zero-gravity: init guard must check the CONFIG volume, not a data-volume proxy

aristotle @ rpc-de-32 crash-looped after its build was fixed: priv_validator_state.json found in /root/.0g. Continuing! Already initialized, continuing! panic: ProvideBlsSigner (node-core/components/signer.go:46): key file does not exist at path: /root/.0g/config/priv_validator_key.json $DATA_DIR and $CONFIG_DIR are SEPARATE docker volumes (<node>_zerog and <node>_config), but the guard tested only $DATA_DIR/priv_validator_state.json — inferring the state of the config volume from a file on the data volume. Worse, the copy order wrote that guard file BEFORE the two key files, so an init interrupted between them left the data volume with the guard and the config volume without the keys. Every later start then took the 'Already initialized' branch, copied nothing, and panicked. Unrecoverable by restarting: the node wedges permanently. aristotle got there via the repeated build failures earlier today. Fix, two parts: - guard on everything 0gchaind needs to boot (both config keys AND the data state file), not one proxy file on the wrong volume; - write the keys FIRST and the guard file LAST, so an interrupted init re-runs on the next start instead of latching into the wedged state. Tested locally against the real 0gchaind binary (aristotle v1.0.6), sandboxed HOME: scenario before after fresh volumes keys created keys created (no regression) wedged (state, no keys) keys MISSING keys created (unwedges) partial (state+node_key) keys MISSING keys created healthy (all present) no re-init no re-init, and a SENTINEL written into priv_validator_key.json survives -> never clobbers an initialized node The 'wedged' row reproduces aristotle's production failure exactly. Note this regenerates node identity on an affected node (node_key.json, priv_validator_key.json). These are RPC nodes that never sign, so a fresh identity is harmless; chain data on the _zerog volume is untouched. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
deploy: regenerate compose from vibe-node main 3c848087f5c8
2026-08-12 19:33:48 +00:00 · 2026-08-12 17:37:46 +00:00 · 2026-08-12 16:53:00 +00:00 · 2026-08-12 11:09:51 +00:00 · 2026-08-12 08:38:04 +00:00 · 2026-08-11 06:21:38 +00:00
101 changed files with 16758 additions and 1154 deletions
--- a/arb/nitro/connext-sepolia-nitro-archive-leveldb-hash.yml
+++ b/arb/nitro/connext-sepolia-nitro-archive-leveldb-hash.yml
@@ -116,7 +116,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain: everclear-sepolia
+    chain:
    method-groups:
      enabled:
        - debug
--- a/arb/nitro/connext-sepolia-nitro-pruned-pebble-path.yml
+++ b/arb/nitro/connext-sepolia-nitro-pruned-pebble-path.yml
@@ -117,7 +117,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain: everclear-sepolia
+    chain:
    method-groups:
      enabled:
        - debug
--- a/arc/reth/arc-mainnet-reth-archive-trace.yml
+++ b/arc/reth/arc-mainnet-reth-archive-trace.yml
@@ -45,7 +45,7 @@ services:
  arc-mainnet-archive-sockets-init:
    image: debian:bookworm-slim
    entrypoint: [/bin/sh, -c]
-    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    command: [chown 999:999 /sockets]
    restart: no
    depends_on:
      arc-mainnet-archive-consensus-init:
@@ -160,6 +160,9 @@ volumes:
  arc-mainnet-reth-archive-trace-execution:
  arc-mainnet-reth-archive-trace-sockets:

+x-ephemeral-volumes:
+  - arc-mainnet-reth-archive-trace-sockets
+
 x-upstreams:
  - id: $${ID}
    labels:
--- a/arc/reth/arc-mainnet-reth-pruned-trace.yml
+++ b/arc/reth/arc-mainnet-reth-pruned-trace.yml
@@ -45,7 +45,7 @@ services:
  arc-mainnet-sockets-init:
    image: debian:bookworm-slim
    entrypoint: [/bin/sh, -c]
-    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    command: [chown 999:999 /sockets]
    restart: no
    depends_on:
      arc-mainnet-consensus-init:
@@ -161,6 +161,9 @@ volumes:
  arc-mainnet-reth-pruned-trace-execution:
  arc-mainnet-reth-pruned-trace-sockets:

+x-ephemeral-volumes:
+  - arc-mainnet-reth-pruned-trace-sockets
+
 x-upstreams:
  - id: $${ID}
    labels:
--- a/arc/reth/arc-testnet-reth-archive-trace.yml
+++ b/arc/reth/arc-testnet-reth-archive-trace.yml
@@ -45,7 +45,7 @@ services:
  arc-testnet-archive-sockets-init:
    image: debian:bookworm-slim
    entrypoint: [/bin/sh, -c]
-    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    command: [chown 999:999 /sockets]
    restart: no
    depends_on:
      arc-testnet-archive-consensus-init:
@@ -160,6 +160,9 @@ volumes:
  arc-testnet-reth-archive-trace-execution:
  arc-testnet-reth-archive-trace-sockets:

+x-ephemeral-volumes:
+  - arc-testnet-reth-archive-trace-sockets
+
 x-upstreams:
  - id: $${ID}
    labels:
--- a/arc/reth/arc-testnet-reth-pruned-trace.yml
+++ b/arc/reth/arc-testnet-reth-pruned-trace.yml
@@ -45,7 +45,7 @@ services:
  arc-testnet-sockets-init:
    image: debian:bookworm-slim
    entrypoint: [/bin/sh, -c]
-    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    command: [chown 999:999 /sockets]
    restart: no
    depends_on:
      arc-testnet-consensus-init:
@@ -161,6 +161,9 @@ volumes:
  arc-testnet-reth-pruned-trace-execution:
  arc-testnet-reth-pruned-trace-sockets:

+x-ephemeral-volumes:
+  - arc-testnet-reth-pruned-trace-sockets
+
 x-upstreams:
  - id: $${ID}
    labels:
--- a/arc/reth/arc-testnet-reth-pruned.yml
+++ b/arc/reth/arc-testnet-reth-pruned.yml
@@ -45,7 +45,7 @@ services:
  arc-testnet-sockets-init:
    image: debian:bookworm-slim
    entrypoint: [/bin/sh, -c]
-    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    command: [chown 999:999 /sockets]
    restart: no
    depends_on:
      arc-testnet-consensus-init:
@@ -161,6 +161,9 @@ volumes:
  arc-testnet-reth-pruned-execution:
  arc-testnet-reth-pruned-sockets:

+x-ephemeral-volumes:
+  - arc-testnet-reth-pruned-sockets
+
 x-upstreams:
  - id: $${ID}
    labels:
--- a/avalanche/go/avalanche-fuji-go-archive-leveldb.yml
+++ b/avalanche/go/avalanche-fuji-go-archive-leveldb.yml
@@ -107,7 +107,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain: avalanche
+    chain: avalanche-fuji
    method-groups:
      enabled:
        - debug
--- a/avalanche/go/avalanche-fuji-go-pruned-leveldb.prune.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-leveldb.prune.yml
@@ -107,7 +107,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain: avalanche
+    chain: avalanche-fuji
    method-groups:
      enabled:
        - debug
--- a/avalanche/go/avalanche-fuji-go-pruned-leveldb.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-leveldb.yml
@@ -107,7 +107,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain: avalanche
+    chain: avalanche-fuji
    method-groups:
      enabled:
        - debug
--- a/avalanche/go/avalanche-fuji-go-pruned-pebbledb.prune.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-pebbledb.prune.yml
@@ -107,7 +107,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain: avalanche
+    chain: avalanche-fuji
    method-groups:
      enabled:
        - debug
--- a/avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml
@@ -107,7 +107,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain: avalanche
+    chain: avalanche-fuji
    method-groups:
      enabled:
        - debug
--- a/berachain/reth/berachain-bartio-reth-archive-trace.yml
+++ b/berachain/reth/berachain-bartio-reth-archive-trace.yml
@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults

 services:
  berachain-bartio-reth:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BARTIO_RETH_VERSION:-v1.4.0}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BARTIO_RETH_VERSION:-v1.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/berachain/reth/berachain-bartio-reth-pruned-trace.yml
+++ b/berachain/reth/berachain-bartio-reth-pruned-trace.yml
@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults

 services:
  berachain-bartio-reth-pruned:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BARTIO_RETH_VERSION:-v1.4.0}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BARTIO_RETH_VERSION:-v1.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/berachain/reth/berachain-bepolia-reth-archive-trace.yml
+++ b/berachain/reth/berachain-bepolia-reth-archive-trace.yml
@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults

 services:
  berachain-bepolia-reth:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BEPOLIA_RETH_VERSION:-v1.4.3-rc.0}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BEPOLIA_RETH_VERSION:-v1.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/berachain/reth/berachain-bepolia-reth-pruned-trace.yml
+++ b/berachain/reth/berachain-bepolia-reth-pruned-trace.yml
@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults

 services:
  berachain-bepolia-reth-pruned:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BEPOLIA_RETH_VERSION:-v1.4.3-rc.0}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BEPOLIA_RETH_VERSION:-v1.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/berachain/reth/berachain-mainnet-reth-archive-trace.yml
+++ b/berachain/reth/berachain-mainnet-reth-archive-trace.yml
@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults

 services:
  berachain-mainnet-reth:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_MAINNET_RETH_VERSION:-v1.4.2}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_MAINNET_RETH_VERSION:-v1.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/berachain/reth/berachain-mainnet-reth-pruned-trace.yml
+++ b/berachain/reth/berachain-mainnet-reth-pruned-trace.yml
@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults

 services:
  berachain-mainnet-reth-pruned:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_MAINNET_RETH_VERSION:-v1.4.2}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_MAINNET_RETH_VERSION:-v1.4.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/clone-backup.sh
+++ b/clone-backup.sh
@@ -298,6 +298,7 @@ cleanup_all_ports() {
 # Transfer backup file using screen method with better error handling
 transfer_backup() {
    local key=$1
+    local compose_file=$2
    local volume_name="rpc_$key"
    
    # Find the newest restorable backup file (skip near-empty artifacts)
@@ -309,6 +310,13 @@ transfer_backup() {
            echo "Note: no backup for secrets/jwt volume $volume_name (regenerated at create-node), skipping"
            return 2
        fi
+        # Check if this volume is optional or ephemeral - if so, skip gracefully
+        if [[ -n "$compose_file" && -f "$compose_file" ]]; then
+            if is_ephemeral_volume_key "$key" "$compose_file" || is_optional_volume_key "$key" "$compose_file"; then
+                echo "Note: no backup for optional/ephemeral volume $volume_name (will be created empty at destination), skipping"
+                return 2
+            fi
+        fi
        echo "Warning: No restorable backup file found for $volume_name, skipping"
        return 1
    fi
@@ -502,6 +510,7 @@ LISTENER
 # Fallback: Direct SSH pipe
 transfer_backup_ssh() {
    local key=$1
+    local compose_file=$2
    local volume_name="rpc_$key"
    
    # Find the newest restorable backup file (skip near-empty artifacts)
@@ -513,6 +522,13 @@ transfer_backup_ssh() {
            echo "Note: no backup for secrets/jwt volume $volume_name (regenerated at create-node), skipping"
            return 2
        fi
+        # Check if this volume is optional or ephemeral - if so, skip gracefully
+        if [[ -n "$compose_file" && -f "$compose_file" ]]; then
+            if is_ephemeral_volume_key "$key" "$compose_file" || is_optional_volume_key "$key" "$compose_file"; then
+                echo "Note: no backup for optional/ephemeral volume $volume_name (will be created empty at destination), skipping"
+                return 2
+            fi
+        fi
        echo "Warning: No restorable backup file found for $volume_name, skipping"
        return 1
    fi
@@ -642,7 +658,7 @@ main() {

    for key in $keys; do
        # Try nc method first
-        transfer_backup "$key"
+        transfer_backup "$key" "$dir/$1.yml"
        rc=$?

        if [[ $rc -eq 2 ]]; then
@@ -650,7 +666,7 @@ main() {
            skipped_volumes="$skipped_volumes $key"
        elif [[ $rc -ne 0 ]]; then
            echo "NC transfer failed, trying direct SSH..."
-            transfer_backup_ssh "$key"
+            transfer_backup_ssh "$key" "$dir/$1.yml"
            rc=$?

            if [[ $rc -eq 0 ]]; then
--- a/compose_registry.json
+++ b/compose_registry.json
--- a/core/core/core-buffalo-core-pruned-pebble-path.yml
+++ b/core/core/core-buffalo-core-pruned-pebble-path.yml
@@ -115,7 +115,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain: core-testnet
+    chain:
    method-groups:
      enabled:
        - debug
--- a/core/core/core-pigeon-core-pruned-pebble-path.yml
+++ b/core/core/core-pigeon-core-pruned-pebble-path.yml
@@ -115,7 +115,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain: core-pigeon
+    chain: core-testnet
    method-groups:
      enabled:
        - debug
--- a/ethereum/besu/ethereum-mainnet-besu-pruned-bonsai--nimbus.yml
+++ b/ethereum/besu/ethereum-mainnet-besu-pruned-bonsai--nimbus.yml
@@ -189,8 +189,15 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-besu-pruned-bonsai_nimbus]
 ...
--- a/ethereum/geth/ethereum-hoodi-geth-pruned-pebble-path--nimbus.yml
+++ b/ethereum/geth/ethereum-hoodi-geth-pruned-pebble-path--nimbus.yml
@@ -195,8 +195,15 @@ x-upstreams:
    chain: eth-beacon-chain-hoodi
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-hoodi-geth-pruned-pebble-path_nimbus]
 ...
--- a/ethereum/geth/ethereum-hoodi-geth-pruned-pebble-path.yml
+++ b/ethereum/geth/ethereum-hoodi-geth-pruned-pebble-path.yml
@@ -196,8 +196,15 @@ x-upstreams:
    chain: eth-beacon-chain-hoodi
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-hoodi-geth-pruned-pebble-path_prysm]
 ...
--- a/ethereum/geth/ethereum-mainnet-geth-minimal-pebble-path.yml
+++ b/ethereum/geth/ethereum-mainnet-geth-minimal-pebble-path.yml
@@ -200,8 +200,15 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-geth-minimal-pebble-path_prysm]
 ...
--- a/ethereum/geth/ethereum-mainnet-geth-pruned-leveldb-hash--nimbus--fireeth.yml
+++ b/ethereum/geth/ethereum-mainnet-geth-pruned-leveldb-hash--nimbus--fireeth.yml
@@ -259,8 +259,15 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-geth-pruned-leveldb-hash_nimbus]
 ...
--- a/ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path--nimbus--fireeth.yml
+++ b/ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path--nimbus--fireeth.yml
@@ -261,8 +261,15 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-geth-pruned-pebble-path_nimbus]
 ...
--- a/ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path--nimbus.yml
+++ b/ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path--nimbus.yml
@@ -195,8 +195,15 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-geth-pruned-pebble-path_nimbus]
 ...
--- a/ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path.yml
+++ b/ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path.yml
@@ -196,8 +196,15 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-geth-pruned-pebble-path_prysm]
 ...
--- a/ethereum/geth/ethereum-sepolia-geth-pruned-pebble-path--nimbus.yml
+++ b/ethereum/geth/ethereum-sepolia-geth-pruned-pebble-path--nimbus.yml
@@ -195,8 +195,15 @@ x-upstreams:
    chain: eth-beacon-chain-sepolia
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-geth-pruned-pebble-path_nimbus]
 ...
--- a/ethereum/geth/ethereum-sepolia-geth-pruned-pebble-path.yml
+++ b/ethereum/geth/ethereum-sepolia-geth-pruned-pebble-path.yml
@@ -196,8 +196,15 @@ x-upstreams:
    chain: eth-beacon-chain-sepolia
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-geth-pruned-pebble-path_prysm]
 ...
--- a/ethereum/nethermind/ethereum-hoodi-nethermind-pruned-rocksdb-trace--nimbus.yml
+++ b/ethereum/nethermind/ethereum-hoodi-nethermind-pruned-rocksdb-trace--nimbus.yml
@@ -169,8 +169,15 @@ x-upstreams:
    chain: eth-beacon-chain-hoodi
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-hoodi-nethermind-pruned-rocksdb-trace_nimbus]
 ...
--- a/ethereum/nethermind/ethereum-mainnet-nethermind-pruned-rocksdb-trace--nimbus.yml
+++ b/ethereum/nethermind/ethereum-mainnet-nethermind-pruned-rocksdb-trace--nimbus.yml
@@ -169,8 +169,15 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-nethermind-pruned-rocksdb-trace_nimbus]
 ...
--- a/ethereum/nethermind/ethereum-sepolia-nethermind-pruned-rocksdb-trace--nimbus.yml
+++ b/ethereum/nethermind/ethereum-sepolia-nethermind-pruned-rocksdb-trace--nimbus.yml
@@ -169,8 +169,15 @@ x-upstreams:
    chain: eth-beacon-chain-sepolia
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-nethermind-pruned-rocksdb-trace_nimbus]
 ...
--- a/ethereum/reth/ethereum-hoodi-reth-archive-trace.yml
+++ b/ethereum/reth/ethereum-hoodi-reth-archive-trace.yml
@@ -184,8 +184,15 @@ x-upstreams:
    chain: eth-beacon-chain-hoodi
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-hoodi-reth-archive-trace_prysm]
 ...
--- a/ethereum/reth/ethereum-hoodi-reth-pruned-trace.yml
+++ b/ethereum/reth/ethereum-hoodi-reth-pruned-trace.yml
@@ -185,8 +185,15 @@ x-upstreams:
    chain: eth-beacon-chain-hoodi
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-hoodi-reth-pruned-trace_prysm]
 ...
--- a/ethereum/reth/ethereum-mainnet-reth-archive-trace--lighthouse-pruned-blobs.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-archive-trace--lighthouse-pruned-blobs.yml
@@ -191,8 +191,15 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-archive-trace_lighthouse-pruned-blobs]
 ...
--- a/ethereum/reth/ethereum-mainnet-reth-archive-trace--nimbus.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-archive-trace--nimbus.yml
@@ -183,8 +183,15 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-archive-trace_nimbus]
 ...
--- a/ethereum/reth/ethereum-mainnet-reth-archive-trace.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-archive-trace.yml
@@ -184,8 +184,15 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-archive-trace_prysm]
 ...
--- a/ethereum/reth/ethereum-mainnet-reth-minimal-trace--blsync.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-minimal-trace--blsync.yml
@@ -123,7 +123,7 @@ services:
      - pruning

