ink-mainnet: remove orphaned op-geth compose files

Source already dropped ink-mainnet op-geth from config.yml, but
update.sh never prunes orphans — stale op/geth/ink-mainnet-op-geth-*.yml
files stayed in COMPOSE_FILE and fought op-reth for Traefik /ink-mainnet
(404). Delete the four orphans so only op-reth remains for that path.

.gitignore

@@ -1,2 +1,17 @@
 .env
 peer-backups/
+
+# R-2 (fleet-audit): keep chaindata/snapshots/tarballs out of git status. Some land
+# in-tree via per-host _DATA overrides or snapshot staging; evict to /slowdisk at the
+# next maintenance window — see fleet-audit-2026-07-07.md §R-2.
+*.tar
+*.tar.*
+*.lz4
+*.zst
+snapshots/
+*.bak
+*.swp
+
+# Task C local peer capture state
+peer-state/
+

CURSOR.md

@@ -0,0 +1,729 @@
+# VIBE.md — ethereum-rpc-docker Operations & Debugging Guide
+
+You are an LLM agent or operator **running or debugging blockchain RPC nodes** from this
+repository. This file is your **primary reference** for all operational tasks.
+
+This repo contains Docker Compose configurations for blockchain RPC nodes plus operational
+scripts for managing them. Everything you need to run, monitor, debug, and fix nodes is here.
+
+---
+
+## 0. WHEN A NODE IS FAULTY — Start Here
+
+### Immediate Triage (30 seconds)
+
+```bash
+# 1. Is the container running?
+./show-running.sh
+
+# 2. Check overall status of all configured nodes
+./show-status.sh
+
+# 3. If you know the config name, check its specific status
+./sync-status.sh <config-name>
+
+# 4. Check logs for the faulty node
+./logs.sh <config-name>
+```
+
+**If the container isn't running**, go to [§3. Container Lifecycle Issues](#3-container-lifecycle-issues)
+
+**If the container is running but not synced**, go to [§4. Sync Issues](#4-sync-issues)
+
+**If the container is running and synced but RPC fails**, go to [§5. RPC/Connectivity Issues](#5-rpcconnectivity-issues)
+
+**If you see errors in logs but aren't sure what they mean**, go to [§6. Log Interpretation](#6-log-interpretation)
+
+---
+
+## 1. Repository Overview
+
+### What This Repo Contains
+
+```
+rpc/
+├── *.yml                    # Docker Compose files for node configurations
+├── *.sh                     # Operational scripts (YOUR PRIMARY TOOLS)
+├── scripts/                 # Additional helper scripts (CometBFT support)
+├── <network>/               # Network directories (e.g., ethereum/, op/, arb/)
+│   ├── *.yml                # Compose files for specific chains
+│   └── <chain>/             # Chain-specific assets
+│       ├── genesis.json     # Custom genesis files
+│       ├── rollup.json      # Rollup configurations (OP Stack)
+│       └── *.Dockerfile      # Custom build files
+├── README.md                # User documentation
+└── VIBE.md                  # THIS FILE — operations guide
+```
+
+### Key Concepts
+
+- **Config name**: The compose filename WITHOUT `.yml` (e.g., `ethereum-mainnet-geth-pruned`)
+- **Service name**: Derived from config name, used in `docker compose` commands
+- **Short name**: Used in URL paths, container labels. Format: `{network}-{chain}[-{client}][-{db_type}]`
+- **Volume names**: Docker volumes follow the full config name pattern
+
+### Supported Networks
+
+**Layer 1**: Ethereum, Polygon, BSC, Avalanche, Gnosis, Fantom, Core, Berachain, Ronin, Viction, Fuse, Tron, ThunderCore, Goat, AlephZero, Haqq, Taiko, Rootstock, Dogecoin, Litecoin, Bitcoin, Bitcoin-Cash, Ripple, Solana, Tron
+
+**Layer 2 (OP Stack)**: Optimism, Base, Zora, Mode, Blast, Fraxtal, Bob, Boba, Worldchain, Metal, Ink, Lisk, SNAX, Celo
+
+**Layer 2 (Arbitrum)**: Arbitrum One, Arbitrum Nova, Everclear, Playblock, Real, Connext, OpenCampusCodex
+
+**Other L2s**: Linea, Scroll, zkSync Era, Metis, Moonbeam, Starknet, zkEVM, Immutable zkEVM, Polygon zkEVM
+
+---
+
+## 2. Essential Scripts Reference
+
+### Status & Monitoring Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `show-status.sh` | `[config-name]` | Lists ALL configured nodes with sync status, block height, health |
+| `show-running.sh` | | Lists currently running containers |
+| `sync-status.sh` | `<config-name>` | Detailed sync status for one config |
+| `latest.sh` | `<config-name>` | Latest block number + hash |
+| `logs.sh` | `<config-name>` | Tail logs from all containers in a config |
+| `show-db-size.sh` | | Disk usage of ALL Docker volumes, sorted by size |
+| `show-ram.sh` | `<config-name>` | Memory usage of containers |
