled:
+        - name: txpool_content
+...

arc/reth/arc-testnet-reth-archive-trace.yml

@@ -0,0 +1,183 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arc/reth/arc-testnet-reth-archive-trace.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arc-testnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arc-testnet-archive-consensus-init:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-v0.7.3}
+    user: 0:0
+    entrypoint: [/usr/local/bin/arc-node-consensus, init]
+    command:
+      - --home=/data/consensus
+    restart: no
+    networks:
+      - chains
+    volumes:
+      - ${ARC_TESTNET_RETH_ARCHIVE_TRACE_CONSENSUS_DATA:-arc-testnet-reth-archive-trace-consensus}:/data/consensus
+    logging: *logging-defaults
+
+  arc-testnet-archive-sockets-init:
+    image: debian:bookworm-slim
+    entrypoint: [/bin/sh, -c]
+    command: [chown 999:999 /sockets]
+    restart: no
+    depends_on:
+      arc-testnet-archive-consensus-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - arc-testnet-reth-archive-trace-sockets:/sockets
+    logging: *logging-defaults
+
+  arc-testnet-archive:
+    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_TESTNET_RETH_VERSION:-v0.7.3}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: 0:0
+    expose:
+      - 8545
+      - 9001
+    entrypoint: [/usr/local/bin/arc-node-execution, node]
+    command:
+      - --auth-ipc
+      - --auth-ipc.path=/sockets/auth.ipc
+      - --chain=arc-testnet
+      - --datadir=/data/execution
+      - --disable-discovery
+      - --enable-arc-rpc
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,txpool,trace,debug
+      - --http.port=8545
+      - --ipcpath=/sockets/reth.ipc
+      - --log.file.directory=/data/execution/logs
+      - --metrics=0.0.0.0:9001
+      - --rpc.forwarder=https://rpc.quicknode.testnet.arc.network/
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-testnet-archive-sockets-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - ${ARC_TESTNET_RETH_ARCHIVE_TRACE_EXECUTION_DATA:-arc-testnet-reth-archive-trace-execution}:/data/execution
+      - /slowdisk:/slowdisk
+      - arc-testnet-reth-archive-trace-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=9001
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.arc-testnet-reth-archive-trace-stripprefix.stripprefix.prefixes=/arc-testnet-archive
+      - traefik.http.services.arc-testnet-reth-archive-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-reth-archive-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-reth-archive-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-reth-archive-trace.rule=Host(`$DOMAIN`) && (Path(`/arc-testnet-archive`) || Path(`/arc-testnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.arc-testnet-reth-archive-trace.rule=Path(`/arc-testnet-archive`) || Path(`/arc-testnet-archive/`)}
+      - traefik.http.routers.arc-testnet-reth-archive-trace.middlewares=arc-testnet-reth-archive-trace-stripprefix, ipallowlist
+    shm_size: 2gb
+
+  arc-testnet-archive-node:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-v0.7.3}
+    user: 0:0
+    expose:
+      - 31000
+      - 29000
+    entrypoint: [/usr/local/bin/arc-node-consensus, start]
+    command:
+      - --eth-socket=/sockets/reth.ipc
+      - --execution-persistence-backpressure
+      - --execution-persistence-backpressure-threshold=200
+      - --execution-socket=/sockets/auth.ipc
+      - --follow
+      - --follow.endpoint=https://rpc.quicknode.testnet.arc.network,wss=rpc.quicknode.testnet.arc.network
+      - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
+      - --full
+      - --home=/data/consensus
+      - --metrics=0.0.0.0:29000
+      - --rpc.addr=0.0.0.0:31000
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-testnet-archive-consensus-init:
+        condition: service_completed_successfully
+      arc-testnet-archive:
+        condition: service_started
+        restart: true
+    networks:
+      - chains
+    volumes:
+      - ${ARC_TESTNET_RETH_ARCHIVE_TRACE_CONSENSUS_DATA:-arc-testnet-reth-archive-trace-consensus}:/data/consensus
+      - arc-testnet-reth-archive-trace-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=29000
+
+volumes:
+  arc-testnet-reth-archive-trace-consensus:
+  arc-testnet-reth-archive-trace-execution:
+  arc-testnet-reth-archive-trace-sockets:
+
+x-ephemeral-volumes:
+  - arc-testnet-reth-archive-trace-sockets
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+    chain: arc-testnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      enabled:
+        - name: txpool_content
+...