  ethereum-mainnet-reth-minimal-node:
-    image: ${ETHEREUM_BLSYNC_IMAGE:-ethereum/client-go}:${ETHEREUM_MAINNET_BLSYNC_VERSION:-alltools-v1.17.4}
+    image: ${ETHEREUM_BLSYNC_IMAGE:-ethereum/client-go}:${ETHEREUM_MAINNET_BLSYNC_VERSION:-alltools-v1.17.5}
    ports:
      - 19286:19286
      - 19286:19286/udp
--- a/ethereum/reth/ethereum-mainnet-reth-minimal-trace--nimbus.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-minimal-trace--nimbus.yml
@@ -242,8 +242,15 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-minimal-trace_nimbus]
 ...
--- a/ethereum/reth/ethereum-mainnet-reth-pruned-trace--lighthouse.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-pruned-trace--lighthouse.yml
@@ -190,8 +190,15 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-pruned-trace_lighthouse]
 ...
--- a/ethereum/reth/ethereum-mainnet-reth-pruned-trace--nimbus.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-pruned-trace--nimbus.yml
@@ -184,8 +184,15 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-pruned-trace_nimbus]
 ...
--- a/ethereum/reth/ethereum-mainnet-reth-pruned-trace.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-pruned-trace.yml
@@ -185,8 +185,15 @@ x-upstreams:
    chain: eth-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-mainnet-reth-pruned-trace_prysm]
 ...
--- a/ethereum/reth/ethereum-sepolia-reth-archive-trace--nimbus.yml
+++ b/ethereum/reth/ethereum-sepolia-reth-archive-trace--nimbus.yml
@@ -183,8 +183,15 @@ x-upstreams:
    chain: eth-beacon-chain-sepolia
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-reth-archive-trace_nimbus]
 ...
--- a/ethereum/reth/ethereum-sepolia-reth-archive-trace.yml
+++ b/ethereum/reth/ethereum-sepolia-reth-archive-trace.yml
@@ -184,8 +184,15 @@ x-upstreams:
    chain: eth-beacon-chain-sepolia
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-reth-archive-trace_prysm]
 ...
--- a/ethereum/reth/ethereum-sepolia-reth-pruned-trace--nimbus.yml
+++ b/ethereum/reth/ethereum-sepolia-reth-pruned-trace--nimbus.yml
@@ -184,8 +184,15 @@ x-upstreams:
    chain: eth-beacon-chain-sepolia
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-reth-pruned-trace_nimbus]
 ...
--- a/ethereum/reth/ethereum-sepolia-reth-pruned-trace.yml
+++ b/ethereum/reth/ethereum-sepolia-reth-pruned-trace.yml
@@ -185,8 +185,15 @@ x-upstreams:
    chain: eth-beacon-chain-sepolia
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [ethereum-sepolia-reth-pruned-trace_prysm]
 ...
--- a/fuse/nethermind/fuse-spark-nethermind-archive-rocksdb-trace.yml
+++ b/fuse/nethermind/fuse-spark-nethermind-archive-rocksdb-trace.yml
@@ -96,26 +96,8 @@ services:
 volumes:
  fuse-spark-nethermind-archive-rocksdb-trace:

-x-upstreams:
-  - id: $${ID}
-    labels:
-      provider: $${PROVIDER}
-    connection:
-      generic:
-        rpc:
-          url: $${RPC_URL}
-        ws:
-          frameSize: 20Mb
-          msgSize: 50Mb
-          url: $${WS_URL}
-    chain: fuse
-    method-groups:
-      enabled:
-        - debug
-        - filter
-        - trace
-    methods:
-      disabled:
-      enabled:
-        - name: txpool_content # TODO: should be disabled for rollup nodes
-...
+# fuse-spark (Sparknet, chainid 123) is ABSENT from dRPC chains.yaml - not a
+# servable dRPC chain. x-upstreams removed 2026-08-05 (it declared the MAINNET
+# slug "fuse", which would have advertised testnet data as mainnet). This file is
+# hand-written (fuse has chains: null in context.yml); onboarding it to generation
+# is the clean long-term fix. See chain-aliases.yaml fuse/spark: null.
--- a/fuse/nethermind/fuse-spark-nethermind-minimal-rocksdb-trace.yml
+++ b/fuse/nethermind/fuse-spark-nethermind-minimal-rocksdb-trace.yml
@@ -99,26 +99,8 @@ services:
 volumes:
  fuse-spark-nethermind-minimal-rocksdb-trace:

-x-upstreams:
-  - id: $${ID}
-    labels:
-      provider: $${PROVIDER}
-    connection:
-      generic:
-        rpc:
-          url: $${RPC_URL}
-        ws:
-          frameSize: 20Mb
-          msgSize: 50Mb
-          url: $${WS_URL}
-    chain: fuse
-    method-groups:
-      enabled:
-        - debug
-        - filter
-        - trace
-    methods:
-      disabled:
-      enabled:
-        - name: txpool_content # TODO: should be disabled for rollup nodes
-...
+# fuse-spark (Sparknet, chainid 123) is ABSENT from dRPC chains.yaml - not a
+# servable dRPC chain. x-upstreams removed 2026-08-05 (it declared the MAINNET
+# slug "fuse", which would have advertised testnet data as mainnet). This file is
+# hand-written (fuse has chains: null in context.yml); onboarding it to generation
+# is the clean long-term fix. See chain-aliases.yaml fuse/spark: null.
--- a/fuse/nethermind/fuse-spark-nethermind-pruned-rocksdb-trace.yml
+++ b/fuse/nethermind/fuse-spark-nethermind-pruned-rocksdb-trace.yml
@@ -94,26 +94,8 @@ services:
 volumes:
  fuse-spark-nethermind-pruned-rocksdb-trace:

-x-upstreams:
-  - id: $${ID}
-    labels:
-      provider: $${PROVIDER}
-    connection:
-      generic:
-        rpc:
-          url: $${RPC_URL}
-        ws:
-          frameSize: 20Mb
-          msgSize: 50Mb
-          url: $${WS_URL}
-    chain: fuse
-    method-groups:
-      enabled:
-        - debug
-        - filter
-        - trace
-    methods:
-      disabled:
-      enabled:
-        - name: txpool_content # TODO: should be disabled for rollup nodes
-...
+# fuse-spark (Sparknet, chainid 123) is ABSENT from dRPC chains.yaml - not a
+# servable dRPC chain. x-upstreams removed 2026-08-05 (it declared the MAINNET
+# slug "fuse", which would have advertised testnet data as mainnet). This file is
+# hand-written (fuse has chains: null in context.yml); onboarding it to generation
+# is the clean long-term fix. See chain-aliases.yaml fuse/spark: null.
--- a/gnosis/nethermind/gnosis-chiado-nethermind-archive-rocksdb-trace.yml
+++ b/gnosis/nethermind/gnosis-chiado-nethermind-archive-rocksdb-trace.yml
@@ -171,8 +171,15 @@ x-upstreams:
    chain: gnosis-beacon-chain-chiado
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [gnosis-chiado-nethermind-archive-rocksdb-trace_nimbus]
 ...
--- a/gnosis/nethermind/gnosis-chiado-nethermind-minimal-rocksdb-trace.yml
+++ b/gnosis/nethermind/gnosis-chiado-nethermind-minimal-rocksdb-trace.yml
@@ -174,8 +174,15 @@ x-upstreams:
    chain: gnosis-beacon-chain-chiado
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [gnosis-chiado-nethermind-minimal-rocksdb-trace_nimbus]
 ...
--- a/gnosis/nethermind/gnosis-chiado-nethermind-pruned-rocksdb-trace.yml
+++ b/gnosis/nethermind/gnosis-chiado-nethermind-pruned-rocksdb-trace.yml
@@ -169,8 +169,15 @@ x-upstreams:
    chain: gnosis-beacon-chain-chiado
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [gnosis-chiado-nethermind-pruned-rocksdb-trace_nimbus]
 ...
--- a/gnosis/nethermind/gnosis-mainnet-nethermind-archive-rocksdb-trace.yml
+++ b/gnosis/nethermind/gnosis-mainnet-nethermind-archive-rocksdb-trace.yml
@@ -171,8 +171,15 @@ x-upstreams:
    chain: gnosis-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [gnosis-mainnet-nethermind-archive-rocksdb-trace_nimbus]
 ...
--- a/gnosis/nethermind/gnosis-mainnet-nethermind-minimal-rocksdb-trace.yml
+++ b/gnosis/nethermind/gnosis-mainnet-nethermind-minimal-rocksdb-trace.yml
@@ -174,8 +174,15 @@ x-upstreams:
    chain: gnosis-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [gnosis-mainnet-nethermind-minimal-rocksdb-trace_nimbus]
 ...
--- a/gnosis/nethermind/gnosis-mainnet-nethermind-pruned-rocksdb-trace.yml
+++ b/gnosis/nethermind/gnosis-mainnet-nethermind-pruned-rocksdb-trace.yml
@@ -169,8 +169,15 @@ x-upstreams:
    chain: gnosis-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [gnosis-mainnet-nethermind-pruned-rocksdb-trace_nimbus]
 ...
--- a/gnosis/reth/gnosis-chiado-reth-archive-trace.yml
+++ b/gnosis/reth/gnosis-chiado-reth-archive-trace.yml
@@ -183,8 +183,15 @@ x-upstreams:
    chain: gnosis-beacon-chain-chiado
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [gnosis-chiado-reth-archive-trace_nimbus]
 ...
--- a/gnosis/reth/gnosis-chiado-reth-pruned-trace.yml
+++ b/gnosis/reth/gnosis-chiado-reth-pruned-trace.yml
@@ -184,8 +184,15 @@ x-upstreams:
    chain: gnosis-beacon-chain-chiado
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [gnosis-chiado-reth-pruned-trace_nimbus]
 ...
--- a/gnosis/reth/gnosis-mainnet-reth-archive-trace.yml
+++ b/gnosis/reth/gnosis-mainnet-reth-archive-trace.yml
@@ -183,8 +183,15 @@ x-upstreams:
    chain: gnosis-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [gnosis-mainnet-reth-archive-trace_nimbus]
 ...
--- a/gnosis/reth/gnosis-mainnet-reth-pruned-trace.yml
+++ b/gnosis/reth/gnosis-mainnet-reth-pruned-trace.yml
@@ -184,8 +184,15 @@ x-upstreams:
    chain: gnosis-beacon-chain
    labels:
      provider: $${PROVIDER}-beacon-chain
+    options:
+      # dshackle 0.79.10's beacon health validator times out on the spec-compliant
+      # empty-body 200 from /eth/v1/node/health (nimbus), flapping the upstream
+      # UNAVAILABLE and failing live requests ("Source was empty"). Head tracking
+      # still governs health with validation off. 2026-07-10, dRPC incident.
+      disable-validation: true
    connection:
      generic:
        rpc:
          url: $${RPC_URL}
+x-optional-volumes: [gnosis-mainnet-reth-pruned-trace_nimbus]
 ...
--- a/immutable-zkevm/geth/immutable-zkevm-mainnet-geth-pruned-pebble-path.yml
+++ b/immutable-zkevm/geth/immutable-zkevm-mainnet-geth-pruned-pebble-path.yml
@@ -32,7 +32,7 @@ x-logging-defaults: &logging-defaults

 services:
  immutable-zkevm-mainnet-geth:
-    image: ${IMMUTABLE_ZKEVM_GETH_IMAGE:-ethereum/client-go}:${IMMUTABLE_ZKEVM_MAINNET_GETH_VERSION:-v1.17.4}
+    image: ${IMMUTABLE_ZKEVM_GETH_IMAGE:-ethereum/client-go}:${IMMUTABLE_ZKEVM_MAINNET_GETH_VERSION:-v1.17.5}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/linea/besu/linea-mainnet-besu-pruned-bonsai.yml
+++ b/linea/besu/linea-mainnet-besu-pruned-bonsai.yml
@@ -54,6 +54,7 @@ services:
      - 9545
    command:
      - --Xbonsai-full-flat-db-enabled=true
+      - --bonsai-historical-block-limit=4096
      - --bootnodes=enode://069800db9e6e0ec9cadca670994ef1aea2cfd3d88133e63ecadbc1cdbd1a5847b09838ee08d8b5f02a9c32ee13abeb4d4104bb5514e5322c9d7ee19f41ff3e51@3.132.73.210:31002,enode://a8e03a71eab12ec4b47bb6e19169d8e4dc7a58373a2476969bbe463f2dded6003037fa4dd5f71e15027f7fc8d7340956fbbefed67ddd116ac19a7f74da034b61@3.132.73.210:31003,enode://97706526cf79df9d930003644f9156805f6c8bd964fc79e083444f7014ce10c9bdd2c5049e63b58040dca1d4c82ebef970822198cf0714de830cff4111534ff1@18.223.198.165:31004,enode://24e1c654a801975a96b7f54ebd7452ab15777fc635c1db25bdbd4425fdb04e7f4768e9e838a87ab724320a765e41631d5d37758c933ad0e8668693558125c8aa@18.223.198.165:31000,enode://27010891d960f73d272a553f72b6336c6698db3ade98d631f09c764e57674a797be5ebc6829ddbb65ab564f439ebc75215d20aa98b6f351d12ea623e7d139ac3@3.132.73.210:31001,enode://228e1b8a4931e46f383e30721dac21fb8fb4e5e1b32c870e13b25478c82db3dc1cd9e7ceb93d302a766466b55638cc9c5cbfc43aa48fa41ced19baf365951f76@3.1.142.64:31002,enode://c22eb0d40fc3ad5ea710aeddea906567778166bfe18c157955e8c39b23a46c45db18a0fa2ba07f2b64c81178a8c796aec2a29151533920ead06fcdfc6d8d03c6@47.128.192.57:31004,enode://8ce733abe39fd7ae0a278b9893f85c1193c611a3886168690dd843435460f22cc4d61f9e8d0ace7f5905836a665319a31cccdaacdada2acc69972c382ecce7db@3.1.142.64:31003,enode://b7c1b2bed65a855f7a2104aac9a14674dfdf018fdac763415b373b29ce18cdb81d36328ba4e5c9f12629f3a50c3e8f9ee048f22dbdbe93a82813da89c6b81334@51.20.235.126:31004,enode://95270e0550848a72fb141cf27f1c4ea10714edde365b411dc0fa06c81c0f282ce155eb9fa472b6b8bb9ee98395eeaf4c5a7b02a01fe58b37ea98ba152eda4c37@13.50.94.193:31000,enode://72013391755f24f08567b932feeeec4c893c06e0b1fb480890c83bf87fd277ad86a5ab9cb586db9ae9970371a2f8cb0c96f6c9f69045abca0fb801db7f047138@51.20.235.126:31001
      - --data-path=/opt/besu/database
      - --data-storage-format=BONSAI
--- a/linea/besu/linea-sepolia-besu-pruned-bonsai.yml
+++ b/linea/besu/linea-sepolia-besu-pruned-bonsai.yml
@@ -54,6 +54,7 @@ services:
      - 9545
    command:
      - --Xbonsai-full-flat-db-enabled=true
+      - --bonsai-historical-block-limit=4096
      - --bootnodes=enode://6f20afbe4397e51b717a7c1ad3095e79aee48c835eebd9237a3e8a16951ade1fe0e66e981e30ea269849fcb6ba03d838da37f524fabd2a557474194a2e2604fa@18.221.100.27:31002,enode://ce1e0d8e0500cb5c0ac56bdcdafb2d6320c3a2c5125b5ccf12f5dfc9b47ee74acbcafc32559017613136c9c36a0ce74ba4f83b7fb8244f099f3b15708d9d3129@3.23.75.47:31000,enode://1b026a5eb0ae74300f58987d235ef0e3a550df963345cb3574be3b0b54378bd11f14dfd515a8976f2c2d2826090e9507b8ccc24f896a9ffffffcabcfd996a733@3.129.120.128:31001
      - --data-path=/opt/besu/database
      - --data-storage-format=BONSAI
--- a/list-restorable.sh
+++ b/list-restorable.sh
@@ -13,6 +13,20 @@