+| `show-cpu.sh` | | CPU usage display |
+| `peer-count.sh` | | P2P peer count for all running nodes |
+| `time-since-last-block.sh` | `<config-name>` | How long since last block was processed |
+| `ping.sh` | `<container-name>` | Test network connectivity from container |
+| `show-errors.sh` | | Show error counts/logs across containers |
+| `show-size.sh` | | Show size of containers/volumes |
+| `show-file-size.sh` | | Show static file sizes |
+| `show-static-file-size.sh` | | Show static file sizes (alternative) |
+
+### Lifecycle Management Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `start.sh` | `<config-name>` | Start all containers for a config |
+| `stop.sh` | `<config-name>` | Stop all containers for a config |
+| `force-recreate.sh` | `<config-name>` | Force recreate containers (keeps volumes) |
+| `rm.sh` | `<config-name>` | Remove containers (keeps volumes) |
+| `delete-volumes.sh` | `<config-name>` | **DESTRUCTIVE** - Remove containers AND volumes |
+| `delete-node-keys.sh` | `<config-name>` | Remove node keys (for re-initialization) |
+
+### Backup & Restore Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `backup-node.sh` | `<config-name> [url]` | Backup volumes locally or to WebDAV |
+| `restore-volumes.sh` | `<config-name> [url]` | Restore volumes from local or HTTP |
+| `clone-node.sh` | `<config-name>` | Clone a node's state |
+| `clone-backup.sh` | | Clone backup files |
+| `clone-peers.sh` | | Clone peer information |
+| `restore-peers.sh` | | Restore peer connections |
+| `list-backups.sh` | | List available backup files |
+| `list-peer-backups.sh` | | List peer backup files |
+| `list-restorable.sh` | | List restorable configurations |
+| `cleanup-backups.sh` | | Remove old backups |
+| `cleanup-volumes.sh` | | Clean up unused volumes |
+
+### Network & Connectivity Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `upstreams.sh` | | Generate dshackle upstream configuration |
+| `connect-peers.sh` | | Connect to peer nodes |
+| `search-node.sh` | `<query>` | Search compose files for patterns |
+| `search-compose.sh` | `<query>` | Search compose files |
+| `network-to-config.sh` | | Map network names to config files |
+| `reload_dshackle.sh` | | Reload dshackle configuration |
+| `update-whitelist.sh` | | Update IP whitelist |
+| `update-ip.sh` | | Update IP configuration |
+
+### Specialized Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `op-wheel.sh` | | OP rollup maintenance (rewind, set forkchoice) |
+| `op-wheel-finalize-latest-block.sh` | `<client_svc> [node_svc]` | Finalize latest block (nuclear option) |
+| `catchup.sh` | `<config-name>` | Help node catch up to chain head |
+| `success-if-almost-synced.sh` | `<config-name> <seconds>` | Exit 0 if node is almost synced |
+| `groq.sh` | | Query using Groq |
+| `trai.sh` | | Trace transaction |
+| `multicurl.sh` | | Parallel curl requests |
+| `blocknumber.sh` | | Get block number |
+| `get-block.sh` | | Get block information |
+| `get-local-url.sh` | | Get local RPC URL |
+| `get-shortname.sh` | `<config-file>` | Get short name for a config |
+| `disk-space.sh` | | Check disk space |
+| `limit-bandwidth.sh` | | Limit bandwidth |
+| `maintenance.sh` | | Maintenance helper |
+| `random-port.sh` | | Generate random port |
+| `reference-rpc-endpoint.sh` | | Reference RPC endpoint helper |
+| `reset-terminal.sh` | | Reset terminal |
+| `setup-bandwidth-limit-cron.sh` | | Setup cron for bandwidth limiting |
+
+---
+
+## 3. Container Lifecycle Issues
+
+### Symptom: Container Won't Start
+
+```bash
+# Check why it failed
+./logs.sh <config-name> 2>&1 | tail -50
+
+# Check container exit code
+docker ps -a --filter "name=<config-name>" --format "{{.Names}} | {{.State}} | {{.Status}}"
+
+# Inspect the container
+docker inspect <container-name> | jq '.[0].State'
+```
+
+**Common causes:**
+- **Port conflict**: Two services trying to bind to same host port
+- **Volume permission issues**: Docker can't write to volume
+- **Missing environment variables**: `.env` file incomplete
+- **Invalid compose syntax**: YAML parsing error
+- **Image pull failure**: Network issue or private registry auth
+
+**Fixes:**
+```bash
+# Check for port conflicts
+grep -h "^[0-9]\{1,5\}:[0-9]" *.yml | sort | uniq -d
+
+# Validate compose syntax
+docker compose -f <config-file>.yml config
+
+# Pull images manually
+docker compose -f <config-file>.yml pull
+
+# Start with --build if using custom Dockerfiles