arc/reth/arc-testnet-reth-pruned-trace.yml

@@ -0,0 +1,184 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arc/reth/arc-testnet-reth-pruned-trace.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arc-testnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arc-testnet-consensus-init:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-v0.7.3}
+    user: 0:0
+    entrypoint: [/usr/local/bin/arc-node-consensus, init]
+    command:
+      - --home=/data/consensus
+    restart: no
+    networks:
+      - chains
+    volumes:
+      - ${ARC_TESTNET_RETH_PRUNED_TRACE_CONSENSUS_DATA:-arc-testnet-reth-pruned-trace-consensus}:/data/consensus
+    logging: *logging-defaults
+
+  arc-testnet-sockets-init:
+    image: debian:bookworm-slim
+    entrypoint: [/bin/sh, -c]
+    command: [chown 999:999 /sockets]
+    restart: no
+    depends_on:
+      arc-testnet-consensus-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - arc-testnet-reth-pruned-trace-sockets:/sockets
+    logging: *logging-defaults
+
+  arc-testnet:
+    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_TESTNET_RETH_VERSION:-v0.7.3}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: 0:0
+    expose:
+      - 8545
+      - 9001
+    entrypoint: [/usr/local/bin/arc-node-execution, node]
+    command:
+      - --auth-ipc
+      - --auth-ipc.path=/sockets/auth.ipc
+      - --chain=arc-testnet
+      - --datadir=/data/execution
+      - --disable-discovery
+      - --enable-arc-rpc
+      - --full
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,txpool,trace,debug
+      - --http.port=8545
+      - --ipcpath=/sockets/reth.ipc
+      - --log.file.directory=/data/execution/logs
+      - --metrics=0.0.0.0:9001
+      - --rpc.forwarder=https://rpc.quicknode.testnet.arc.network/
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-testnet-sockets-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - ${ARC_TESTNET_RETH_PRUNED_TRACE_EXECUTION_DATA:-arc-testnet-reth-pruned-trace-execution}:/data/execution
+      - /slowdisk:/slowdisk
+      - arc-testnet-reth-pruned-trace-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=9001
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.arc-testnet-reth-pruned-trace-stripprefix.stripprefix.prefixes=/arc-testnet
+      - traefik.http.services.arc-testnet-reth-pruned-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-reth-pruned-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-reth-pruned-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-reth-pruned-trace.rule=Host(`$DOMAIN`) && (Path(`/arc-testnet`) || Path(`/arc-testnet/`))}
+      - ${NO_SSL:+traefik.http.routers.arc-testnet-reth-pruned-trace.rule=Path(`/arc-testnet`) || Path(`/arc-testnet/`)}
+      - traefik.http.routers.arc-testnet-reth-pruned-trace.middlewares=arc-testnet-reth-pruned-trace-stripprefix, ipallowlist
+    shm_size: 2gb
+
+  arc-testnet-node:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-v0.7.3}
+    user: 0:0
+    expose:
+      - 31000
+      - 29000
+    entrypoint: [/usr/local/bin/arc-node-consensus, start]
+    command:
+      - --eth-socket=/sockets/reth.ipc
+      - --execution-persistence-backpressure
+      - --execution-persistence-backpressure-threshold=200
+      - --execution-socket=/sockets/auth.ipc
+      - --follow
+      - --follow.endpoint=https://rpc.quicknode.testnet.arc.network,wss=rpc.quicknode.testnet.arc.network
+      - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
+      - --full
+      - --home=/data/consensus
+      - --metrics=0.0.0.0:29000
+      - --rpc.addr=0.0.0.0:31000
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-testnet-consensus-init:
+        condition: service_completed_successfully
+      arc-testnet:
+        condition: service_started
+        restart: true
+    networks:
+      - chains
+    volumes:
+      - ${ARC_TESTNET_RETH_PRUNED_TRACE_CONSENSUS_DATA:-arc-testnet-reth-pruned-trace-consensus}:/data/consensus
+      - arc-testnet-reth-pruned-trace-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=29000
+
+volumes:
+  arc-testnet-reth-pruned-trace-consensus:
+  arc-testnet-reth-pruned-trace-execution:
+  arc-testnet-reth-pruned-trace-sockets:
+
+x-ephemeral-volumes:
+  - arc-testnet-reth-pruned-trace-sockets
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+    chain: arc-testnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      enabled:
+        - name: txpool_content
+...