 dir="$(dirname "$0")"
 source "$dir/volume-utils.sh"
+
+# Get required persistent volume keys (all volumes minus ephemeral minus optional)
+get_required_volume_keys() {
+  local compose_file=$1
+  local key
+  
+  while IFS= read -r key; do
+    [[ -z "$key" ]] && continue
+    # Skip if ephemeral or optional
+    if ! is_ephemeral_volume_key "$key" "$compose_file" && ! is_optional_volume_key "$key" "$compose_file"; then
+      echo "$key"
+    fi
+  done < <(get_volume_keys "$compose_file")
+}
 registry_file="${dir}/compose_registry.json"
 backup_dir="/backup"

@@ -107,7 +121,6 @@ while IFS= read -r entry; do
    fi
    
    compose_file=$(echo "$entry" | jq -r '.compose_file')
-    volumes=$(echo "$entry" | jq -r '.volumes[]')
    
    # Check if compose file exists
    compose_path="${dir}/${compose_file}.yml"
@@ -115,11 +128,16 @@ while IFS= read -r entry; do
        continue
    fi
    
-    # Check each volume for backup file
+    # Check each required volume for backup file
    all_backups_exist=true
    missing_volumes=()
    backup_info=()
    
+    # Required persistent volumes only (exclude ephemeral + optional).
+    # Must feed the loop via done<<< / done< <(...) — putting < <(...) on
+    # `read` re-runs the producer every iteration and infinite-loops on the
+    # first key (vibe regression 2026-08-04 d896378e).
+    volumes=$(get_required_volume_keys "$compose_path")
    while IFS= read -r volume; do
        volume_name="rpc_${volume}"
        # jwt/secrets volumes are regenerated at create-node — never backed up by
--- a/op/erigon/soneium-minato-sepolia-op-erigon-archive-trace.yml
+++ b/op/erigon/soneium-minato-sepolia-op-erigon-archive-trace.yml
@@ -69,7 +69,7 @@ services:
      - --p2p.allowed-ports=32283
      - --p2p.allowed-ports=37283
      - --port=12283
-      - --rollup.sequencerhttp=https://rpc.soneium.org
+      - --rollup.sequencerhttp=https://rpc.minato.soneium.org
      - --rpc.gascap=6000000000
      - --rpc.returndata.limit=1500000
      - --http
@@ -176,7 +176,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain: soneium
+    chain: soneium-minato
    method-groups:
      enabled:
        - debug
--- a/op/geth/celo-mainnet-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/celo-mainnet-op-geth-archive-leveldb-hash.yml
@@ -267,7 +267,7 @@ services:
      - EIGENDA_PROXY_S3_CREDENTIAL_TYPE=public
      - EIGENDA_PROXY_S3_ENDPOINT=storage.googleapis.com
      - EIGENDA_PROXY_S3_PATH=blobs/
-      - EIGENDA_PROXY_STORAGE_BACKENDS_TO_ENABLE=V1,V2
+      - EIGENDA_PROXY_STORAGE_BACKENDS_TO_ENABLE=V2
      - EIGENDA_PROXY_STORAGE_FALLBACK_TARGETS=s3
    restart: unless-stopped
    networks:
--- a/op/geth/celo-mainnet-op-geth-pruned-leveldb-hash.yml
+++ b/op/geth/celo-mainnet-op-geth-pruned-leveldb-hash.yml
@@ -266,7 +266,7 @@ services:
      - EIGENDA_PROXY_S3_CREDENTIAL_TYPE=public
      - EIGENDA_PROXY_S3_ENDPOINT=storage.googleapis.com
      - EIGENDA_PROXY_S3_PATH=blobs/
-      - EIGENDA_PROXY_STORAGE_BACKENDS_TO_ENABLE=V1,V2
+      - EIGENDA_PROXY_STORAGE_BACKENDS_TO_ENABLE=V2
      - EIGENDA_PROXY_STORAGE_FALLBACK_TARGETS=s3
    restart: unless-stopped
    networks:
--- a/op/geth/celo-mainnet-op-geth-pruned-pebble-hash.yml
+++ b/op/geth/celo-mainnet-op-geth-pruned-pebble-hash.yml
@@ -264,7 +264,7 @@ services:
      - EIGENDA_PROXY_S3_CREDENTIAL_TYPE=public
      - EIGENDA_PROXY_S3_ENDPOINT=storage.googleapis.com
      - EIGENDA_PROXY_S3_PATH=blobs/
-      - EIGENDA_PROXY_STORAGE_BACKENDS_TO_ENABLE=V1,V2
+      - EIGENDA_PROXY_STORAGE_BACKENDS_TO_ENABLE=V2
      - EIGENDA_PROXY_STORAGE_FALLBACK_TARGETS=s3
    restart: unless-stopped
    networks:
--- a/op/geth/celo-mainnet-op-geth-pruned-pebble-path.yml
+++ b/op/geth/celo-mainnet-op-geth-pruned-pebble-path.yml
@@ -264,7 +264,7 @@ services:
      - EIGENDA_PROXY_S3_CREDENTIAL_TYPE=public
      - EIGENDA_PROXY_S3_ENDPOINT=storage.googleapis.com
      - EIGENDA_PROXY_S3_PATH=blobs/
-      - EIGENDA_PROXY_STORAGE_BACKENDS_TO_ENABLE=V1,V2
+      - EIGENDA_PROXY_STORAGE_BACKENDS_TO_ENABLE=V2
      - EIGENDA_PROXY_STORAGE_FALLBACK_TARGETS=s3
    restart: unless-stopped
    networks:
--- a/op/geth/fraxtal-mainnet-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/fraxtal-mainnet-op-geth-archive-leveldb-hash.yml
@@ -45,9 +45,6 @@ services:
    ulimits:
      nofile: 1048576    # Max open files (for RPC/WS connections)
    user: root
-    ports:
-      - 13290:13290
-      - 13290:13290/udp
    expose:
      - 8545
      - 6060
@@ -64,7 +61,6 @@ services:
      - GETH_ROLLUP_SEQUENCERHTTP=https://rpc.mainnet.frax.com
    entrypoint: /bin/sh -c '[ -f /config/genesis.json ] && geth --db.engine=leveldb --gcmode=archive --datadir /data init --state.scheme=hash /config/genesis.json; [ -f /config/static-nodes.json ] && cp -f /config/static-nodes.json /data/static-nodes.json; exec geth "$@"' --
    command:
-      - --bootnodes=enr:-J24QI8QR7VIgvQFuvLl09b9ocugoQ1WkS_AOMWKFgNX48-4P1hjgDKGeMFXZmKtfjYA2aEehxKT066riaktnxhh92OGAY5Sw_QsgmlkgnY0gmlwhCztZu2Hb3BzdGFja4P8AQCJc2VjcDI1NmsxoQM2KM0mkdH97Ze8AqwxLeqc934PKj8-xoKsyP6mAptWwIN0Y3CCdl2DdWRwgnZd,enr:-J24QGD1J-g2EPY9b7XiuwLhIoGocVp2qx2gWSfDI_CdftiPSHlgi7G6LtzkQlDskuSvRj4OXTg3vXLISubphXNNhqyGAY5Sw8GxgmlkgnY0gmlwhCzW_iGHb3BzdGFja4P8AQCJc2VjcDI1NmsxoQPvMYlJHJUsEyciuJCTkKHLE2ogZ6cs2xuPI28CGq0CTIN0Y3CCdl2DdWRwgnZd,enr:-J24QCA5I3xroUXt7Ge_Kf04VCRBnI-GbZeyBxOkkpIDGGLrVsonrbngQG1hAEnufRb1TgS6sNFCGtaZ2ZpRx7AgciGGAY5SxEy0gmlkgnY0gmlwhCLzRQyHb3BzdGFja4P8AQCJc2VjcDI1NmsxoQOaHzrtPQWYcwAcFJWFrbGlbNUsBC0VEhCcH02RbgEIwIN0Y3CCdl2DdWRwgnZd
      - --datadir=/data
      - --db.engine=leveldb
      - --gcmode=archive
@@ -72,9 +68,8 @@ services:
      - --metrics
      - --metrics.addr=0.0.0.0
      - --metrics.port=6060
-      - --nat=extip:${IP}
      - --networkid=252
-      - --port=13290
+      - --nodiscover
      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=hash
@@ -145,7 +140,7 @@ services:
      - OP_NODE_RPC_ADDR=0.0.0.0
      - OP_NODE_RPC_PORT=9545
      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
-      - OP_NODE_SYNCMODE=execution-layer
+      - OP_NODE_SYNCMODE=consensus-layer
      - OP_NODE_VERIFIER_L1_CONFS=0
    entrypoint: [op-node]
    restart: unless-stopped
--- a/op/geth/fraxtal-mainnet-op-geth-pruned-pebble-path.yml
+++ b/op/geth/fraxtal-mainnet-op-geth-pruned-pebble-path.yml
@@ -45,9 +45,6 @@ services:
    ulimits:
      nofile: 1048576    # Max open files (for RPC/WS connections)
    user: root
-    ports:
-      - 10282:10282
-      - 10282:10282/udp
    expose:
      - 8545
      - 6060
@@ -64,7 +61,6 @@ services:
      - GETH_ROLLUP_SEQUENCERHTTP=https://rpc.mainnet.frax.com
    entrypoint: /bin/sh -c '[ -f /config/genesis.json ] && geth --db.engine=pebble --gcmode=full --datadir /data init --state.scheme=path /config/genesis.json; [ -f /config/static-nodes.json ] && cp -f /config/static-nodes.json /data/static-nodes.json; exec geth "$@"' --
    command:
-      - --bootnodes=enr:-J24QI8QR7VIgvQFuvLl09b9ocugoQ1WkS_AOMWKFgNX48-4P1hjgDKGeMFXZmKtfjYA2aEehxKT066riaktnxhh92OGAY5Sw_QsgmlkgnY0gmlwhCztZu2Hb3BzdGFja4P8AQCJc2VjcDI1NmsxoQM2KM0mkdH97Ze8AqwxLeqc934PKj8-xoKsyP6mAptWwIN0Y3CCdl2DdWRwgnZd,enr:-J24QGD1J-g2EPY9b7XiuwLhIoGocVp2qx2gWSfDI_CdftiPSHlgi7G6LtzkQlDskuSvRj4OXTg3vXLISubphXNNhqyGAY5Sw8GxgmlkgnY0gmlwhCzW_iGHb3BzdGFja4P8AQCJc2VjcDI1NmsxoQPvMYlJHJUsEyciuJCTkKHLE2ogZ6cs2xuPI28CGq0CTIN0Y3CCdl2DdWRwgnZd,enr:-J24QCA5I3xroUXt7Ge_Kf04VCRBnI-GbZeyBxOkkpIDGGLrVsonrbngQG1hAEnufRb1TgS6sNFCGtaZ2ZpRx7AgciGGAY5SxEy0gmlkgnY0gmlwhCLzRQyHb3BzdGFja4P8AQCJc2VjcDI1NmsxoQOaHzrtPQWYcwAcFJWFrbGlbNUsBC0VEhCcH02RbgEIwIN0Y3CCdl2DdWRwgnZd
      - --datadir=/data
      - --db.engine=pebble
      - --gcmode=full
@@ -72,13 +68,12 @@ services:
      - --metrics
      - --metrics.addr=0.0.0.0
      - --metrics.port=6060
-      - --nat=extip:${IP}
      - --networkid=252
-      - --port=10282
+      - --nodiscover
      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=path
-      - --syncmode=snap
+      - --syncmode=full
      - --http
      - --http.addr=0.0.0.0
      - --http.api=eth,net,web3,debug,admin,txpool,engine
@@ -145,7 +140,7 @@ services:
      - OP_NODE_RPC_ADDR=0.0.0.0
      - OP_NODE_RPC_PORT=9545
      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
-      - OP_NODE_SYNCMODE=execution-layer
+      - OP_NODE_SYNCMODE=consensus-layer
      - OP_NODE_VERIFIER_L1_CONFS=0
    entrypoint: [op-node]
    restart: unless-stopped
--- a/op/geth/soneium-minato-sepolia-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/soneium-minato-sepolia-op-geth-archive-leveldb-hash.yml
@@ -55,7 +55,7 @@ services:
    environment:
      - GETH_OP_NETWORK=soneium-minato-sepolia
      - GETH_ROLLUP_DISABLETXPOOLGOSSIP=true
-      - GETH_ROLLUP_SEQUENCERHTTP=https://rpc.soneium.org
+      - GETH_ROLLUP_SEQUENCERHTTP=https://rpc.minato.soneium.org
    entrypoint: /bin/sh -c 'exec geth "$@"' --
    command:
      - --datadir=/data
@@ -176,7 +176,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain: soneium
+    chain: soneium-minato
    method-groups:
      enabled:
        - debug
--- a/op/geth/soneium-minato-sepolia-op-geth-pruned-pebble-path.yml
+++ b/op/geth/soneium-minato-sepolia-op-geth-pruned-pebble-path.yml
@@ -55,7 +55,7 @@ services:
    environment:
      - GETH_OP_NETWORK=soneium-minato-sepolia
      - GETH_ROLLUP_DISABLETXPOOLGOSSIP=true
-      - GETH_ROLLUP_SEQUENCERHTTP=https://rpc.soneium.org
+      - GETH_ROLLUP_SEQUENCERHTTP=https://rpc.minato.soneium.org
    entrypoint: /bin/sh -c 'exec geth "$@"' --
    command:
      - --datadir=/data
@@ -176,7 +176,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain: soneium
+    chain: soneium-minato
    method-groups:
      enabled:
        - debug
--- a/op/geth/zircuit-mainnet-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/zircuit-mainnet-op-geth-archive-leveldb-hash.yml
@@ -1,214 +0,0 @@
---
-x-logging-defaults: &logging-defaults
-  driver: json-file
-  options:
-    max-size: "512m"
-    max-file: "2"
-
-# Usage:
-#
-# mkdir rpc && cd rpc
-#
-# git init
-# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
-# git fetch origin vibe
-# git checkout origin/vibe
-#
-# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
-#
-# env
-# ...
-# IP=$(curl ipinfo.io/ip)
-# DOMAIN=${IP}.traefik.me
-# COMPOSE_FILE=base.yml:rpc.yml:op/geth/zircuit-mainnet-op-geth-archive-leveldb-hash.yml
-#
-# docker compose up -d
-#
-# curl -X POST https://${IP}.traefik.me/zircuit-mainnet-archive \
-#   -H "Content-Type: application/json" \
-#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
-
-services:
-  zircuit-mainnet-archive:
-    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_MAINNET_GETH_VERSION:-v1.138.8}
-    sysctls:
-      # TCP Performance
-      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
-      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
-      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
-      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
-      net.core.somaxconn: 32768                   # Higher connection queue
-      # Memory/Connection Management
-      # net.core.netdev_max_backlog: 50000          # Increase network buffer
-      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
-      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
-    ulimits:
-      nofile: 1048576    # Max open files (for RPC/WS connections)
-    user: root
-    expose:
-      - 8545
-      - 6060
-      - 8551
-    environment:
-      - GETH_CONFIG=/config/gethconfig.toml
-      - GETH_ETHSTATS=d${DOMAIN}:${ZIRCUIT_MAINNET_WS_SECRET}@${ZIRCUIT_MAINNET_ETH_STATS_SERVER}:${ZIRCUIT_MAINNET_ETH_STATS_SERVER_PORT}
-      - GETH_ROLLUP_DISABLETXPOOLGOSSIP=true
-      - GETH_ROLLUP_SEQUENCERHTTP=https://proxyd-ingress-eu.mainnet.zircuit.com/?token=drpcvATEn3gsYCLyLw7ztFLCBwQNoDJr2QjpcsNNkksu
-      - GETH_TXPOOL_GLOBALQUEUE=1024
-      - ZIRCUIT_NETWORK=mainnet
-    entrypoint: /bin/sh -c 'exec geth "$@"' --
-    command:
-      - --datadir=/data
-      - --db.engine=leveldb
-      - --gcmode=archive
-      - --maxpeers=50
-      - --metrics
-      - --metrics.addr=0.0.0.0
-      - --metrics.port=6060
-      - --network=mainnet
-      - --nodiscover
-      - --rpc.gascap=600000000
-      - --rpc.txfeecap=0
-      - --state.scheme=hash
-      - --syncmode=full
-      - --http
-      - --http.addr=0.0.0.0
-      - --http.api=eth,net,web3,debug,admin,txpool,engine
-      - --http.port=8545
-      - --http.vhosts=*
-      - --ws
-      - --ws.addr=0.0.0.0
-      - --ws.api=eth,net,web3,debug,admin,txpool,engine
-      - --ws.origins=*
-      - --ws.port=8545
-      - --authrpc.addr=0.0.0.0
-      - --authrpc.jwtsecret=/jwtsecret
-      - --authrpc.vhosts=*
-    restart: unless-stopped
-    stop_grace_period: 5m
-    networks:
-      - chains
-    volumes:
-      - ${ZIRCUIT_MAINNET_OP_GETH_ARCHIVE_LEVELDB_HASH_DATA:-zircuit-mainnet-op-geth-archive-leveldb-hash}:/data
-      - ./op/zircuit/mainnet:/config
-      - .jwtsecret:/jwtsecret:ro
-      - /slowdisk:/slowdisk
-    logging: *logging-defaults
-    labels:
-      - prometheus-scrape.enabled=true
-      - prometheus-scrape.port=6060
-      - prometheus-scrape.path=/debug/metrics/prometheus
-      - traefik.enable=true
-      - traefik.http.middlewares.zircuit-mainnet-op-geth-archive-leveldb-hash-stripprefix.stripprefix.prefixes=/zircuit-mainnet-archive
-      - traefik.http.services.zircuit-mainnet-op-geth-archive-leveldb-hash.loadbalancer.server.port=8545
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-archive-leveldb-hash.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-archive-leveldb-hash.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-archive-leveldb-hash.rule=Host(`$DOMAIN`) && (Path(`/zircuit-mainnet-archive`) || Path(`/zircuit-mainnet-archive/`))}
-      - ${NO_SSL:+traefik.http.routers.zircuit-mainnet-op-geth-archive-leveldb-hash.rule=Path(`/zircuit-mainnet-archive`) || Path(`/zircuit-mainnet-archive/`)}
-      - traefik.http.routers.zircuit-mainnet-op-geth-archive-leveldb-hash.middlewares=zircuit-mainnet-op-geth-archive-leveldb-hash-stripprefix, ipallowlist
-
-  zircuit-mainnet-archive-node:
-    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${MAINNET_NODE_VERSION:-v1.138.8}
-    user: root
-    ports:
-      - 19463:19463
-      - 19463:19463/udp
-    environment:
-      - OP_NODE_L1_BEACON=${ETHEREUM_MAINNET_BEACON_REST}
-      - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_MAINNET_BEACON_ARCHIVER}
-      - OP_NODE_L1_ETH_RPC=${MAINNET_L1_EXECUTION_RPC:-${ETHEREUM_MAINNET_EXECUTION_RPC}}
-      - OP_NODE_L1_RPC_KIND=${ETHEREUM_MAINNET_EXECUTION_KIND:-standard}
-      - OP_NODE_L1_TRUST_RPC=${ETHEREUM_MAINNET_EXECUTION_TRUST:-false}
-      - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
-      - OP_NODE_L2_ENGINE_RPC=http://zircuit-mainnet-archive:8551
-      - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
-      - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
-      - OP_NODE_LOG_LEVEL=info
-      - OP_NODE_METRICS_ADDR=0.0.0.0
-      - OP_NODE_METRICS_ENABLED=true
-      - OP_NODE_METRICS_PORT=7300
-      - OP_NODE_NETWORK=mainnet
-      - OP_NODE_P2P_ADVERTISE_IP=${IP}
-      - OP_NODE_P2P_LISTEN_IP=0.0.0.0
-      - OP_NODE_P2P_LISTEN_TCP_PORT=19463
-      - OP_NODE_P2P_LISTEN_UDP_PORT=19463
-      - OP_NODE_P2P_STATIC=/dns4/node1-eu-p2p.mainnet.zircuit.com/tcp/9003/p2p/16Uiu2HAm5Uxn3E8RXEM2e5YsR9VNM8uKoPmZzwQjqp7r64ZLspd5,/dns4/node2-eu-p2p.mainnet.zircuit.com/tcp/9003/p2p/16Uiu2HAmPoLg64PL2X2oLrUSmYaqAbkATPAMNRxLCZTBavUP8UEB,/dns4/node3-eu-p2p.mainnet.zircuit.com/tcp/9003/p2p/16Uiu2HAmB9iZKfv9RPRZj6JwcwjbwZWECFwJ67b1LJMHrczTnbjf
-      - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
-      - OP_NODE_RPC_ADDR=0.0.0.0
-      - OP_NODE_RPC_PORT=9545
-      - OP_NODE_SEQUENCER_ENABLED=false
-      - OP_NODE_SEQUENCER_L1_CONFS=0
-      - OP_NODE_SEQUENCER_MAX_SAFE_LAG=0
-      - OP_NODE_SEQUENCER_STOPPED=false
-      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
-      - OP_NODE_SYNCMODE=consensus-layer
-      - OP_NODE_VERIFIER_L1_CONFS=0
-    entrypoint: [op-node]
-    restart: unless-stopped
-    depends_on:
-      zircuit-mainnet-archive:
-        condition: service_started
-        restart: true
-    networks:
-      - chains
-    volumes:
-      - ./op/zircuit/mainnet:/config
-      - .jwtsecret:/jwtsecret:ro
-    logging: *logging-defaults
-    labels:
-      - prometheus-scrape.enabled=true
-      - prometheus-scrape.port=7300
-      - prometheus-scrape.path=/metrics
-      - traefik.enable=true
-      - traefik.http.middlewares.zircuit-mainnet-op-geth-archive-leveldb-hash-node-stripprefix.stripprefix.prefixes=/zircuit-mainnet-archive/node
-      - traefik.http.services.zircuit-mainnet-op-geth-archive-leveldb-hash-node.loadbalancer.server.port=9545
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-archive-leveldb-hash-node.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-archive-leveldb-hash-node.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-archive-leveldb-hash-node.rule=Host(`$DOMAIN`) && PathPrefix(`/zircuit-mainnet-archive/node`)}
-      - ${NO_SSL:+traefik.http.routers.zircuit-mainnet-op-geth-archive-leveldb-hash-node.rule=PathPrefix(`/zircuit-mainnet-archive/node`)}
-      - traefik.http.routers.zircuit-mainnet-op-geth-archive-leveldb-hash-node.middlewares=zircuit-mainnet-op-geth-archive-leveldb-hash-node-stripprefix, ipallowlist
-
-volumes:
-  zircuit-mainnet-op-geth-archive-leveldb-hash:
-
-x-upstreams:
-  - id: $${ID}
-    labels:
-      provider: $${PROVIDER}
-    connection:
-      generic:
-        rpc:
-          url: $${RPC_URL}
-        ws:
-          frameSize: 20Mb
-          msgSize: 50Mb
-          url: $${WS_URL}
-    chain: zircuit-mainnet
-    method-groups:
-      enabled:
-        - debug
-        - filter
-    methods:
-      disabled:
-      enabled:
-        - name: txpool_content # TODO: should be disabled for rollup nodes
-        # standard geth only
-        - name: debug_getRawBlock
-        - name: debug_getRawTransaction
-        - name: debug_getRawReceipts
-        - name: debug_getRawHeader
-        - name: debug_getBadBlocks
-        # non standard geth only slightly dangerous
-        - name: debug_intermediateRoots
-        - name: debug_dumpBlock
-        # standard geth and erigon
-        - name: debug_accountRange
-        - name: debug_getModifiedAccountsByNumber
-        - name: debug_getModifiedAccountsByHash
-        # non standard geth and erigon
-        - name: eth_getRawTransactionByHash
-        - name: eth_getRawTransactionByBlockHashAndIndex
-        - name: zirc_getQuarantineHistory
-        - name: zirc_getQuarantined
-        - name: zirc_isQuarantined
-...
--- a/op/geth/zircuit-mainnet-op-geth-archive-pebble-hash.yml
+++ b/op/geth/zircuit-mainnet-op-geth-archive-pebble-hash.yml
@@ -1,214 +0,0 @@
---
-x-logging-defaults: &logging-defaults
-  driver: json-file
-  options:
-    max-size: "512m"
-    max-file: "2"
-
-# Usage:
-#
-# mkdir rpc && cd rpc
-#
-# git init
-# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
-# git fetch origin vibe
-# git checkout origin/vibe
-#
-# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
-#
-# env
-# ...
-# IP=$(curl ipinfo.io/ip)
-# DOMAIN=${IP}.traefik.me
-# COMPOSE_FILE=base.yml:rpc.yml:op/geth/zircuit-mainnet-op-geth-archive-pebble-hash.yml
-#
-# docker compose up -d
-#
-# curl -X POST https://${IP}.traefik.me/zircuit-mainnet-archive \
-#   -H "Content-Type: application/json" \
-#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
-
-services:
-  zircuit-mainnet-archive:
-    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_MAINNET_GETH_VERSION:-v1.138.8}
-    sysctls:
-      # TCP Performance
-      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
-      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
-      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
-      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
-      net.core.somaxconn: 32768                   # Higher connection queue
-      # Memory/Connection Management
-      # net.core.netdev_max_backlog: 50000          # Increase network buffer
-      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
-      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
-    ulimits:
-      nofile: 1048576    # Max open files (for RPC/WS connections)
-    user: root
-    expose:
-      - 8545
-      - 6060
-      - 8551
-    environment:
-      - GETH_CONFIG=/config/gethconfig.toml
-      - GETH_ETHSTATS=d${DOMAIN}:${ZIRCUIT_MAINNET_WS_SECRET}@${ZIRCUIT_MAINNET_ETH_STATS_SERVER}:${ZIRCUIT_MAINNET_ETH_STATS_SERVER_PORT}
-      - GETH_ROLLUP_DISABLETXPOOLGOSSIP=true
-      - GETH_ROLLUP_SEQUENCERHTTP=https://proxyd-ingress-eu.mainnet.zircuit.com/?token=drpcvATEn3gsYCLyLw7ztFLCBwQNoDJr2QjpcsNNkksu
-      - GETH_TXPOOL_GLOBALQUEUE=1024
-      - ZIRCUIT_NETWORK=mainnet
-    entrypoint: /bin/sh -c 'exec geth "$@"' --
-    command:
-      - --datadir=/data
-      - --db.engine=pebble
-      - --gcmode=archive
-      - --maxpeers=50
-      - --metrics
-      - --metrics.addr=0.0.0.0
-      - --metrics.port=6060
-      - --network=mainnet
-      - --nodiscover
-      - --rpc.gascap=600000000
-      - --rpc.txfeecap=0
-      - --state.scheme=hash
-      - --syncmode=full
-      - --http
-      - --http.addr=0.0.0.0
-      - --http.api=eth,net,web3,debug,admin,txpool,engine
-      - --http.port=8545
-      - --http.vhosts=*
-      - --ws
-      - --ws.addr=0.0.0.0
-      - --ws.api=eth,net,web3,debug,admin,txpool,engine
-      - --ws.origins=*
-      - --ws.port=8545
-      - --authrpc.addr=0.0.0.0
-      - --authrpc.jwtsecret=/jwtsecret
-      - --authrpc.vhosts=*
-    restart: unless-stopped
-    stop_grace_period: 5m
-    networks:
-      - chains
-    volumes:
-      - ${ZIRCUIT_MAINNET_OP_GETH_ARCHIVE_PEBBLE_HASH_DATA:-zircuit-mainnet-op-geth-archive-pebble-hash}:/data
-      - ./op/zircuit/mainnet:/config
-      - .jwtsecret:/jwtsecret:ro
-      - /slowdisk:/slowdisk
-    logging: *logging-defaults
-    labels:
-      - prometheus-scrape.enabled=true
-      - prometheus-scrape.port=6060
-      - prometheus-scrape.path=/debug/metrics/prometheus
-      - traefik.enable=true
-      - traefik.http.middlewares.zircuit-mainnet-op-geth-archive-pebble-hash-stripprefix.stripprefix.prefixes=/zircuit-mainnet-archive
-      - traefik.http.services.zircuit-mainnet-op-geth-archive-pebble-hash.loadbalancer.server.port=8545
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-archive-pebble-hash.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-archive-pebble-hash.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-archive-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/zircuit-mainnet-archive`) || Path(`/zircuit-mainnet-archive/`))}
-      - ${NO_SSL:+traefik.http.routers.zircuit-mainnet-op-geth-archive-pebble-hash.rule=Path(`/zircuit-mainnet-archive`) || Path(`/zircuit-mainnet-archive/`)}
-      - traefik.http.routers.zircuit-mainnet-op-geth-archive-pebble-hash.middlewares=zircuit-mainnet-op-geth-archive-pebble-hash-stripprefix, ipallowlist
-
-  zircuit-mainnet-archive-node:
-    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${MAINNET_NODE_VERSION:-v1.138.8}
-    user: root
-    ports:
-      - 15588:15588
-      - 15588:15588/udp
-    environment:
-      - OP_NODE_L1_BEACON=${ETHEREUM_MAINNET_BEACON_REST}
-      - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_MAINNET_BEACON_ARCHIVER}
-      - OP_NODE_L1_ETH_RPC=${MAINNET_L1_EXECUTION_RPC:-${ETHEREUM_MAINNET_EXECUTION_RPC}}
-      - OP_NODE_L1_RPC_KIND=${ETHEREUM_MAINNET_EXECUTION_KIND:-standard}
-      - OP_NODE_L1_TRUST_RPC=${ETHEREUM_MAINNET_EXECUTION_TRUST:-false}
-      - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
-      - OP_NODE_L2_ENGINE_RPC=http://zircuit-mainnet-archive:8551
-      - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
-      - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
-      - OP_NODE_LOG_LEVEL=info
-      - OP_NODE_METRICS_ADDR=0.0.0.0
-      - OP_NODE_METRICS_ENABLED=true
-      - OP_NODE_METRICS_PORT=7300
-      - OP_NODE_NETWORK=mainnet
-      - OP_NODE_P2P_ADVERTISE_IP=${IP}
-      - OP_NODE_P2P_LISTEN_IP=0.0.0.0
-      - OP_NODE_P2P_LISTEN_TCP_PORT=15588
-      - OP_NODE_P2P_LISTEN_UDP_PORT=15588
-      - OP_NODE_P2P_STATIC=/dns4/node1-eu-p2p.mainnet.zircuit.com/tcp/9003/p2p/16Uiu2HAm5Uxn3E8RXEM2e5YsR9VNM8uKoPmZzwQjqp7r64ZLspd5,/dns4/node2-eu-p2p.mainnet.zircuit.com/tcp/9003/p2p/16Uiu2HAmPoLg64PL2X2oLrUSmYaqAbkATPAMNRxLCZTBavUP8UEB,/dns4/node3-eu-p2p.mainnet.zircuit.com/tcp/9003/p2p/16Uiu2HAmB9iZKfv9RPRZj6JwcwjbwZWECFwJ67b1LJMHrczTnbjf
-      - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
-      - OP_NODE_RPC_ADDR=0.0.0.0
-      - OP_NODE_RPC_PORT=9545
-      - OP_NODE_SEQUENCER_ENABLED=false
-      - OP_NODE_SEQUENCER_L1_CONFS=0
-      - OP_NODE_SEQUENCER_MAX_SAFE_LAG=0
-      - OP_NODE_SEQUENCER_STOPPED=false
-      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
-      - OP_NODE_SYNCMODE=consensus-layer
-      - OP_NODE_VERIFIER_L1_CONFS=0
-    entrypoint: [op-node]
-    restart: unless-stopped
-    depends_on:
-      zircuit-mainnet-archive:
-        condition: service_started
-        restart: true
-    networks:
-      - chains
-    volumes:
-      - ./op/zircuit/mainnet:/config
-      - .jwtsecret:/jwtsecret:ro
-    logging: *logging-defaults
-    labels:
-      - prometheus-scrape.enabled=true
-      - prometheus-scrape.port=7300
-      - prometheus-scrape.path=/metrics
-      - traefik.enable=true
-      - traefik.http.middlewares.zircuit-mainnet-op-geth-archive-pebble-hash-node-stripprefix.stripprefix.prefixes=/zircuit-mainnet-archive/node
-      - traefik.http.services.zircuit-mainnet-op-geth-archive-pebble-hash-node.loadbalancer.server.port=9545
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-archive-pebble-hash-node.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-archive-pebble-hash-node.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-archive-pebble-hash-node.rule=Host(`$DOMAIN`) && PathPrefix(`/zircuit-mainnet-archive/node`)}
-      - ${NO_SSL:+traefik.http.routers.zircuit-mainnet-op-geth-archive-pebble-hash-node.rule=PathPrefix(`/zircuit-mainnet-archive/node`)}
-      - traefik.http.routers.zircuit-mainnet-op-geth-archive-pebble-hash-node.middlewares=zircuit-mainnet-op-geth-archive-pebble-hash-node-stripprefix, ipallowlist
-
-volumes:
-  zircuit-mainnet-op-geth-archive-pebble-hash:
-
-x-upstreams:
-  - id: $${ID}
-    labels:
-      provider: $${PROVIDER}
-    connection:
-      generic:
-        rpc:
-          url: $${RPC_URL}
-        ws:
-          frameSize: 20Mb
-          msgSize: 50Mb
-          url: $${WS_URL}
-    chain: zircuit-mainnet
-    method-groups:
-      enabled:
-        - debug
-        - filter
-    methods:
-      disabled:
-      enabled:
-        - name: txpool_content # TODO: should be disabled for rollup nodes
-        # standard geth only
-        - name: debug_getRawBlock
-        - name: debug_getRawTransaction
-        - name: debug_getRawReceipts
-        - name: debug_getRawHeader
-        - name: debug_getBadBlocks
-        # non standard geth only slightly dangerous
-        - name: debug_intermediateRoots
-        - name: debug_dumpBlock
-        # standard geth and erigon
-        - name: debug_accountRange
-        - name: debug_getModifiedAccountsByNumber
-        - name: debug_getModifiedAccountsByHash
-        # non standard geth and erigon
-        - name: eth_getRawTransactionByHash
-        - name: eth_getRawTransactionByBlockHashAndIndex
-        - name: zirc_getQuarantineHistory
-        - name: zirc_getQuarantined
-        - name: zirc_isQuarantined
-...
--- a/op/geth/zircuit-mainnet-op-geth-pruned-pebble-hash.yml
+++ b/op/geth/zircuit-mainnet-op-geth-pruned-pebble-hash.yml
@@ -1,214 +0,0 @@
---
-x-logging-defaults: &logging-defaults
-  driver: json-file
-  options:
-    max-size: "512m"
-    max-file: "2"
-
-# Usage:
-#
-# mkdir rpc && cd rpc
-#
-# git init
-# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
-# git fetch origin vibe
-# git checkout origin/vibe
-#
-# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
-#
-# env
-# ...
-# IP=$(curl ipinfo.io/ip)
-# DOMAIN=${IP}.traefik.me
-# COMPOSE_FILE=base.yml:rpc.yml:op/geth/zircuit-mainnet-op-geth-pruned-pebble-hash.yml
-#
-# docker compose up -d
-#
-# curl -X POST https://${IP}.traefik.me/zircuit-mainnet \
-#   -H "Content-Type: application/json" \
-#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
-
-services:
-  zircuit-mainnet:
-    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_MAINNET_GETH_VERSION:-v1.138.8}
-    sysctls:
-      # TCP Performance
-      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
-      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
-      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
-      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
-      net.core.somaxconn: 32768                   # Higher connection queue
-      # Memory/Connection Management
-      # net.core.netdev_max_backlog: 50000          # Increase network buffer
-      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
-      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
-    ulimits:
-      nofile: 1048576    # Max open files (for RPC/WS connections)
-    user: root
-    expose:
-      - 8545
-      - 6060
-      - 8551
-    environment:
-      - GETH_CONFIG=/config/gethconfig.toml
-      - GETH_ETHSTATS=d${DOMAIN}:${ZIRCUIT_MAINNET_WS_SECRET}@${ZIRCUIT_MAINNET_ETH_STATS_SERVER}:${ZIRCUIT_MAINNET_ETH_STATS_SERVER_PORT}
-      - GETH_ROLLUP_DISABLETXPOOLGOSSIP=true
-      - GETH_ROLLUP_SEQUENCERHTTP=https://proxyd-ingress-eu.mainnet.zircuit.com/?token=drpcvATEn3gsYCLyLw7ztFLCBwQNoDJr2QjpcsNNkksu
-      - GETH_TXPOOL_GLOBALQUEUE=1024
-      - ZIRCUIT_NETWORK=mainnet
-    entrypoint: /bin/sh -c 'exec geth "$@"' --
-    command:
-      - --datadir=/data
-      - --db.engine=pebble
-      - --gcmode=full
-      - --maxpeers=50
-      - --metrics
-      - --metrics.addr=0.0.0.0
-      - --metrics.port=6060
-      - --network=mainnet
-      - --nodiscover
-      - --rpc.gascap=600000000
-      - --rpc.txfeecap=0
-      - --state.scheme=hash
-      - --syncmode=full
-      - --http
-      - --http.addr=0.0.0.0
-      - --http.api=eth,net,web3,debug,admin,txpool,engine
-      - --http.port=8545
-      - --http.vhosts=*
-      - --ws
-      - --ws.addr=0.0.0.0
-      - --ws.api=eth,net,web3,debug,admin,txpool,engine
-      - --ws.origins=*
-      - --ws.port=8545
-      - --authrpc.addr=0.0.0.0
-      - --authrpc.jwtsecret=/jwtsecret
-      - --authrpc.vhosts=*
-    restart: unless-stopped
-    stop_grace_period: 5m
-    networks:
-      - chains
-    volumes:
-      - ${ZIRCUIT_MAINNET_OP_GETH_PRUNED_PEBBLE_HASH_DATA:-zircuit-mainnet-op-geth-pruned-pebble-hash}:/data
-      - ./op/zircuit/mainnet:/config
-      - .jwtsecret:/jwtsecret:ro
-      - /slowdisk:/slowdisk
-    logging: *logging-defaults
-    labels:
-      - prometheus-scrape.enabled=true
-      - prometheus-scrape.port=6060
-      - prometheus-scrape.path=/debug/metrics/prometheus
-      - traefik.enable=true
-      - traefik.http.middlewares.zircuit-mainnet-op-geth-pruned-pebble-hash-stripprefix.stripprefix.prefixes=/zircuit-mainnet
-      - traefik.http.services.zircuit-mainnet-op-geth-pruned-pebble-hash.loadbalancer.server.port=8545
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-hash.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-hash.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/zircuit-mainnet`) || Path(`/zircuit-mainnet/`))}
-      - ${NO_SSL:+traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-hash.rule=Path(`/zircuit-mainnet`) || Path(`/zircuit-mainnet/`)}
-      - traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-hash.middlewares=zircuit-mainnet-op-geth-pruned-pebble-hash-stripprefix, ipallowlist
-
-  zircuit-mainnet-node:
-    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${MAINNET_NODE_VERSION:-v1.138.8}
-    user: root
-    ports:
-      - 18688:18688
-      - 18688:18688/udp
-    environment:
-      - OP_NODE_L1_BEACON=${ETHEREUM_MAINNET_BEACON_REST}
-      - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_MAINNET_BEACON_ARCHIVER}
-      - OP_NODE_L1_ETH_RPC=${MAINNET_L1_EXECUTION_RPC:-${ETHEREUM_MAINNET_EXECUTION_RPC}}
-      - OP_NODE_L1_RPC_KIND=${ETHEREUM_MAINNET_EXECUTION_KIND:-standard}
-      - OP_NODE_L1_TRUST_RPC=${ETHEREUM_MAINNET_EXECUTION_TRUST:-false}
-      - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
-      - OP_NODE_L2_ENGINE_RPC=http://zircuit-mainnet:8551
-      - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
-      - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
-      - OP_NODE_LOG_LEVEL=info
-      - OP_NODE_METRICS_ADDR=0.0.0.0
-      - OP_NODE_METRICS_ENABLED=true
-      - OP_NODE_METRICS_PORT=7300
-      - OP_NODE_NETWORK=mainnet
-      - OP_NODE_P2P_ADVERTISE_IP=${IP}
-      - OP_NODE_P2P_LISTEN_IP=0.0.0.0
-      - OP_NODE_P2P_LISTEN_TCP_PORT=18688
-      - OP_NODE_P2P_LISTEN_UDP_PORT=18688
-      - OP_NODE_P2P_STATIC=/dns4/node1-eu-p2p.mainnet.zircuit.com/tcp/9003/p2p/16Uiu2HAm5Uxn3E8RXEM2e5YsR9VNM8uKoPmZzwQjqp7r64ZLspd5,/dns4/node2-eu-p2p.mainnet.zircuit.com/tcp/9003/p2p/16Uiu2HAmPoLg64PL2X2oLrUSmYaqAbkATPAMNRxLCZTBavUP8UEB,/dns4/node3-eu-p2p.mainnet.zircuit.com/tcp/9003/p2p/16Uiu2HAmB9iZKfv9RPRZj6JwcwjbwZWECFwJ67b1LJMHrczTnbjf
-      - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
-      - OP_NODE_RPC_ADDR=0.0.0.0
-      - OP_NODE_RPC_PORT=9545
-      - OP_NODE_SEQUENCER_ENABLED=false
-      - OP_NODE_SEQUENCER_L1_CONFS=0
-      - OP_NODE_SEQUENCER_MAX_SAFE_LAG=0
-      - OP_NODE_SEQUENCER_STOPPED=false
-      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
-      - OP_NODE_SYNCMODE=consensus-layer
-      - OP_NODE_VERIFIER_L1_CONFS=0
-    entrypoint: [op-node]
-    restart: unless-stopped
-    depends_on:
-      zircuit-mainnet:
-        condition: service_started
-        restart: true
-    networks:
-      - chains
-    volumes:
-      - ./op/zircuit/mainnet:/config
-      - .jwtsecret:/jwtsecret:ro
-    logging: *logging-defaults
-    labels:
-      - prometheus-scrape.enabled=true
-      - prometheus-scrape.port=7300
-      - prometheus-scrape.path=/metrics
-      - traefik.enable=true
-      - traefik.http.middlewares.zircuit-mainnet-op-geth-pruned-pebble-hash-node-stripprefix.stripprefix.prefixes=/zircuit-mainnet/node
-      - traefik.http.services.zircuit-mainnet-op-geth-pruned-pebble-hash-node.loadbalancer.server.port=9545
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-hash-node.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-hash-node.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-hash-node.rule=Host(`$DOMAIN`) && PathPrefix(`/zircuit-mainnet/node`)}
-      - ${NO_SSL:+traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-hash-node.rule=PathPrefix(`/zircuit-mainnet/node`)}
-      - traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-hash-node.middlewares=zircuit-mainnet-op-geth-pruned-pebble-hash-node-stripprefix, ipallowlist
-
-volumes:
-  zircuit-mainnet-op-geth-pruned-pebble-hash:
-
-x-upstreams:
-  - id: $${ID}
-    labels:
-      provider: $${PROVIDER}
-    connection:
-      generic:
-        rpc:
-          url: $${RPC_URL}
-        ws:
-          frameSize: 20Mb
-          msgSize: 50Mb
-          url: $${WS_URL}
-    chain: zircuit-mainnet
-    method-groups:
-      enabled:
-        - debug
-        - filter
-    methods:
-      disabled:
-      enabled:
-        - name: txpool_content # TODO: should be disabled for rollup nodes
-        # standard geth only
-        - name: debug_getRawBlock
-        - name: debug_getRawTransaction
-        - name: debug_getRawReceipts
-        - name: debug_getRawHeader
-        - name: debug_getBadBlocks
-        # non standard geth only slightly dangerous
-        - name: debug_intermediateRoots
-        - name: debug_dumpBlock
-        # standard geth and erigon
-        - name: debug_accountRange
-        - name: debug_getModifiedAccountsByNumber
-        - name: debug_getModifiedAccountsByHash
-        # non standard geth and erigon
-        - name: eth_getRawTransactionByHash
-        - name: eth_getRawTransactionByBlockHashAndIndex
-        - name: zirc_getQuarantineHistory
-        - name: zirc_getQuarantined
-        - name: zirc_isQuarantined
-...
--- a/op/geth/zircuit-mainnet-op-geth-pruned-pebble-path.yml
+++ b/op/geth/zircuit-mainnet-op-geth-pruned-pebble-path.yml
@@ -1,216 +0,0 @@
---
-x-logging-defaults: &logging-defaults
-  driver: json-file
-  options:
-    max-size: "512m"
-    max-file: "2"
-
-# Usage:
-#
-# mkdir rpc && cd rpc
-#
-# git init
-# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
-# git fetch origin vibe
-# git checkout origin/vibe
-#
-# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
-#
-# env
-# ...
-# IP=$(curl ipinfo.io/ip)
-# DOMAIN=${IP}.traefik.me
-# COMPOSE_FILE=base.yml:rpc.yml:op/geth/zircuit-mainnet-op-geth-pruned-pebble-path.yml
-#
-# docker compose up -d
-#
-# curl -X POST https://${IP}.traefik.me/zircuit-mainnet \
-#   -H "Content-Type: application/json" \
-#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
-
-services:
-  zircuit-mainnet:
-    image: ${ZIRCUIT_GETH_IMAGE:-zircuit1/l2-geth}:${ZIRCUIT_MAINNET_GETH_VERSION:-v1.138.8}
-    sysctls:
-      # TCP Performance
-      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
-      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
-      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
-      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
-      net.core.somaxconn: 32768                   # Higher connection queue
-      # Memory/Connection Management
-      # net.core.netdev_max_backlog: 50000          # Increase network buffer
-      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
-      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
-    ulimits:
-      nofile: 1048576    # Max open files (for RPC/WS connections)
-    user: root
-    expose:
-      - 8545
-      - 6060
-      - 8551
-    environment:
-      - GETH_CONFIG=/config/gethconfig.toml
-      - GETH_ETHSTATS=d${DOMAIN}:${ZIRCUIT_MAINNET_WS_SECRET}@${ZIRCUIT_MAINNET_ETH_STATS_SERVER}:${ZIRCUIT_MAINNET_ETH_STATS_SERVER_PORT}