+docker compose -f <config-file>.yml up -d --build
+```
+
+### Symptom: Container Exits Immediately After Starting
+
+```bash
+# View the last 100 lines of logs before exit
+./logs.sh <config-name> 2>&1 | tail -100
+
+# Check exit code
+docker ps -a --filter "name=<service>" --format "{{.Status}}"
+
+# Run interactively to see error
+docker compose -f <config-file>.yml run --rm <service-name> sh
+```
+
+**Common causes:**
+- **Missing config files**: `/config/` mount empty or wrong path
+- **Invalid flags**: Command-line arguments malformed
+- **Database corruption**: Existing data incompatible with new version
+- **Checkpoint/genesis mismatch**: Chain ID or genesis doesn't match
+
+**Fixes:**
+```bash
+# Verify config directory exists (if using custom configs)
+ls -la <network>/<chain>/
+
+# Try with fresh volumes (DESTRUCTIVE)
+./delete-volumes.sh <config-name>
+./start.sh <config-name>
+```
+
+### Symptom: Container Restarts Repeatedly (Crash Loop)
+
+```bash
+# Watch logs in real-time
+./logs.sh <config-name> -f
+
+# Check restart count
+docker inspect <container-name> | jq '.[0].RestartCount'
+
+# Check last restart reason
+docker inspect <container-name> | jq '.[0].State.ExitCode, .[0].State.Error'
+```
+
+**Common causes:**
+- **OOM killed**: Memory limit exceeded
+- **Out of disk space**: No space left on device
+- **Segmentation fault**: Client bug or bad data
+- **Panic**: Go client panic
+
+**Fixes:**
+```bash
+# Check memory usage
+./show-ram.sh <config-name>
+
+# Check disk space
+df -h /var/lib/docker
+./show-db-size.sh
+
+# Increase resources in compose file or .env
+# Then force recreate
+./force-recreate.sh <config-name>
+```
+
+---
+
+## 4. Sync Issues
+
+### Symptom: Node Not Syncing (Stuck at Block 0 or Low Block)
+
+```bash
+# Check sync status
+./sync-status.sh <config-name>
+
+# Check current block
+./latest.sh <config-name>
+
+# Check logs for sync errors
+./logs.sh <config-name> | grep -i -E "sync|error|fail|warn|stuck|behind"
+
+# Check peer count
+./peer-count.sh | grep <config-name>
+```
+
+**Common causes:**
+- **No peers**: P2P network connection failed
+- **Wrong network**: Connected to wrong chain
+- **Checkpoint too old**: Checkpoint URL unavailable or outdated
+- **Snapshot download failed**: Snapshot server unreachable
+
+**Fixes:**
+```bash
+# Check if checkpoint/snapshot is configured
+grep -E "(checkpoint|snapshot)" <config-file>.yml
+
+# Test checkpoint URL manually
+curl -I $(grep checkpoint <config-file>.yml | grep -oE 'http[^ ]+')
+
+# Check peer connections (geth example)
+docker exec <client-container> admin_peers | jq '.[] | .network.remoteAddress' | wc -l
+```
+
+### Symptom: Sync is Very Slow
+
+```bash
+# Check sync speed over time
+./latest.sh <config-name>; sleep 60; ./latest.sh <config-name>
+
+# Check if node is processing blocks
+./time-since-last-block.sh <config-name>
+
+# Check CPU and memory
+top -d 1 -p $(docker inspect <container> | jq -r '.[0].State.Pid')
+```
+
+**Common causes:**
+- **Resource constrained**: CPU throttled, memory swapped
+- **Disk I/O bottleneck**: Slow storage or contention
+- **Network rate limited**: P2P or RPC rate limiting
+- **Too many peers**: P2P overhead
+- **Wrong sync mode**: Full sync instead of snap sync
+
+### Symptom: Sync Stuck at Specific Block
+
+```bash
+# Check logs around the stuck block
+./logs.sh <config-name> | grep -A 10 -B 10 "block <stuck-block-number>"
+
+# Check if it's a known bad block
+# Search online: <chain> bad block <number>
+```
+
+**Common causes:**
+- **Bad block in chain**: Requires client patch or manual intervention
+- **State trie inconsistency**: Database corruption
+- **Fork choice issue**: Node on wrong fork
+
+**Fixes for OP Stack:**
+```bash
+# Try to finalize past the block
+./op-wheel-finalize-latest-block.sh <client-service>
+```
+
+### Symptom: Node on Wrong Fork / Chain
+
+```bash
+# Check chain ID
+./latest.sh <config-name> | grep -i chain
+
+# Check what chain the node thinks it's on
+docker exec <client-container> ethdo chain --endpoint=http://localhost:8545
+
+# Compare with expected chain ID
+grep chainId <config-file>.yml
+```
+
+---
+
+## 5. RPC/Connectivity Issues
+
+### Symptom: RPC Endpoint Not Responding
+
+```bash
+# Test from host
+curl -s http://localhost:<port> | head -c 100
+
+# Check if traefik/proxy is running
+docker ps | grep -E "(traefik|proxy|nginx)"
+
+# Check traefik logs
+docker logs <traefik-container> | tail -50