arc/reth/arc-testnet-reth-pruned.yml

@@ -0,0 +1,184 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arc/reth/arc-testnet-reth-pruned.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arc-testnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arc-testnet-consensus-init:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-v0.7.3}
+    user: 0:0
+    entrypoint: [/usr/local/bin/arc-node-consensus, init]
+    command:
+      - --home=/data/consensus
+    restart: no
+    networks:
+      - chains
+    volumes:
+      - ${ARC_TESTNET_RETH_PRUNED_CONSENSUS_DATA:-arc-testnet-reth-pruned-consensus}:/data/consensus
+    logging: *logging-defaults
+
+  arc-testnet-sockets-init:
+    image: debian:bookworm-slim
+    entrypoint: [/bin/sh, -c]
+    command: [chown 999:999 /sockets]
+    restart: no
+    depends_on:
+      arc-testnet-consensus-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - arc-testnet-reth-pruned-sockets:/sockets
+    logging: *logging-defaults
+
+  arc-testnet:
+    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_TESTNET_RETH_VERSION:-v0.7.3}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: 0:0
+    expose:
+      - 8545
+      - 9001
+    entrypoint: [/usr/local/bin/arc-node-execution, node]
+    command:
+      - --auth-ipc
+      - --auth-ipc.path=/sockets/auth.ipc
+      - --chain=arc-testnet
+      - --datadir=/data/execution
+      - --disable-discovery
+      - --enable-arc-rpc
+      - --full
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,txpool,trace,debug
+      - --http.port=8545
+      - --ipcpath=/sockets/reth.ipc
+      - --log.file.directory=/data/execution/logs
+      - --metrics=0.0.0.0:9001
+      - --rpc.forwarder=https://rpc.quicknode.testnet.arc.network/
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-testnet-sockets-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - ${ARC_TESTNET_RETH_PRUNED_EXECUTION_DATA:-arc-testnet-reth-pruned-execution}:/data/execution
+      - /slowdisk:/slowdisk
+      - arc-testnet-reth-pruned-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=9001
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.arc-testnet-reth-pruned-stripprefix.stripprefix.prefixes=/arc-testnet
+      - traefik.http.services.arc-testnet-reth-pruned.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-reth-pruned.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-reth-pruned.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-reth-pruned.rule=Host(`$DOMAIN`) && (Path(`/arc-testnet`) || Path(`/arc-testnet/`))}
+      - ${NO_SSL:+traefik.http.routers.arc-testnet-reth-pruned.rule=Path(`/arc-testnet`) || Path(`/arc-testnet/`)}
+      - traefik.http.routers.arc-testnet-reth-pruned.middlewares=arc-testnet-reth-pruned-stripprefix, ipallowlist
+    shm_size: 2gb
+
+  arc-testnet-node:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-v0.7.3}
+    user: 0:0
+    expose:
+      - 31000
+      - 29000
+    entrypoint: [/usr/local/bin/arc-node-consensus, start]
+    command:
+      - --eth-socket=/sockets/reth.ipc
+      - --execution-persistence-backpressure
+      - --execution-persistence-backpressure-threshold=200
+      - --execution-socket=/sockets/auth.ipc
+      - --follow
+      - --follow.endpoint=https://rpc.quicknode.testnet.arc.network,wss=rpc.quicknode.testnet.arc.network
+      - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
+      - --full
+      - --home=/data/consensus
+      - --metrics=0.0.0.0:29000
+      - --rpc.addr=0.0.0.0:31000
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-testnet-consensus-init:
+        condition: service_completed_successfully
+      arc-testnet:
+        condition: service_started
+        restart: true
+    networks:
+      - chains
+    volumes:
+      - ${ARC_TESTNET_RETH_PRUNED_CONSENSUS_DATA:-arc-testnet-reth-pruned-consensus}:/data/consensus
+      - arc-testnet-reth-pruned-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=29000
+
+volumes:
+  arc-testnet-reth-pruned-consensus:
+  arc-testnet-reth-pruned-execution:
+  arc-testnet-reth-pruned-sockets:
+
+x-ephemeral-volumes:
+  - arc-testnet-reth-pruned-sockets
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+    chain: arc-testnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      enabled:
+        - name: txpool_content
+...