-      - GETH_ROLLUP_DISABLETXPOOLGOSSIP=true
-      - GETH_ROLLUP_SEQUENCERHTTP=https://proxyd-ingress-eu.mainnet.zircuit.com/?token=drpcvATEn3gsYCLyLw7ztFLCBwQNoDJr2QjpcsNNkksu
-      - GETH_TXPOOL_GLOBALQUEUE=1024
-      - ZIRCUIT_NETWORK=mainnet
-    entrypoint: /bin/sh -c 'exec geth "$@"' --
-    command:
-      - --datadir=/data
-      - --db.engine=pebble
-      - --gcmode=full
-      - --maxpeers=50
-      - --metrics
-      - --metrics.addr=0.0.0.0
-      - --metrics.port=6060
-      - --network=mainnet
-      - --nodiscover
-      - --rpc.gascap=600000000
-      - --rpc.txfeecap=0
-      - --state.scheme=path
-      - --syncmode=full
-      - --http
-      - --http.addr=0.0.0.0
-      - --http.api=eth,net,web3,debug,admin,txpool,engine
-      - --http.port=8545
-      - --http.vhosts=*
-      - --ws
-      - --ws.addr=0.0.0.0
-      - --ws.api=eth,net,web3,debug,admin,txpool,engine
-      - --ws.origins=*
-      - --ws.port=8545
-      - --authrpc.addr=0.0.0.0
-      - --authrpc.jwtsecret=/jwtsecret
-      - --authrpc.vhosts=*
-    restart: unless-stopped
-    stop_grace_period: 5m
-    networks:
-      - chains
-    volumes:
-      - ${ZIRCUIT_MAINNET_OP_GETH_PRUNED_PEBBLE_PATH_DATA:-zircuit-mainnet-op-geth-pruned-pebble-path}:/data
-      - ./op/zircuit/mainnet:/config
-      - .jwtsecret:/jwtsecret:ro
-      - /slowdisk:/slowdisk
-    logging: *logging-defaults
-    labels:
-      - prometheus-scrape.enabled=true
-      - prometheus-scrape.port=6060
-      - prometheus-scrape.path=/debug/metrics/prometheus
-      - traefik.enable=true
-      - traefik.http.middlewares.zircuit-mainnet-op-geth-pruned-pebble-path-stripprefix.stripprefix.prefixes=/zircuit-mainnet
-      - traefik.http.services.zircuit-mainnet-op-geth-pruned-pebble-path.loadbalancer.server.port=8545
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-path.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-path.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/zircuit-mainnet`) || Path(`/zircuit-mainnet/`))}
-      - ${NO_SSL:+traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-path.rule=Path(`/zircuit-mainnet`) || Path(`/zircuit-mainnet/`)}
-      - traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-path.middlewares=zircuit-mainnet-op-geth-pruned-pebble-path-stripprefix, ipallowlist
-
-  zircuit-mainnet-node:
-    image: ${ZIRCUIT_NODE_IMAGE:-zircuit1/op-node}:${MAINNET_NODE_VERSION:-v1.138.8}
-    user: root
-    ports:
-      - 18359:18359
-      - 18359:18359/udp
-    environment:
-      - OP_NODE_L1_BEACON=${ETHEREUM_MAINNET_BEACON_REST}
-      - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_MAINNET_BEACON_ARCHIVER}
-      - OP_NODE_L1_ETH_RPC=${MAINNET_L1_EXECUTION_RPC:-${ETHEREUM_MAINNET_EXECUTION_RPC}}
-      - OP_NODE_L1_RPC_KIND=${ETHEREUM_MAINNET_EXECUTION_KIND:-standard}
-      - OP_NODE_L1_TRUST_RPC=${ETHEREUM_MAINNET_EXECUTION_TRUST:-false}
-      - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
-      - OP_NODE_L2_ENGINE_RPC=http://zircuit-mainnet:8551
-      - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
-      - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
-      - OP_NODE_LOG_LEVEL=info
-      - OP_NODE_METRICS_ADDR=0.0.0.0
-      - OP_NODE_METRICS_ENABLED=true
-      - OP_NODE_METRICS_PORT=7300
-      - OP_NODE_NETWORK=mainnet
-      - OP_NODE_P2P_ADVERTISE_IP=${IP}
-      - OP_NODE_P2P_LISTEN_IP=0.0.0.0
-      - OP_NODE_P2P_LISTEN_TCP_PORT=18359
-      - OP_NODE_P2P_LISTEN_UDP_PORT=18359
-      - OP_NODE_P2P_STATIC=/dns4/node1-eu-p2p.mainnet.zircuit.com/tcp/9003/p2p/16Uiu2HAm5Uxn3E8RXEM2e5YsR9VNM8uKoPmZzwQjqp7r64ZLspd5,/dns4/node2-eu-p2p.mainnet.zircuit.com/tcp/9003/p2p/16Uiu2HAmPoLg64PL2X2oLrUSmYaqAbkATPAMNRxLCZTBavUP8UEB,/dns4/node3-eu-p2p.mainnet.zircuit.com/tcp/9003/p2p/16Uiu2HAmB9iZKfv9RPRZj6JwcwjbwZWECFwJ67b1LJMHrczTnbjf
-      - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
-      - OP_NODE_RPC_ADDR=0.0.0.0
-      - OP_NODE_RPC_PORT=9545
-      - OP_NODE_SEQUENCER_ENABLED=false
-      - OP_NODE_SEQUENCER_L1_CONFS=0
-      - OP_NODE_SEQUENCER_MAX_SAFE_LAG=0
-      - OP_NODE_SEQUENCER_STOPPED=false
-      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
-      - OP_NODE_SYNCMODE=consensus-layer
-      - OP_NODE_VERIFIER_L1_CONFS=0
-    entrypoint: [op-node]
-    restart: unless-stopped
-    depends_on:
-      zircuit-mainnet:
-        condition: service_started
-        restart: true
-    networks:
-      - chains
-    volumes:
-      - ./op/zircuit/mainnet:/config
-      - .jwtsecret:/jwtsecret:ro
-    logging: *logging-defaults
-    labels:
-      - prometheus-scrape.enabled=true
-      - prometheus-scrape.port=7300
-      - prometheus-scrape.path=/metrics
-      - traefik.enable=true
-      - traefik.http.middlewares.zircuit-mainnet-op-geth-pruned-pebble-path-node-stripprefix.stripprefix.prefixes=/zircuit-mainnet/node
-      - traefik.http.services.zircuit-mainnet-op-geth-pruned-pebble-path-node.loadbalancer.server.port=9545
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-path-node.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-path-node.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-path-node.rule=Host(`$DOMAIN`) && PathPrefix(`/zircuit-mainnet/node`)}
-      - ${NO_SSL:+traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-path-node.rule=PathPrefix(`/zircuit-mainnet/node`)}
-      - traefik.http.routers.zircuit-mainnet-op-geth-pruned-pebble-path-node.middlewares=zircuit-mainnet-op-geth-pruned-pebble-path-node-stripprefix, ipallowlist
-
-volumes:
-  zircuit-mainnet-op-geth-pruned-pebble-path:
-
-x-upstreams:
-  - id: $${ID}
-    labels:
-      provider: $${PROVIDER}
-    connection:
-      generic:
-        rpc:
-          url: $${RPC_URL}
-        ws:
-          frameSize: 20Mb
-          msgSize: 50Mb
-          url: $${WS_URL}
-    chain: zircuit-mainnet
-    method-groups:
-      enabled:
-        - debug
-        - filter
-    methods:
-      disabled:
-        # not compatible with path state scheme
-        - name: debug_traceBlockByHash
-      enabled:
-        - name: txpool_content # TODO: should be disabled for rollup nodes
-        # standard geth only
-        - name: debug_getRawBlock
-        - name: debug_getRawTransaction
-        - name: debug_getRawReceipts
-        - name: debug_getRawHeader
-        - name: debug_getBadBlocks
-        # non standard geth only slightly dangerous
-        - name: debug_intermediateRoots
-        - name: debug_dumpBlock
-        # standard geth and erigon
-        - name: debug_accountRange
-        - name: debug_getModifiedAccountsByNumber
-        - name: debug_getModifiedAccountsByHash
-        # non standard geth and erigon
-        - name: eth_getRawTransactionByHash
-        - name: eth_getRawTransactionByBlockHashAndIndex
-        - name: zirc_getQuarantineHistory
-        - name: zirc_getQuarantined
-        - name: zirc_isQuarantined
-...
--- a/op/reth/soneium-minato-sepolia-op-reth-archive-trace.yml
+++ b/op/reth/soneium-minato-sepolia-op-reth-archive-trace.yml
@@ -67,7 +67,7 @@ services:
      - --metrics=0.0.0.0:9001
      - --nat=extip:${IP}
      - --port=14829
-      - --rollup.sequencer-http=https://rpc.soneium.org
+      - --rollup.sequencer-http=https://rpc.minato.soneium.org
      - --rpc-cache.max-blocks=10000
      - --rpc-cache.max-concurrent-db-requests=2048
      - --rpc.gascap=600000000
@@ -181,7 +181,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain: soneium
+    chain: soneium-minato
    method-groups:
      enabled:
        - debug
--- a/op/reth/soneium-minato-sepolia-op-reth-pruned-trace.yml
+++ b/op/reth/soneium-minato-sepolia-op-reth-pruned-trace.yml
@@ -68,7 +68,7 @@ services:
      - --metrics=0.0.0.0:9001
      - --nat=extip:${IP}
      - --port=13724
-      - --rollup.sequencer-http=https://rpc.soneium.org
+      - --rollup.sequencer-http=https://rpc.minato.soneium.org
      - --rpc-cache.max-blocks=10000
      - --rpc-cache.max-concurrent-db-requests=2048
      - --rpc.gascap=600000000
@@ -182,7 +182,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain: soneium
+    chain: soneium-minato
    method-groups:
      enabled:
        - debug
--- a/op/reth/zircuit-garfield-op-reth-pruned-trace.yml
+++ b/op/reth/zircuit-garfield-op-reth-pruned-trace.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  zircuit-garfield-op-reth-pruned:
-    image: ${ZIRCUIT_RETH_IMAGE:-ghcr.io/conduitxyz/conduit-op-reth}:${ZIRCUIT_GARFIELD_RETH_VERSION:-v2.1.1}
+    image: ${ZIRCUIT_RETH_IMAGE:-ghcr.io/conduitxyz/conduit-op-reth}:${ZIRCUIT_GARFIELD_RETH_VERSION:-v2.1.2}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -184,7 +184,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain: zircuit-testnet
+    chain: zircuit-garfield-testnet
    method-groups:
      enabled:
        - debug
--- a/op/reth/zircuit-mainnet-op-reth-pruned-trace.yml
+++ b/op/reth/zircuit-mainnet-op-reth-pruned-trace.yml
@@ -0,0 +1,200 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:op/reth/zircuit-mainnet-op-reth-pruned-trace.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/zircuit-mainnet-op-reth-pruned \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  zircuit-mainnet-op-reth-pruned:
+    image: ${ZIRCUIT_RETH_IMAGE:-ghcr.io/conduitxyz/conduit-op-reth}:${ZIRCUIT_MAINNET_RETH_VERSION:-v2.1.2}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: root
+    expose:
+      - 8545
+      - 9001
+      - 8551
+    entrypoint: [op-reth, node]
+    command:
+      - --chain=/config/genesis.json
+      - --config=/config/reth/reth.toml
+      - --datadir=/root/.local/share/reth
+      - --disable-discovery
+      - --engine.cross-block-cache-size=${ZIRCUIT_MAINNET_RETH_STATE_CACHE:-4096}
+      - --full
+      - --max-inbound-peers=50
+      - --max-outbound-peers=50
+      - --metrics=0.0.0.0:9001
+      - --rollup.sequencer-http=https://proxyd-ingress-eu.mainnet.zircuit.com/?token=drpcvATEn3gsYCLyLw7ztFLCBwQNoDJr2QjpcsNNkksu
+      - --rpc-cache.max-blocks=10000
+      - --rpc-cache.max-concurrent-db-requests=2048
+      - --rpc.gascap=600000000
+      - --rpc.max-blocks-per-filter=0
+      - --rpc.max-connections=50000
+      - --rpc.max-logs-per-response=0
+      - --rpc.max-trace-filter-blocks=10000
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=admin,debug,eth,net,trace,txpool,web3,rpc,reth,ots,flashbots,mev
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --ws
+      - --ws.addr=0.0.0.0
+      - --ws.api=admin,debug,eth,net,trace,txpool,web3,rpc,reth,ots,flashbots,mev
+      - --ws.origins=*
+      - --ws.port=8545
+      - --authrpc.addr=0.0.0.0
+      - --authrpc.jwtsecret=/jwtsecret
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ZIRCUIT_MAINNET_OP_RETH_PRUNED_TRACE_DATA:-zircuit-mainnet-op-reth-pruned-trace}:/root/.local/share/reth
+      - ./op/zircuit/mainnet:/config
+      - .jwtsecret:/jwtsecret:ro
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=9001
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.zircuit-mainnet-op-reth-pruned-trace-stripprefix.stripprefix.prefixes=/zircuit-mainnet-op-reth-pruned
+      - traefik.http.services.zircuit-mainnet-op-reth-pruned-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-reth-pruned-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-reth-pruned-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-reth-pruned-trace.rule=Host(`$DOMAIN`) && (Path(`/zircuit-mainnet-op-reth-pruned`) || Path(`/zircuit-mainnet-op-reth-pruned/`))}
+      - ${NO_SSL:+traefik.http.routers.zircuit-mainnet-op-reth-pruned-trace.rule=Path(`/zircuit-mainnet-op-reth-pruned`) || Path(`/zircuit-mainnet-op-reth-pruned/`)}
+      - traefik.http.routers.zircuit-mainnet-op-reth-pruned-trace.middlewares=zircuit-mainnet-op-reth-pruned-trace-stripprefix, ipallowlist
+    shm_size: 2gb
+
+  zircuit-mainnet-op-reth-pruned-node:
+    image: ${ZIRCUIT_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${MAINNET_NODE_VERSION:-v1.19.3}
+    user: root
+    ports:
+      - 17481:17481
+      - 17481:17481/udp
+    environment:
+      - OP_NODE_L1_BEACON=${ETHEREUM_MAINNET_BEACON_REST}
+      - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_MAINNET_BEACON_ARCHIVER}
+      - OP_NODE_L1_ETH_RPC=${MAINNET_L1_EXECUTION_RPC:-${ETHEREUM_MAINNET_EXECUTION_RPC}}
+      - OP_NODE_L1_RPC_KIND=${ETHEREUM_MAINNET_EXECUTION_KIND:-standard}
+      - OP_NODE_L1_TRUST_RPC=${ETHEREUM_MAINNET_EXECUTION_TRUST:-false}
+      - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
+      - OP_NODE_L2_ENGINE_KIND=reth
+      - OP_NODE_L2_ENGINE_RPC=http://zircuit-mainnet-op-reth-pruned:8551
+      - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
+      - OP_NODE_L2_SKIP_SYNC_START_CHECK=true
+      - OP_NODE_LOG_LEVEL=info
+      - OP_NODE_METRICS_ADDR=0.0.0.0
+      - OP_NODE_METRICS_ENABLED=true
+      - OP_NODE_METRICS_PORT=7300
+      - OP_NODE_P2P_ADVERTISE_IP=${IP}
+      - OP_NODE_P2P_BOOTNODES=enode://de9f4784612b7523dc029a38091139aafae293c2f7d17c11bce8579f6246782216a7d61599fb001c38042e8e6ac6a0cdafd1a26d37743e5439bc3d4d6680f7df@35.185.208.192:9222?discport=30301,enode://d25ce99435982b04d60c4b41ba256b84b888626db7bee45a9419382300fbe907359ae5ef250346785bff8d3b9d07cd3e017a27e2ee3cfda3bcbb0ba762ac9674@bootnode.conduit.xyz:0?discport=30301,enode://2d4e7e9d48f4dd4efe9342706dd1b0024681bd4c3300d021f86fc75eab7865d4e0cbec6fbc883f011cfd6a57423e7e2f6e104baad2b744c3cafaec6bc7dc92c1@34.65.43.171:0?discport=30305,enode://9d7a3efefe442351217e73b3a593bcb8efffb55b4807699972145324eab5e6b382152f8d24f6301baebbfb5ecd4127bd3faab2842c04cd432bdf50ba092f6645@34.65.109.126:0?discport=30305
+      - OP_NODE_P2P_LISTEN_IP=0.0.0.0
+      - OP_NODE_P2P_LISTEN_TCP_PORT=17481
+      - OP_NODE_P2P_LISTEN_UDP_PORT=17481
+      - OP_NODE_P2P_STATIC=/ip4/35.185.208.192/tcp/9222/p2p/16Uiu2HAmTe1j7ubQUanCiUSQs7K7SzkWxdrfDUP9GifkMoC2osLm
+      - OP_NODE_ROLLUP_CONFIG=/config/rollup.json
+      - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
+      - OP_NODE_RPC_ADDR=0.0.0.0
+      - OP_NODE_RPC_PORT=9545
+      - OP_NODE_SEQUENCER_ENABLED=false
+      - OP_NODE_SEQUENCER_L1_CONFS=0
+      - OP_NODE_SEQUENCER_MAX_SAFE_LAG=0
+      - OP_NODE_SEQUENCER_STOPPED=false
+      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
+      - OP_NODE_SYNCMODE=consensus-layer
+      - OP_NODE_VERIFIER_L1_CONFS=0
+    entrypoint: [op-node]
+    restart: unless-stopped
+    depends_on:
+      zircuit-mainnet-op-reth-pruned:
+        condition: service_started
+        restart: true
+    networks:
+      - chains
+    volumes:
+      - ./op/zircuit/mainnet:/config
+      - .jwtsecret:/jwtsecret:ro
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=7300
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.zircuit-mainnet-op-reth-pruned-trace-node-stripprefix.stripprefix.prefixes=/zircuit-mainnet-op-reth-pruned/node
+      - traefik.http.services.zircuit-mainnet-op-reth-pruned-trace-node.loadbalancer.server.port=9545
+      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-reth-pruned-trace-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-reth-pruned-trace-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.zircuit-mainnet-op-reth-pruned-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/zircuit-mainnet-op-reth-pruned/node`)}
+      - ${NO_SSL:+traefik.http.routers.zircuit-mainnet-op-reth-pruned-trace-node.rule=PathPrefix(`/zircuit-mainnet-op-reth-pruned/node`)}
+      - traefik.http.routers.zircuit-mainnet-op-reth-pruned-trace-node.middlewares=zircuit-mainnet-op-reth-pruned-trace-node-stripprefix, ipallowlist
+
+volumes:
+  zircuit-mainnet-op-reth-pruned-trace:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: zircuit-mainnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      disabled:
+        - name: eth_maxPriorityFeePerGas
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        - name: zirc_getQuarantineHistory
+        - name: zirc_getQuarantined
+        - name: zirc_isQuarantined
+...
--- a/op/zircuit/mainnet/genesis.json
+++ b/op/zircuit/mainnet/genesis.json
--- a/op/zircuit/mainnet/gethconfig.toml
+++ b/op/zircuit/mainnet/gethconfig.toml
--- a/op/zircuit/mainnet/rollup.json
+++ b/op/zircuit/mainnet/rollup.json
@@ -0,0 +1,44 @@
+{
+  "genesis": {
+    "l1": {
+      "hash": "0xf03d3d2e16e6d3512472719b04087404b9d229fd9319df354de978f9eac4b782",
+      "number": 25681768
+    },
+    "l2": {
+      "hash": "0x739969caccf91d17020409893e4ba2bb25957a1f80c8821322a2136eea0709b5",
+      "number": 32956468
+    },
+    "l2_time": 1785849151,
+    "system_config": {
+      "batcherAddr": "0xcf8225801df6ef90ad3bc86808f574403a309de8",
+      "overhead": "0x0000000000000000000000000000000000000000000000000000000000000000",
+      "scalar": "0x010000000000000000000000000000000000000000000000000d273000001db0",
+      "gasLimit": 30000000,
+      "eip1559Params": "0x0000000000000000",
+      "operatorFeeParams": "0x0000000000000000000000000000000000000000000000000000000000000000"
+    }
+  },
+  "block_time": 2,
+  "max_sequencer_drift": 1800,
+  "seq_window_size": 3600,
+  "channel_timeout": 300,
+  "l1_chain_id": 1,
+  "l2_chain_id": 48900,
+  "regolith_time": 0,
+  "canyon_time": 0,
+  "delta_time": 0,
+  "ecotone_time": 0,
+  "fjord_time": 0,
+  "granite_time": 0,
+  "holocene_time": 0,
+  "isthmus_time": 0,
+  "batch_inbox_address": "0xff00000000000000000000000000000000048900",
+  "deposit_contract_address": "0x17bfafa932d2e23bd9b909fd5b4d2e2a27043fb1",
+  "l1_system_config_address": "0x30f82a1ca89226e8b8815d6ebb728e3b18a428ff",
+  "protocol_versions_address": "0x0000000000000000000000000000000000000000",
+  "chain_op_config": {
+    "eip1559Elasticity": 6,
+    "eip1559Denominator": 50,
+    "eip1559DenominatorCanyon": 250
+  }
+}
--- a/reference-rpc-endpoint.json
+++ b/reference-rpc-endpoint.json
@@ -216,6 +216,7 @@
      "https://bsc-dataseed3.ninicoin.io",
      "https://bsc-dataseed4.ninicoin.io",
      "https://bsc-rpc.publicnode.com",
+      "https://bsc-rpc-public.chainpulse.cc",
      "https://bsc.drpc.org"
    ]
  },
@@ -233,6 +234,7 @@
      "https://data-seed-prebsc-1-s3.bnbchain.org:8545",
      "https://data-seed-prebsc-2-s3.bnbchain.org:8545",
      "https://bsc-testnet-rpc.publicnode.com",
+      "https://bsc-rpc-public.chainpulse.cc/testnet",
      "https://bsc-testnet.drpc.org"
    ]
  },
@@ -3366,6 +3368,16 @@
      "https://mova.drpc.org"
    ]
  },
+  "mova-mainnet-v2": {
+    "protocol": "eth",
+    "id": 61901,
+    "block_time_ms": 2000,
+    "lagging_lag": 10,
+    "syncing_lag": 20,
+    "urls": [
+      "https://mova-mainnet-v2.drpc.org"
+    ]
+  },
  "mova-testnet": {
    "protocol": "eth",
    "id": 10323,
@@ -3635,6 +3647,7 @@
    "lagging_lag": 10,
    "syncing_lag": 20,
    "urls": [
+      "https://rpc.pharos.xyz",
      "https://pharos.drpc.org"
    ]
  },
@@ -3720,6 +3733,7 @@
    "lagging_lag": 20,
    "syncing_lag": 40,
    "urls": [
+      "https://humanity-main.g.alchemy.com/public",
      "https://humanity.drpc.org"
    ]
  },
--- a/restore-volumes.sh
+++ b/restore-volumes.sh
@@ -168,6 +168,13 @@ while IFS= read -r key; do
    fi