+```
+
+**Common causes:**
+- **Container not running**: Client crashed
+- **Port not exposed**: Wrong port mapping
+- **Traefik misconfiguration**: Labels wrong or missing
+- **Firewall blocking**: Host firewall or cloud security group
+
+### Symptom: RPC Returns Wrong Chain ID
+
+```bash
+# Query chain ID from RPC
+curl -s -X POST http://localhost:<port> \
+  -H "Content-Type: application/json" \
+  -d '{"jsonrpc":"2.0","method":"eth_chainId","params":[],"id":1}'
+```
+
+### Symptom: Cannot Connect to P2P Network
+
+```bash
+# Check peer count
+./peer-count.sh | grep <config-name>
+
+# Test P2P connectivity from container
+docker exec <client-container> nc -zv <bootstrap-node> <p2p-port>
+```
+
+**Fixes:**
+```bash
+# Set public IP in .env
+IP=$(curl -s ipinfo.io/ip)
+echo "IP=$IP" >> .env
+./force-recreate.sh <config-name>
+```
+
+---
+
+## 6. Log Interpretation
+
+### Common Log Patterns
+
+#### Warnings (Node may still function)
+| Pattern | Meaning | Action |
+|---|---|---|
+| `WARN.*sync.*slow` | Sync slower than expected | Check resources |
+| `WARN.*peers.*low` | Fewer peers than desired | Check P2P connectivity |
+| `WARN.*rate.*limit` | API rate limiting active | Normal for public endpoints |
+
+#### Errors (Node is degraded)
+| Pattern | Meaning | Action |
+|---|---|---|
+| `Error.*database.*corrupt` | Database corruption | Restore from backup or resync |
+| `Error.*handshake.*fail` | P2P handshake failed | Check chain ID |
+| `Error.*no.*peers` | Cannot connect to P2P | Check bootstrap nodes |
+| `Error.*timeout` | RPC/HTTP timeout | Check network, increase timeout |
+
+#### Fatal (Node will not function)
+| Pattern | Meaning | Action |
+|---|---|---|
+| `Fatal.*panic` | Client crashed | Check client version |
+| `Fatal.*OOM` | Out of memory | Increase memory limit |
+| `Fatal.*disk.*full` | No disk space | Free space |
+| `Fatal.*permission.*denied` | Filesystem permissions | Fix volume permissions |
+
+---
+
+## 7. Resource Issues
+
+### High CPU Usage
+```bash
+./show-ram.sh <config-name>
+./show-cpu.sh
+docker stats <container-name> --no-stream
+```
+
+### High Memory Usage
+```bash
+./show-ram.sh <config-name>
+docker stats <container-name> --no-stream --format "{{.Container}} | {{.MemUsage}} | {{.MemPerc}}"
+```
+
+### High Disk Usage
+```bash
+./show-db-size.sh
+docker system df -v
+```
+
+### Disk I/O Bottleneck
+```bash
+iotop -o -d 1
+```
+
+---
+
+## 8. Backup and Restore
+
+### Creating a Backup
+```bash
+# Local backup (to /backup directory)
+./backup-node.sh <config-name>
+
+# Remote backup (to WebDAV)
+./backup-node.sh <config-name> https://backup-server.tld/dav
+```
+
+### Restoring from Backup
+```bash
+# List available backups
+./list-backups.sh
+
+# Restore latest backup for config
+./restore-volumes.sh <config-name>
+
+# Restore from specific URL
+./restore-volumes.sh <config-name> https://backup-server.tld/backup/
+```
+
+### Cloning a Node
+
+```bash
+# Clone a node to a new location
+./clone-node.sh <config-name>
+
+# Clone peers (for faster sync)
+./clone-peers.sh <config-name>
+```
+
+### Nuclear Option: Full Reset
+
+```bash
+# WARNING: This deletes ALL data for the config
+./stop.sh <config-name> && \
+./rm.sh <config-name> && \
+./delete-volumes.sh <config-name> && \
+./delete-node-keys.sh <config-name> && \
+./force-recreate.sh <config-name>
+
+# Then check logs
+./logs.sh <config-name>
+```
+
+---
+
+## 9. Common Error Messages
+
+### Database Errors
+| Error | Cause | Solution |
+|---|---|---|
+| `database is corrupted` | Power loss, bug | Restore from backup or resync |
+| `database version mismatch` | Client version changed | Delete and resync |
+
+### P2P Errors
+| Error | Cause | Solution |
+|---|---|---|
+| `no configured peers` | Missing bootstrap nodes | Add bootstrap nodes |
+| `handshake failed` | Chain ID mismatch | Verify genesis.json |
+
+### RPC Errors
+| Error | Cause | Solution |
+|---|---|---|
+| `method not found` | Wrong client | Use correct client |
+| `connection refused` | Port not open | Check container running, port mapping |
+
+---
+
+## 10. OP Stack Specific Debugging
+
+### OP Node Issues
+
+```bash
+# Check op-node logs
+./logs.sh <config-name> | grep -i "op-node\|rollup\|sequencer"
+
+# Check rollup configuration (if custom)
+cat op/<network>/ethereum/rollup.json | jq .
+
+# Check if rollup.json is mounted
+docker exec <op-node-container> cat /config/rollup.json | jq .