avalanche-mainnet-go-archive.yml

@@ -0,0 +1,51 @@
+services:
+  avalanche-archive-client:
+    image: avaplatform/avalanchego:${AVALANCHEGO_VERSION:-v1.12.2}
+    ulimits:
+      nofile: 1048576
+    expose:
+      - "9650"
+      - "30720"
+    ports:
+      - "30720:30720/tcp"
+      - "30720:30720/udp"
+    volumes:
+      - ${AVALANCHE_MAINNET_GO_ARCHIVE_DATA:-avalanche-mainnet-go-archive}:/root/.avalanchego
+      - ./avalanche/configs/chains/C/archive-config.json:/root/.avalanchego/configs/chains/C/config.json
+    environment:
+      - "IP=${IP}"
+    networks:
+      - chains
+    command: "/avalanchego/build/avalanchego --http-host= --http-allowed-hosts=* --staking-port=30720 --public-ip=$IP"
+    restart: unless-stopped
+
+    
+  avalanche-archive:         
+    restart: unless-stopped           
+    image: nginx
+    depends_on:
+      - avalanche-archive-client
+    expose:  
+      - 80                                                                                            
+    environment:                                                                                      
+      PROXY_HOST: avalanche-archive-client
+      RPC_PORT: 9650
+      RPC_PATH: /ext/bc/C/rpc
+      WS_PORT: 9650
+      WS_PATH: /ext/bc/C/ws
+    networks:               
+      - chains 
+    volumes:               
+      - ./nginx-proxy:/etc/nginx/templates
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.middlewares.avalanche-mainnet-go-archive-stripprefix.stripprefix.prefixes=/avalanche-archive"
+      - "traefik.http.services.avalanche-mainnet-go-archive.loadbalancer.server.port=80"
+      - "${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive.entrypoints=websecure}"
+      - "${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive.tls.certresolver=myresolver}"
+      - "${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive.rule=Host(`$DOMAIN`) && PathPrefix(`/avalanche-archive`)}"
+      - "${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-archive.rule=PathPrefix(`/avalanche-archive`)}"            
+      - "traefik.http.routers.avalanche-mainnet-go-archive.middlewares=avalanche-mainnet-go-archive-stripprefix, ipwhitelist"
+      
+volumes:
+  avalanche-mainnet-go-archive:

avalanche.yml

@@ -1,34 +0,0 @@
-version: '3.1'
-
-services:
-  avalanche:
-    image: avaplatform/avalanchego:v1.7.7
-    expose:
-      - "9650"
-      - "9651"
-    ports:
-      - "9651:9651/tcp"
-      - "9651:9651/udp"
-    volumes:
-      - avalanche:/root/.avalanchego
-      - ./avalanche/configs/chains/C/config.json:/root/.avalanchego/configs/chains/C/config.json
-    networks:
-      - chains
-    command: "/avalanchego/build/avalanchego --http-host="
-    restart: unless-stopped
-    labels:
-      - "traefik.enable=true"
-      - "traefik.http.middlewares.avalanche-replacepath.replacepath.path=/ext/bc/C/rpc"
-      - "traefik.http.middlewares.avalanche-stripprefix.stripprefix.prefixes=/avalanche"
-      - "traefik.http.services.avalanche.loadbalancer.server.port=9650"
-      - "traefik.http.routers.avalanche.entrypoints=websecure"
-      - "traefik.http.routers.avalanche.tls.certresolver=myresolver"
-      - "traefik.http.routers.avalanche.rule=Host(`$DOMAIN`) && PathPrefix(`/avalanche`)"
-      - "traefik.http.routers.avalanche.middlewares=avalanche-stripprefix, avalanche-replacepath, ipwhitelist"
-      - "prometheus-scrape.enabled=true"
-      - "prometheus-scrape.port=9650"
-      - "prometheus-scrape.job_name=avalanche"
-      - "prometheus-scrape.metrics_path=/ext/metrics"
-
-volumes:
-  avalanche:

avalanche/configs/chains/C/config.json

@@ -1,43 +0,0 @@
-{
-    "snowman-api-enabled": false,
-    "coreth-admin-api-enabled": false,
-    "coreth-admin-api-dir": "",
-    "eth-apis": [
-      "public-eth",
-      "public-eth-filter",
-      "net",
-      "web3",
-      "internal-public-eth",
-      "internal-public-blockchain",
-      "internal-public-transaction-pool",
-      "internal-public-account"
-    ],
-    "continuous-profiler-dir": "",
-    "continuous-profiler-frequency": 900000000000,
-    "continuous-profiler-max-files": 5,
-    "rpc-gas-cap": 50000000,
-    "rpc-tx-fee-cap": 100,
-    "preimages-enabled": false,
-    "pruning-enabled": true,
-    "snapshot-async": true,
-    "snapshot-verification-enabled": false,
-    "metrics-enabled": false,
-    "metrics-expensive-enabled": false,
-    "local-txs-enabled": false,
-    "api-max-duration": 0,
-    "ws-cpu-refill-rate": 0,
-    "ws-cpu-max-stored": 0,
-    "api-max-blocks-per-request": 0,
-    "allow-unfinalized-queries": false,
-    "allow-unprotected-txs": false,
-    "keystore-directory": "",
-    "keystore-external-signer": "",
-    "keystore-insecure-unlock-allowed": false,
-    "remote-tx-gossip-only-enabled": false,
-    "tx-regossip-frequency": 60000000000,
-    "tx-regossip-max-size": 15,
-    "log-level": "debug",
-    "offline-pruning-enabled": false,
-    "offline-pruning-bloom-filter-size": 512,
-    "offline-pruning-data-directory": ""
-  }

avalanche/fuji/archive/C/config.json

@@ -0,0 +1,6 @@
+{
+    "state-sync-enabled": false,
+    "pruning-enabled": false,
+    "rpc-gas-cap": 2500000000,
+    "eth-rpc-gas-limit": 2500000000
+}

avalanche/fuji/prune/C/config.json

@@ -0,0 +1,6 @@
+{
+    "rpc-gas-cap": 2500000000,
+    "eth-rpc-gas-limit": 2500000000,
+    "offline-pruning-enabled": true,
+    "offline-pruning-data-directory": "/root/.avalanchego/offline-pruning"
+}

avalanche/fuji/pruned/C/config.json

@@ -0,0 +1,4 @@
+{
+    "rpc-gas-cap": 2500000000,
+    "eth-rpc-gas-limit": 2500000000
+}