    if [ -z "$newest_file" ]; then
+	# Check if this volume is optional or ephemeral - if so, warn and continue
+	if is_ephemeral_volume_key "$key" "$dir/$1.yml" || is_optional_volume_key "$key" "$dir/$1.yml"; then
+		echo "WARN: No backup found for volume 'rpc_$key' (volume is optional/ephemeral) - creating empty volume"
+		# Create empty volume and continue
+		mkdir -p "$data_dir"
+		continue
+	fi
 	echo "Error: No backup found for volume 'rpc_$key'"
 	exit 1
    fi
--- a/ronin/ronin/ronin-saigon-ronin-archive-leveldb-hash.yml
+++ b/ronin/ronin/ronin-saigon-ronin-archive-leveldb-hash.yml
@@ -56,7 +56,7 @@ services:
      - DEPLOYMENT=test
      - ETHSTATS_ENDPOINT=d${DOMAIN}:WSyDMrhRBe111@ronin-stats-ws.roninchain.com:443
      - MINE=false
-      - NETWORK_ID=2021
+      - NETWORK_ID=202601
      - NETWORK_PORT=12612
      - PASSWORD=stupidpassword
      - STATE_SCHEME=hash
@@ -110,7 +110,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain:
+    chain: ronin-saigon
    method-groups:
      enabled:
        - debug
--- a/ronin/ronin/ronin-saigon-ronin-pruned-pebble-hash.yml
+++ b/ronin/ronin/ronin-saigon-ronin-pruned-pebble-hash.yml
@@ -56,7 +56,7 @@ services:
      - DEPLOYMENT=test
      - ETHSTATS_ENDPOINT=d${DOMAIN}:WSyDMrhRBe111@ronin-stats-ws.roninchain.com:443
      - MINE=false
-      - NETWORK_ID=2021
+      - NETWORK_ID=202601
      - NETWORK_PORT=10493
      - PASSWORD=stupidpassword
      - STATE_SCHEME=hash
@@ -110,7 +110,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain:
+    chain: ronin-saigon
    method-groups:
      enabled:
        - debug
--- a/ronin/ronin/ronin-saigon-ronin-pruned-pebble-path.yml
+++ b/ronin/ronin/ronin-saigon-ronin-pruned-pebble-path.yml
@@ -56,7 +56,7 @@ services:
      - DEPLOYMENT=test
      - ETHSTATS_ENDPOINT=d${DOMAIN}:WSyDMrhRBe111@ronin-stats-ws.roninchain.com:443
      - MINE=false
-      - NETWORK_ID=2021
+      - NETWORK_ID=202601
      - NETWORK_PORT=13559
      - PASSWORD=stupidpassword
      - STATE_SCHEME=path
@@ -110,7 +110,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain:
+    chain: ronin-saigon
    method-groups:
      enabled:
        - debug
--- a/sonic/sonic/sonic-testnet-sonic-archive.yml
+++ b/sonic/sonic/sonic-testnet-sonic-archive.yml
@@ -126,7 +126,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain: sonic-testnet
+    chain: sonic-testnet-v2
    method-groups:
      enabled:
        - debug
--- a/sonic/sonic/sonic-testnet-sonic-pruned.yml
+++ b/sonic/sonic/sonic-testnet-sonic-pruned.yml
@@ -126,7 +126,7 @@ x-upstreams:
          frameSize: 20Mb
          msgSize: 50Mb
          url: $${WS_URL}
-    chain: sonic-testnet
+    chain: sonic-testnet-v2
    method-groups:
      enabled:
        - debug
--- a/tempo/reth/tempo-mainnet-reth-archive-trace.yml
+++ b/tempo/reth/tempo-mainnet-reth-archive-trace.yml
@@ -32,7 +32,7 @@ x-logging-defaults: &logging-defaults