+```
+
+### OP Wheel (Manual Intervention)
+
+```bash
+# Rewind to specific block (DANGEROUS - only if you know what you're doing)
+./op-wheel.sh engine set-forkchoice \
+  --unsafe=<block-hash> \
+  --safe=<block-hash> \
+  --finalized=<block-hash> \
+  --engine=http://<client-service>:8551/ \
+  --engine.open=http://<client-service>:8545 \
+  --engine.jwt-secret-path=/jwtsecret
+
+# Nuclear option: finalize latest local block
+./op-wheel-finalize-latest-block.sh <client-service> <node-service>
+```
+
+---
+
+## 11. CometBFT Family (Cosmos, etc.) Specific
+
+### Init Container Issues
+
+```bash
+# CometBFT chains use init.sh inside the container
+# The master script is at scripts/cometbft-common.sh
+
+# Check if init completed
+./logs.sh <config-name> | grep -i "init\|setup\|complete"
+
+# Check the init script
+cat <network>/<chain>/scripts/init.sh
+```
+
+---
+
+## 12. Quick Start Guide
+
+### Starting a Node
+
+```bash
+# 1. Set up environment
+echo "IP=$(curl -s ipinfo.io/ip)" > .env
+echo "DOMAIN=${IP//./-}.traefik.me" >> .env
+echo "MAIL=your-email@example.com" >> .env
+
+# 2. Select which nodes to run
+# Add compose files to COMPOSE_FILE (colon-separated)
+echo "COMPOSE_FILE=base.yml:rpc.yml:ethereum-mainnet-geth-pruned.yml" >> .env
+
+# 3. Start the node
+docker compose up -d
+
+# 4. Verify it's running
+./show-status.sh
+```
+
+### Accessing Your Node
+
+```bash
+# Once running, access via:
+# HTTP: http://<your-domain>/ethereum-mainnet-geth-pruned
+# HTTPS: https://<your-domain>/ethereum-mainnet-geth-pruned
+# WebSocket: wss://<your-domain>/ethereum-mainnet-geth-pruned
+
+# Or locally (if NO_SSL=true):
+# HTTP: http://localhost:<port>
+```
+
+---
+
+## 13. Configuration Reference
+
+### Environment Variables
+
+**Required for most setups:**
+```bash
+IP=203.0.113.42                    # Your public IP
+DOMAIN=203-0-113-42.traefik.me    # Your domain (traefik.me for testing)
+MAIL=your-email@example.com        # For Let's Encrypt SSL
+WHITELIST=0.0.0.0/0               # IP whitelist (0.0.0.0/0 = all)
+```
+
+**Optional:**
+```bash
+NO_SSL=true                       # Disable SSL (testing only)
+CHAINS_SUBNET=192.168.0.0/26      # Docker network subnet
+```
+
+**Chain-specific (examples):**
+```bash
+ETHEREUM_MAINNET_EXECUTION_RPC=https://fallback-rpc.example.com
+ARBITRUM_SEPOLIA_EXECUTION_RPC=https://arb-sepolia-rpc.example.com
+OP_NODE_NETWORK=mainnet
+OP_NODE_L1_RPC_URL=https://l1-rpc.example.com
+```
+
+### Compose File Structure
+
+Each compose file defines one or more services:
+- **client**: Execution layer (Geth, Erigon, Reth, etc.)
+- **node**: Consensus/derivation node (op-node, lighthouse, etc.)
+- **relay**: DA relay (eigenda-proxy, op-alt, etc.)
+- **proxy**: HTTP/WS proxy (nginx, etc.)
+- **database**: External database (Postgres, etc.)
+
+### Volume Naming
+
+Volumes are named after the config:
+```
+<config-name>_<service>_data
+<config-name>_<service>_config
+```
+
+Example: `ethereum-mainnet-geth-pruned_client_data`
+
+---
+
+## 14. Quick Debugging Checklist
+
+Use this checklist when debugging an issue:
+
+- [ ] **Is the container running?** → `./show-running.sh`
+- [ ] **Are there errors in logs?** → `./logs.sh <config> | grep -i error`
+- [ ] **Is the node synced?** → `./sync-status.sh <config>`
+- [ ] **Are peers connected?** → `./peer-count.sh`
+- [ ] **Are resources adequate?** → `./show-ram.sh`, `./show-db-size.sh`
+- [ ] **Is P2P working?** → Check peer count
+- [ ] **Is RPC responding?** → Test with curl
+- [ ] **Is disk space available?** → `df -h /var/lib/docker`
+- [ ] **Is the config file correct?** → `docker compose -f <file>.yml config`
+- [ ] **Are environment variables set?** → Check `.env`
+- [ ] **Is the genesis file correct?** → Check chain ID
+
+---
+
+## 15. When to Escalate
+
+Escalate to a human operator if:
+
+- [ ] Node stuck for > 2 hours with no progress
+- [ ] Repeated `Fatal` or `panic` errors after restart
+- [ ] Database corruption confirmed
+- [ ] Issue affects multiple nodes across different chains
+- [ ] Need to force-push to this repo
+
+---
+
+## 16. File Locations Quick Reference
+
+| What You Need | Where to Find It |
+|---|---|
+| Compose files | Root of this repo (`*.yml`) |
+| Operational scripts | Root of this repo (`*.sh`) |
+| Chain assets | `<network>/<chain>/` or `<stack>/<network>/<settlement>/` |
+| Genesis files | `<stack>/<network>/<settlement>/genesis.json` |
+| Rollup configs | `op/<network>/<settlement>/rollup.json` |
+| Custom Dockerfiles | `<path>/*.Dockerfile` |
+| Init scripts | `<path>/scripts/init.sh` |
+| CometBFT common | `scripts/cometbft-common.sh` |
+| Compose registry | `compose_registry.json` |
+| RPC endpoints | `reference-rpc-endpoint.json` |
+| Environment | `.env` |
+
+---
+
+## 17. Resource Requirements Reference
+
+| Node Type | Disk | RAM | CPU |
+|---|---|---|---|
+| Ethereum pruned | ~500GB | 8GB | 2+ cores |
+| Ethereum archive | ~2TB+ | 16GB+ | 4+ cores |
+| Ethereum archive-trace | ~4TB+ | 32GB+ | 8+ cores |
+| L2 pruned | ~100-500GB | 4-8GB | 2+ cores |
+| L2 archive | ~1-2TB | 8-16GB | 4+ cores |
+
+**Note:** Requirements vary by chain. Check specific chain documentation.