avalanche/go/avalanche-fuji-go-archive-leveldb.yml

@@ -0,0 +1,119 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:avalanche/go/avalanche-fuji-go-archive-leveldb.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/avalanche-fuji-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  avalanche-fuji-archive:
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 10046:10046
+      - 10046:10046/udp
+    expose:
+      - 9650
+    entrypoint: [/avalanchego/build/avalanchego]
+    command:
+      - --chain-config-dir=/config/archive
+      - --db-type=leveldb
+      - --http-allowed-hosts=*
+      - --http-host=
+      - --network-id=fuji
+      - --public-ip=${IP}
+      - --staking-port=10046
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${AVALANCHE_FUJI_GO_ARCHIVE_LEVELDB_DATA:-avalanche-fuji-go-archive-leveldb}:/root/.avalanchego
+      - ./avalanche/fuji:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
+      - traefik.enable=true
+      - traefik.http.middlewares.avalanche-fuji-go-archive-leveldb-set-path.replacepath.path=/ext/bc/C/rpc
+      - traefik.http.middlewares.avalanche-fuji-go-archive-leveldb-stripprefix.stripprefix.prefixes=/avalanche-fuji-archive
+      - traefik.http.services.avalanche-fuji-go-archive-leveldb.loadbalancer.server.port=9650
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji-archive`) || Path(`/avalanche-fuji-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-archive-leveldb.rule=Path(`/avalanche-fuji-archive`) || Path(`/avalanche-fuji-archive/`)}
+      - traefik.http.routers.avalanche-fuji-go-archive-leveldb.middlewares=avalanche-fuji-go-archive-leveldb-stripprefix, avalanche-fuji-go-archive-leveldb-set-path, ipallowlist
+      - traefik.http.routers.avalanche-fuji-go-archive-leveldb.priority=50   # gets any request that is not GET with UPGRADE header
+      - traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.priority=100   # answers GET requests first
+      - traefik.http.middlewares.avalanche-fuji-go-archive-leveldb-set-ws-path.replacepath.path=/ext/bc/C/ws
+      - traefik.http.services.avalanche-fuji-go-archive-leveldb-ws.loadbalancer.server.port=9650
+      - traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.service=avalanche-fuji-go-archive-leveldb-ws
+      - traefik.http.routers.avalanche-fuji-go-archive-leveldb.service=avalanche-fuji-go-archive-leveldb
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji-archive`) || Path(`/avalanche-fuji-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.rule=(Path(`/avalanche-fuji-archive`) || Path(`/avalanche-fuji-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.middlewares=avalanche-fuji-go-archive-leveldb-stripprefix, avalanche-fuji-go-archive-leveldb-set-ws-path, ipallowlist
+
+volumes:
+  avalanche-fuji-go-archive-leveldb:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: avalanche-fuji
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...

avalanche/go/avalanche-fuji-go-pruned-leveldb.prune.yml

@@ -0,0 +1,119 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:avalanche/go/avalanche-fuji-go-pruned-leveldb.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/avalanche-fuji \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  avalanche-fuji:
+    image: ${AVALANCHE_GO_IMAGE:-avaplatform/avalanchego}:${AVALANCHE_FUJI_GO_VERSION:-v1.14.2}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 12059:12059
+      - 12059:12059/udp
+    expose:
+      - 9650
+    entrypoint: [/bin/sh, -c, mkdir -p /root/.avalanchego/offline-pruning && exec /avalanchego/build/avalanchego "$@", --]
+    command:
+      - --chain-config-dir=/config/prune
+      - --db-type=leveldb
+      - --http-allowed-hosts=*
+      - --http-host=
+      - --network-id=fuji
+      - --public-ip=${IP}
+      - --staking-port=12059
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${AVALANCHE_FUJI_GO_PRUNED_LEVELDB_DATA:-avalanche-fuji-go-pruned-leveldb}:/root/.avalanchego
+      - ./avalanche/fuji:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
+      - traefik.enable=true
+      - traefik.http.middlewares.avalanche-fuji-go-pruned-leveldb-set-path.replacepath.path=/ext/bc/C/rpc
+      - traefik.http.middlewares.avalanche-fuji-go-pruned-leveldb-stripprefix.stripprefix.prefixes=/avalanche-fuji
+      - traefik.http.services.avalanche-fuji-go-pruned-leveldb.loadbalancer.server.port=9650
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`))}
+      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-leveldb.rule=Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)}
+      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb.middlewares=avalanche-fuji-go-pruned-leveldb-stripprefix, avalanche-fuji-go-pruned-leveldb-set-path, ipallowlist
+      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb.priority=50   # gets any request that is not GET with UPGRADE header
+      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.priority=100   # answers GET requests first
+      - traefik.http.middlewares.avalanche-fuji-go-pruned-leveldb-set-ws-path.replacepath.path=/ext/bc/C/ws
+      - traefik.http.services.avalanche-fuji-go-pruned-leveldb-ws.loadbalancer.server.port=9650
+      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.service=avalanche-fuji-go-pruned-leveldb-ws
+      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb.service=avalanche-fuji-go-pruned-leveldb
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
+      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.middlewares=avalanche-fuji-go-pruned-leveldb-stripprefix, avalanche-fuji-go-pruned-leveldb-set-ws-path, ipallowlist
+
+volumes:
+  avalanche-fuji-go-pruned-leveldb:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: avalanche-fuji
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...