 services:
  tempo-mainnet-reth-init:
-    image: ${TEMPO_RETH_IMAGE:-ghcr.io/tempoxyz/tempo}:${TEMPO_CONSENSUS_KEYGEN_VERSION:-1.10.2}
+    image: ${TEMPO_RETH_IMAGE:-ghcr.io/tempoxyz/tempo}:${TEMPO_CONSENSUS_KEYGEN_VERSION:-1.12.0}
    entrypoint: [/bin/sh, -c]
    command:
      - if [ ! -f /secrets/validator_key.json ]; then tempo consensus generate-signing-key --output /secrets/validator_key.json; fi
@@ -44,7 +44,7 @@ services:
    logging: *logging-defaults

  tempo-mainnet-reth:
-    image: ${TEMPO_RETH_IMAGE:-ghcr.io/tempoxyz/tempo}:${TEMPO_MAINNET_RETH_VERSION:-1.10.2}
+    image: ${TEMPO_RETH_IMAGE:-ghcr.io/tempoxyz/tempo}:${TEMPO_MAINNET_RETH_VERSION:-1.12.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/tempo/reth/tempo-mainnet-reth-pruned-trace.yml
+++ b/tempo/reth/tempo-mainnet-reth-pruned-trace.yml
@@ -32,7 +32,7 @@ x-logging-defaults: &logging-defaults

 services:
  tempo-mainnet-reth-pruned-init:
-    image: ${TEMPO_RETH_IMAGE:-ghcr.io/tempoxyz/tempo}:${TEMPO_CONSENSUS_KEYGEN_VERSION:-1.10.2}
+    image: ${TEMPO_RETH_IMAGE:-ghcr.io/tempoxyz/tempo}:${TEMPO_CONSENSUS_KEYGEN_VERSION:-1.12.0}
    entrypoint: [/bin/sh, -c]
    command:
      - if [ ! -f /secrets/validator_key.json ]; then tempo consensus generate-signing-key --output /secrets/validator_key.json; fi
@@ -44,7 +44,7 @@ services:
    logging: *logging-defaults

  tempo-mainnet-reth-pruned:
-    image: ${TEMPO_RETH_IMAGE:-ghcr.io/tempoxyz/tempo}:${TEMPO_MAINNET_RETH_VERSION:-1.10.2}
+    image: ${TEMPO_RETH_IMAGE:-ghcr.io/tempoxyz/tempo}:${TEMPO_MAINNET_RETH_VERSION:-1.12.0}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/utils/drpc-edge-regions.tsv
+++ b/utils/drpc-edge-regions.tsv
@@ -32,3 +32,4 @@
 72.46.86.0/24	asia-northeast	Tokyo	AS396356-latitude
 72.46.87.0/24	asia-southeast	Singapore	AS396356-latitude
 177.54.154.0/24	asia-southeast	Singapore	AS396356-latitude
+168.119.195.0/24	eu-west2	Falkenstein	AS24940-hetzner
--- a/volume-utils.sh
+++ b/volume-utils.sh
@@ -218,6 +218,22 @@ is_ephemeral_volume_key() {
  return 1
 }

+is_optional_volume_key() {
+  local key=$1
+  local compose_file=$2
+
+  if [[ -n "$compose_file" && -f "$compose_file" ]]; then
+    local optional
+    optional=$(yaml2json < "$compose_file" 2>/dev/null | jq -r '.["x-optional-volumes"] // [] | .[]' 2>/dev/null)
+    while IFS= read -r vol; do
+      [[ -z "$vol" ]] && continue
+      [[ "$key" == "$vol" ]] && return 0
+    done <<< "$optional"
+  fi
+
+  return 1
+}
+
 get_volume_keys() {
  local compose_file=$1
  yaml2json < "$compose_file" 2>/dev/null | jq -r '.volumes | keys[]' 2>/dev/null
--- a/zero-gravity/geth/zero-gravity-aristotle-geth-pruned-pebble-path.yml
+++ b/zero-gravity/geth/zero-gravity-aristotle-geth-pruned-pebble-path.yml
@@ -35,7 +35,7 @@ services:
      context: ./zero-gravity
      dockerfile: zerog.Dockerfile
      args:
-        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_ARISTOTLE_ZEROG_VERSION:-3.0.3}
+        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_ARISTOTLE_ZEROG_VERSION:-1.0.6}
        ZERO_GRAVITY_CHAIN_SPEC: aristotle
    sysctls:
      # TCP Performance
@@ -118,7 +118,7 @@ services:
      context: ./zero-gravity
      dockerfile: zerog.Dockerfile
      args:
-        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_ARISTOTLE_ZEROG_VERSION:-3.0.3}
+        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_ARISTOTLE_ZEROG_VERSION:-1.0.6}
        ZERO_GRAVITY_CHAIN_SPEC: aristotle
    ports:
      - 19914:19914
--- a/zero-gravity/geth/zero-gravity-galileo-geth-pruned-pebble-path.yml
+++ b/zero-gravity/geth/zero-gravity-galileo-geth-pruned-pebble-path.yml
@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
  driver: json-file
  options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 # this snapshots works https://services.shachopra.com/zero-gravity-galileo-testnet/0g-validator-snapshot