+
+---
+
+*This file is your complete operations and debugging reference. For additional user documentation, see README.md.*

VIBE.md

@@ -0,0 +1,729 @@
+# VIBE.md — ethereum-rpc-docker Operations & Debugging Guide
+
+You are an LLM agent or operator **running or debugging blockchain RPC nodes** from this
+repository. This file is your **primary reference** for all operational tasks.
+
+This repo contains Docker Compose configurations for blockchain RPC nodes plus operational
+scripts for managing them. Everything you need to run, monitor, debug, and fix nodes is here.
+
+---
+
+## 0. WHEN A NODE IS FAULTY — Start Here
+
+### Immediate Triage (30 seconds)
+
+```bash
+# 1. Is the container running?
+./show-running.sh
+
+# 2. Check overall status of all configured nodes
+./show-status.sh
+
+# 3. If you know the config name, check its specific status
+./sync-status.sh <config-name>
+
+# 4. Check logs for the faulty node
+./logs.sh <config-name>
+```
+
+**If the container isn't running**, go to [§3. Container Lifecycle Issues](#3-container-lifecycle-issues)
+
+**If the container is running but not synced**, go to [§4. Sync Issues](#4-sync-issues)
+
+**If the container is running and synced but RPC fails**, go to [§5. RPC/Connectivity Issues](#5-rpcconnectivity-issues)
+
+**If you see errors in logs but aren't sure what they mean**, go to [§6. Log Interpretation](#6-log-interpretation)
+
+---
+
+## 1. Repository Overview
+
+### What This Repo Contains
+
+```
+rpc/
+├── *.yml                    # Docker Compose files for node configurations
+├── *.sh                     # Operational scripts (YOUR PRIMARY TOOLS)
+├── scripts/                 # Additional helper scripts (CometBFT support)
+├── <network>/               # Network directories (e.g., ethereum/, op/, arb/)
+│   ├── *.yml                # Compose files for specific chains
+│   └── <chain>/             # Chain-specific assets
+│       ├── genesis.json     # Custom genesis files
+│       ├── rollup.json      # Rollup configurations (OP Stack)
+│       └── *.Dockerfile      # Custom build files
+├── README.md                # User documentation
+└── VIBE.md                  # THIS FILE — operations guide
+```
+
+### Key Concepts
+
+- **Config name**: The compose filename WITHOUT `.yml` (e.g., `ethereum-mainnet-geth-pruned`)
+- **Service name**: Derived from config name, used in `docker compose` commands
+- **Short name**: Used in URL paths, container labels. Format: `{network}-{chain}[-{client}][-{db_type}]`
+- **Volume names**: Docker volumes follow the full config name pattern
+
+### Supported Networks
+
+**Layer 1**: Ethereum, Polygon, BSC, Avalanche, Gnosis, Fantom, Core, Berachain, Ronin, Viction, Fuse, Tron, ThunderCore, Goat, AlephZero, Haqq, Taiko, Rootstock, Dogecoin, Litecoin, Bitcoin, Bitcoin-Cash, Ripple, Solana, Tron
+
+**Layer 2 (OP Stack)**: Optimism, Base, Zora, Mode, Blast, Fraxtal, Bob, Boba, Worldchain, Metal, Ink, Lisk, SNAX, Celo
+
+**Layer 2 (Arbitrum)**: Arbitrum One, Arbitrum Nova, Everclear, Playblock, Real, Connext, OpenCampusCodex
+
+**Other L2s**: Linea, Scroll, zkSync Era, Metis, Moonbeam, Starknet, zkEVM, Immutable zkEVM, Polygon zkEVM
+
+---
+
+## 2. Essential Scripts Reference
+
+### Status & Monitoring Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `show-status.sh` | `[config-name]` | Lists ALL configured nodes with sync status, block height, health |
+| `show-running.sh` | | Lists currently running containers |
+| `sync-status.sh` | `<config-name>` | Detailed sync status for one config |
+| `latest.sh` | `<config-name>` | Latest block number + hash |
+| `logs.sh` | `<config-name>` | Tail logs from all containers in a config |
+| `show-db-size.sh` | | Disk usage of ALL Docker volumes, sorted by size |
+| `show-ram.sh` | `<config-name>` | Memory usage of containers |
+| `show-cpu.sh` | | CPU usage display |
+| `peer-count.sh` | | P2P peer count for all running nodes |
+| `time-since-last-block.sh` | `<config-name>` | How long since last block was processed |
+| `ping.sh` | `<container-name>` | Test network connectivity from container |
+| `show-errors.sh` | | Show error counts/logs across containers |
+| `show-size.sh` | | Show size of containers/volumes |
+| `show-file-size.sh` | | Show static file sizes |
+| `show-static-file-size.sh` | | Show static file sizes (alternative) |
+
+### Lifecycle Management Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `start.sh` | `<config-name>` | Start all containers for a config |
+| `stop.sh` | `<config-name>` | Stop all containers for a config |
+| `force-recreate.sh` | `<config-name>` | Force recreate containers (keeps volumes) |
+| `rm.sh` | `<config-name>` | Remove containers (keeps volumes) |
+| `delete-volumes.sh` | `<config-name>` | **DESTRUCTIVE** - Remove containers AND volumes |
+| `delete-node-keys.sh` | `<config-name>` | Remove node keys (for re-initialization) |
+
+### Backup & Restore Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `backup-node.sh` | `<config-name> [url]` | Backup volumes locally or to WebDAV |
+| `restore-volumes.sh` | `<config-name> [url]` | Restore volumes from local or HTTP |
+| `clone-node.sh` | `<config-name>` | Clone a node's state |
+| `clone-backup.sh` | | Clone backup files |
+| `clone-peers.sh` | | Clone peer information |
+| `restore-peers.sh` | | Restore peer connections |
+| `list-backups.sh` | | List available backup files |
+| `list-peer-backups.sh` | | List peer backup files |
+| `list-restorable.sh` | | List restorable configurations |
+| `cleanup-backups.sh` | | Remove old backups |
+| `cleanup-volumes.sh` | | Clean up unused volumes |
+
+### Network & Connectivity Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `upstreams.sh` | | Generate dshackle upstream configuration |
+| `connect-peers.sh` | | Connect to peer nodes |
+| `search-node.sh` | `<query>` | Search compose files for patterns |
+| `search-compose.sh` | `<query>` | Search compose files |
+| `network-to-config.sh` | | Map network names to config files |
+| `reload_dshackle.sh` | | Reload dshackle configuration |
+| `update-whitelist.sh` | | Update IP whitelist |
+| `update-ip.sh` | | Update IP configuration |
+
+### Specialized Scripts
+
+| Script | Usage | What It Does |
+|---|---|---|
+| `op-wheel.sh` | | OP rollup maintenance (rewind, set forkchoice) |
+| `op-wheel-finalize-latest-block.sh` | `<client_svc> [node_svc]` | Finalize latest block (nuclear option) |
+| `catchup.sh` | `<config-name>` | Help node catch up to chain head |
+| `success-if-almost-synced.sh` | `<config-name> <seconds>` | Exit 0 if node is almost synced |
+| `groq.sh` | | Query using Groq |
+| `trai.sh` | | Trace transaction |
+| `multicurl.sh` | | Parallel curl requests |
+| `blocknumber.sh` | | Get block number |
+| `get-block.sh` | | Get block information |
+| `get-local-url.sh` | | Get local RPC URL |
+| `get-shortname.sh` | `<config-file>` | Get short name for a config |
+| `disk-space.sh` | | Check disk space |
+| `limit-bandwidth.sh` | | Limit bandwidth |
+| `maintenance.sh` | | Maintenance helper |
+| `random-port.sh` | | Generate random port |
+| `reference-rpc-endpoint.sh` | | Reference RPC endpoint helper |
+| `reset-terminal.sh` | | Reset terminal |
+| `setup-bandwidth-limit-cron.sh` | | Setup cron for bandwidth limiting |
+
+---
+
+## 3. Container Lifecycle Issues
+
+### Symptom: Container Won't Start
+
+```bash
+# Check why it failed
+./logs.sh <config-name> 2>&1 | tail -50
+
+# Check container exit code
+docker ps -a --filter "name=<config-name>" --format "{{.Names}} | {{.State}} | {{.Status}}"
+
+# Inspect the container
+docker inspect <container-name> | jq '.[0].State'
+```
+
+**Common causes:**
+- **Port conflict**: Two services trying to bind to same host port
+- **Volume permission issues**: Docker can't write to volume
+- **Missing environment variables**: `.env` file incomplete
+- **Invalid compose syntax**: YAML parsing error
+- **Image pull failure**: Network issue or private registry auth
+
+**Fixes:**
+```bash
+# Check for port conflicts
+grep -h "^[0-9]\{1,5\}:[0-9]" *.yml | sort | uniq -d
+
+# Validate compose syntax
+docker compose -f <config-file>.yml config
+
+# Pull images manually
+docker compose -f <config-file>.yml pull
+
+# Start with --build if using custom Dockerfiles
+docker compose -f <config-file>.yml up -d --build
+```
+
+### Symptom: Container Exits Immediately After Starting
+
+```bash