 # Usage:
@@ -35,7 +35,7 @@ services:
      context: ./zero-gravity
      dockerfile: zerog.Dockerfile
      args:
-        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_GALILEO_ZEROG_VERSION:-3.0.3}
+        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_GALILEO_ZEROG_VERSION:-3.0.8}
        ZERO_GRAVITY_CHAIN_SPEC: galileo
    sysctls:
      # TCP Performance
@@ -62,7 +62,7 @@ services:
      - CHAIN_NAME=galileo
    entrypoint: [/usr/local/bin/init.sh, geth]
    command:
-      - --bootnodes=enode://de7b86d8ac452b1413983049c20eafa2ea0851a3219c2cc12649b971c1677bd83fe24c5331e078471e52a94d95e8cde84cb9d866574fec957124e57ac6056699@8.218.88.60:30303
+      - --bootnodes=enode://4c94b9ab893ee17f58505b48b53d6c02d52bd5567e5fc6c028a29ad25ce1d553286a7fe3a6c051ba18c466b196762ab0e92695d6abbaf7f70afcca2e165bca8c@34.82.252.10:30303
      - --config /0g/geth-config.toml
      - --datadir=/root/.ethereum
      - --db.engine=pebble
@@ -72,7 +72,7 @@ services:
      - --metrics.addr=0.0.0.0
      - --metrics.port=6060
      - --nat=extip:${IP}
-      - --networkid=16601
+      - --networkid=16602
      - --port=11172
      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
@@ -118,7 +118,7 @@ services:
      context: ./zero-gravity
      dockerfile: zerog.Dockerfile
      args:
-        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_GALILEO_ZEROG_VERSION:-3.0.3}
+        ZERO_GRAVITY_VERSION: ${ZERO_GRAVITY_GALILEO_ZEROG_VERSION:-3.0.8}
        ZERO_GRAVITY_CHAIN_SPEC: galileo
    ports:
      - 16172:16172
@@ -140,7 +140,7 @@ services:
      - --chaincfg.node-api.logging
      - --home=/root/.0g
      - --p2p.external_address=${IP}:16172
-      - --p2p.seeds=${ZERO_GRAVITY_GALILEO_ZEROG_SEEDS:-85a9b9a1b7fa0969704db2bc37f7c100855a75d9@8.218.88.60:26656}
+      - --p2p.seeds=${ZERO_GRAVITY_GALILEO_ZEROG_SEEDS:-e0750abc061d276894a593c7b671913c14aa4ecc@34.82.252.10:26656}
      - --pruning=default
      - --rpc.laddr=tcp://0.0.0.0:16172
    restart: unless-stopped
--- a/zero-gravity/scripts/init.sh
+++ b/zero-gravity/scripts/init.sh
@@ -61,23 +61,41 @@ env

 # seems to be the same for all the 0g chains

-if [ ! -f "$DATA_DIR/priv_validator_state.json" ]; then
-    echo "priv_validator_state.json not found in $HOME_DIR. Proceeding with initialization steps..."
+# $DATA_DIR and $CONFIG_DIR are SEPARATE docker volumes (<node>_zerog and <node>_config),
+# so the presence of a file in one says nothing about the other. Guard on everything
+# 0gchaind actually needs to boot, and write the copies so the LAST file written is the
+# one that would make a re-run skip.
+#
+# The previous version guarded solely on $DATA_DIR/priv_validator_state.json and copied it
+# BEFORE the two key files. An init interrupted between those copies therefore left the
+# data volume with the guard file and the config volume without the keys, so every later
+# start took the "Already initialized" branch, copied nothing, and 0gchaind panicked:
+#
+#   panic: error calling provider ProvideBlsSigner (node-core/components/signer.go:46):
+#          key file does not exist at path: /root/.0g/config/priv_validator_key.json
+#
+# That state is unrecoverable by restarting - the node wedges permanently. Hit on
+# aristotle @ rpc-de-32 on 2026-08-12 after repeated build failures interrupted its init.
+if [ ! -f "$CONFIG_DIR/priv_validator_key.json" ] || \
+   [ ! -f "$CONFIG_DIR/node_key.json" ] || \
+   [ ! -f "$DATA_DIR/priv_validator_state.json" ]; then
+    echo "0g: node identity incomplete (config keys and/or priv_validator_state.json). Initializing..."
    TMP_DIR=$(mktemp -d)
    # You can add any additional initialization logic here if needed
    if /0g/bin/0gchaind init ${MONIKER} --chaincfg.chain-spec ${CHAIN_SPEC} --home $TMP_DIR; then
        cp -r /0g/0g-home/0gchaind-home/config/* $CONFIG_DIR
-        cp $TMP_DIR/data/priv_validator_state.json $DATA_DIR
+        # Keys first, guard file last: if this is interrupted the next start re-runs
+        # initialization instead of latching into the wedged state described above.
        cp $TMP_DIR/config/node_key.json $CONFIG_DIR
        cp $TMP_DIR/config/priv_validator_key.json $CONFIG_DIR
+        cp $TMP_DIR/data/priv_validator_state.json $DATA_DIR
    else
        echo "Already initialized, continuing!" >&2
    fi
    rm -rf $TMP_DIR # delete tmp dir

 else
-    echo "priv_validator_state.json found in $HOME_DIR. Continuing!" >&2
-    echo "Already initialized, continuing!" >&2
+    echo "0g: node identity complete (config keys + priv_validator_state.json). Continuing!" >&2
 fi

 exec /0g/bin/0gchaind $@
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Claude Agent	92cdb31d17	zero-gravity: init guard must check the CONFIG volume, not a data-volume proxy aristotle @ rpc-de-32 crash-looped after its build was fixed: priv_validator_state.json found in /root/.0g. Continuing! Already initialized, continuing! panic: ProvideBlsSigner (node-core/components/signer.go:46): key file does not exist at path: /root/.0g/config/priv_validator_key.json $DATA_DIR and $CONFIG_DIR are SEPARATE docker volumes (<node>_zerog and <node>_config), but the guard tested only $DATA_DIR/priv_validator_state.json — inferring the state of the config volume from a file on the data volume. Worse, the copy order wrote that guard file BEFORE the two key files, so an init interrupted between them left the data volume with the guard and the config volume without the keys. Every later start then took the 'Already initialized' branch, copied nothing, and panicked. Unrecoverable by restarting: the node wedges permanently. aristotle got there via the repeated build failures earlier today. Fix, two parts: - guard on everything 0gchaind needs to boot (both config keys AND the data state file), not one proxy file on the wrong volume; - write the keys FIRST and the guard file LAST, so an interrupted init re-runs on the next start instead of latching into the wedged state. Tested locally against the real 0gchaind binary (aristotle v1.0.6), sandboxed HOME: scenario before after fresh volumes keys created keys created (no regression) wedged (state, no keys) keys MISSING keys created (unwedges) partial (state+node_key) keys MISSING keys created healthy (all present) no re-init no re-init, and a SENTINEL written into priv_validator_key.json survives -> never clobbers an initialized node The 'wedged' row reproduces aristotle's production failure exactly. Note this regenerates node identity on an affected node (node_key.json, priv_validator_key.json). These are RPC nodes that never sign, so a fresh identity is harmless; chain data on the _zerog volume is untouched. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-12 19:33:48 +00:00
Claude Agent	4a060bee0d	deploy: regenerate compose from vibe-node main 3c848087f5c8	2026-08-12 17:37:46 +00:00
Claude Agent	4db13b2fc4	deploy: regenerate compose from vibe-node main 0415567d141c	2026-08-12 16:53:00 +00:00
Claude Agent	6df9f0f17a	zero-gravity: detect tarball layout; galileo 3.0.8 moved binaries to a shared root bin/ Fixes the de-32 build break introduced by vibe-node #2912 (galileo 3.0.3 -> 3.0.8, merged as bc4cecf). Job ad580587: #16 chmod: cannot access '/0g/bin/0gchaind': No such file or directory The Dockerfile hardcoded 'galileo -> mv <root>/rpc /0g'. That held for 3.0.3, where every profile dir carried its own copy of the binaries. 3.0.8 DEDUPLICATED them into a shared <root>/bin/ (168 MB -> 69 MB), leaving rpc/ as configs-only — so the move produced configs and no binaries, and the build died two layers later on a chmod. Note 'does <root>/rpc exist' is not a sufficient test: 3.0.8 still ships rpc/, it just no longer holds bin/. Verified layouts: galileo 3.0.3 <root>/{rpc,validator,archive,seed}/bin/ + configs galileo 3.0.8 <root>/bin/ shared + <root>/{rpc,...}/ configs aristotle 1.0.6 <root>/bin/ + configs, no profile dirs So: take configs from the profile dir when present, then top the binaries up from the shared root bin/ if the profile dir did not supply them. Also asserts both binaries exist immediately after extraction, naming the chain, the version and the known layouts — so the next upstream reshuffle reports itself at the point of failure rather than as an anonymous chmod error. Verified against the real artifacts — all three now yield an identical /0g (bin/0gchaind 76M, bin/geth 46M, geth-config.toml, geth-genesis.json, kzg-trusted-setup.json, 0g-home/, rollback_cl.sh), and a synthetic unknown layout exits 1 with the diagnostic instead of reaching chmod. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-12 11:09:51 +00:00
Claude Agent	561ff43828	deploy: regenerate compose from vibe-node main bc4cecf1a74f	2026-08-12 08:38:04 +00:00
Claude Agent	cfac32736e	zero-gravity: resolve release tag by probing known forms; fail loudly on 404 0G publishes aristotle and galileo from two different repos, and neither uses a consistent release-tag format. The asset filename is always <spec>-v<version>.tar.gz; only the tag varies: aristotle -> 0gchain-Aristotle 1.0.4 = "1.0.4" 1.0.6 = "v1.0.6" galileo -> 0gchain-NG 3.0.3 = "v3.0.3" 3.0.7 = "galileo-v3.0.7" 3.0.8 = "v3.0.8" The hardcoded formats meant aristotle could not go past 1.0.4 and galileo could not reach 3.0.7. Resolve the tag by trying the known forms in order instead. Also switch curl -sL to -fsSL. Without -f a 404 HTML body was written into the .tar.gz and the build failed several layers later at 'tar: not in gzip format', an error pointing nowhere near the cause. That has now caused three separate misdiagnoses, including a de-32 build blocker. Verified end-to-end against the real artifacts: aristotle 1.0.4/1.0.6 and galileo 3.0.3/3.0.7/3.0.8 all resolve; aristotle 3.0.3 and galileo 9.9.9 fail immediately with an actionable message. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-11 06:21:38 +00:00
Claude Agent	799209b5d2	zero-gravity-aristotle: fix node version to 1.0.4 (was 3.0.3 which doesn't exist for Aristotle repo)	2026-08-10 21:56:44 +00:00
Claude Agent	17cd0d5f23	deploy: regenerate compose from vibe-node main c5e4641499ff	2026-08-07 12:13:22 +00:00
Claude Agent	d57fd2e644	tempo-mainnet: bump reth to 1.12.0 (T9 hardfork requires v1.12.0, node crash-loop at block 33513646)	2026-08-06 16:24:58 +00:00
Claude Agent	e1427de966	ethereum: bump blsync to alltools-v1.17.5 for go-ethereum v1.17.5 patch (2026-07-27); includes polygon-amoy bor 2.10.0-private for hardfork at block 44,120,000	2026-08-06 11:48:53 +00:00
Claude Agent	db38905bfe	polygon-amoy: bump bor from 2.9.0 to 2.10.0-private for private Amoy hardfork at block 44,120,000 (ExtraData layout change) Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-08-05 22:35:04 +00:00
Claude Agent	699723d742	berachain: upgrade bera-reth to v1.4.4 for Osaka1 hardfork support Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-08-05 21:15:20 +00:00
Claude Agent	a0483f6934	thundercore: zeus is MAINNET (chainid 108) — fix mislabeled thundercore-testnet upstream label (drpc_name pin; SLUG-COLLISION lint find)	2026-08-05 05:09:30 +00:00
Claude Agent	b940a72643	soneium: remove 5 orphaned 'soneium-miniato' composes (typo'd generated leftovers from a pre-rename config; correct minato-sepolia variants exist; flagged by SLUG-COLLISION lint)	2026-08-05 04:14:00 +00:00
Claude Agent	d5e39c2329	zircuit: migrate mainnet to Conduit op-reth stack, drop dead op-geth archives - Add zircuit-mainnet to conduit-op-reth (ghcr.io/conduitxyz/conduit-op-reth:v2.1.1) - Add genesis.json/rollup.json from Conduit API with bedrockBlock=32956468 fix - Add Conduit P2P bootnodes + static peer - Use ETHEREUM_MAINNET_* vars for L1 (chainid 1) with oplabs op-node:v1.19.3 - Remove zircuit-mainnet op-geth archive/pruned profiles (SLS dependency dead) - Keep sequencer endpoint and drpc_chain=zircuit-mainnet SLS-decommission root cause: zircuit1/l2-geth hard-requires Zircuit-hosted SLS DB that no longer resolves (mainnet-sls-db-global-primary.cluster-ro... no such host). Migrating to Conduit external-node stack per operator directive.	2026-08-05 03:58:36 +00:00
rob	e536c19191	slug resolution: derive from dRPC chains.yaml, no in-code name heuristics Regenerated by the expand_config.py redesign (see vibe-node commit). Slug corrections, each verified present in chains.yaml: soneium-minato-sepolia x5: soneium (MAINNET!) -> soneium-minato avalanche-fuji x5: avalanche (MAINNET!) -> avalanche-fuji thundercore-venus: thundercore (MAINNET!) -> thundercore-testnet core-pigeon: core-pigeon -> core-testnet zircuit-garfield: zircuit-testnet -> zircuit-garfield-testnet sonic-testnet x2: sonic-testnet -> sonic-testnet-v2 ronin-saigon x3: (none) -> ronin-saigon everclear-sepolia x2: dropped (chain shut down 2026-06-05) fuse-spark x3 (hand-written, fuse has chains: null in context.yml): x-upstreams REMOVED - Sparknet is absent from chains.yaml; it declared the mainnet slug. Verified: 310 testnet composes, 0 wrong-slug failures (was 22); 0 mainnet composes carrying a testnet slug; 0 mainnet slug changes. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-08-05 03:28:22 +00:00
Claude Agent	7d27ff1918	fix list-restorable.sh process-substitution infinite loop in volume-keys read loop Regression from `d896378e`: putting < <(...) on `read` re-runs the producer each iteration. Capture required volume keys once and feed via done<<<.	2026-08-04 16:23:48 +02:00
Claude Agent	b23545e143	immutable-zkevm: bump geth v1.17.4→v1.17.5 (mainnet) Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-08-04 12:20:48 +00:00
Claude Agent	3be855a681	fix soneium-minato→miniato typo + add drpc_chain to compose_registry.json Add authoritative dRPC slug field (operator audit 2026-08-04): - generate_registry.py: add drpc_chain field from x-upstreams[0].chain - Fix soneium-minato-sepolia → soneium-miniato-sepolia typo in compose files - drpc_chain is null for entries without x-upstreams (not dRPC-servable) Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-08-04 07:34:50 +00:00
Claude Agent	d896378eb7	Add optional/ephemeral volume notation for restore resilience Introduce x-optional-volumes for beacon sidecars (prysm, nimbus, lighthouse, teku, lodestar) that are checkpoint-sync capable and rebuild state quickly. Mark reth sockets volumes as ephemeral (runtime IPC artifacts). Script changes: - volume-utils.sh: add is_optional_volume_key() function - restore-volumes.sh: tolerate missing optional/ephemeral volume archives - clone-backup.sh: skip missing optional/ephemeral volumes gracefully - list-restorable.sh: only require archives for non-optional persistent volumes This fixes the de-25 ethereum prysm incident (entire 1.1T restore failed due to missing prysm archive) and arc-testnet reth sockets restore loops. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-08-04 06:10:55 +00:00
Claude Agent	d21f2669ae	beacon x-upstreams: restore disable-validation: true for gnosis and ethereum nimbus beacon-chain upstreams Restore the beacon x-upstream options.disable-validation: true that was removed during regeneration. This prevents dshackle 0.79.10's beacon health validator from timing out on the spec-compliant empty-body 200 that nimbus returns, causing the upstream to flap UNAVAILABLE. Matches the established ethereum-beacon pattern. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>	2026-08-03 06:58:50 +00:00
rob	3f3cedf625	Add Falkenstein/Hetzner edge prefix 168.119.195.0/24 Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-03 06:48:53 +00:00