+# View the last 100 lines of logs before exit
+./logs.sh <config-name> 2>&1 | tail -100
+
+# Check exit code
+docker ps -a --filter "name=<service>" --format "{{.Status}}"
+
+# Run interactively to see error
+docker compose -f <config-file>.yml run --rm <service-name> sh
+```
+
+**Common causes:**
+- **Missing config files**: `/config/` mount empty or wrong path
+- **Invalid flags**: Command-line arguments malformed
+- **Database corruption**: Existing data incompatible with new version
+- **Checkpoint/genesis mismatch**: Chain ID or genesis doesn't match
+
+**Fixes:**
+```bash
+# Verify config directory exists (if using custom configs)
+ls -la <network>/<chain>/
+
+# Try with fresh volumes (DESTRUCTIVE)
+./delete-volumes.sh <config-name>
+./start.sh <config-name>
+```
+
+### Symptom: Container Restarts Repeatedly (Crash Loop)
+
+```bash
+# Watch logs in real-time
+./logs.sh <config-name> -f
+
+# Check restart count
+docker inspect <container-name> | jq '.[0].RestartCount'
+
+# Check last restart reason
+docker inspect <container-name> | jq '.[0].State.ExitCode, .[0].State.Error'
+```
+
+**Common causes:**
+- **OOM killed**: Memory limit exceeded
+- **Out of disk space**: No space left on device
+- **Segmentation fault**: Client bug or bad data
+- **Panic**: Go client panic
+
+**Fixes:**
+```bash
+# Check memory usage
+./show-ram.sh <config-name>
+
+# Check disk space
+df -h /var/lib/docker
+./show-db-size.sh
+
+# Increase resources in compose file or .env
+# Then force recreate
+./force-recreate.sh <config-name>
+```
+
+---
+
+## 4. Sync Issues
+
+### Symptom: Node Not Syncing (Stuck at Block 0 or Low Block)
+
+```bash
+# Check sync status
+./sync-status.sh <config-name>
+
+# Check current block
+./latest.sh <config-name>
+
+# Check logs for sync errors
+./logs.sh <config-name> | grep -i -E "sync|error|fail|warn|stuck|behind"
+
+# Check peer count
+./peer-count.sh | grep <config-name>
+```
+
+**Common causes:**
+- **No peers**: P2P network connection failed
+- **Wrong network**: Connected to wrong chain
+- **Checkpoint too old**: Checkpoint URL unavailable or outdated
+- **Snapshot download failed**: Snapshot server unreachable
+
+**Fixes:**
+```bash
+# Check if checkpoint/snapshot is configured
+grep -E "(checkpoint|snapshot)" <config-file>.yml
+
+# Test checkpoint URL manually
+curl -I $(grep checkpoint <config-file>.yml | grep -oE 'http[^ ]+')
+
+# Check peer connections (geth example)
+docker exec <client-container> admin_peers | jq '.[] | .network.remoteAddress' | wc -l
+```
+
+### Symptom: Sync is Very Slow
+
+```bash
+# Check sync speed over time
+./latest.sh <config-name>; sleep 60; ./latest.sh <config-name>
+
+# Check if node is processing blocks
+./time-since-last-block.sh <config-name>
+
+# Check CPU and memory
+top -d 1 -p $(docker inspect <container> | jq -r '.[0].State.Pid')
+```
+
+**Common causes:**
+- **Resource constrained**: CPU throttled, memory swapped
+- **Disk I/O bottleneck**: Slow storage or contention
+- **Network rate limited**: P2P or RPC rate limiting
+- **Too many peers**: P2P overhead
+- **Wrong sync mode**: Full sync instead of snap sync
+
+### Symptom: Sync Stuck at Specific Block
+
+```bash
+# Check logs around the stuck block
+./logs.sh <config-name> | grep -A 10 -B 10 "block <stuck-block-number>"
+
+# Check if it's a known bad block
+# Search online: <chain> bad block <number>
+```
+
+**Common causes:**
+- **Bad block in chain**: Requires client patch or manual intervention
+- **State trie inconsistency**: Database corruption
+- **Fork choice issue**: Node on wrong fork
+
+**Fixes for OP Stack:**
+```bash
+# Try to finalize past the block
+./op-wheel-finalize-latest-block.sh <client-service>
+```
+
+### Symptom: Node on Wrong Fork / Chain
+
+```bash
+# Check chain ID
+./latest.sh <config-name> | grep -i chain
+
+# Check what chain the node thinks it's on
+docker exec <client-container> ethdo chain --endpoint=http://localhost:8545
+
+# Compare with expected chain ID
+grep chainId <config-file>.yml
+```
+
+---
+
+## 5. RPC/Connectivity Issues
+
+### Symptom: RPC Endpoint Not Responding
+
+```bash
+# Test from host
+curl -s http://localhost:<port> | head -c 100
+
+# Check if traefik/proxy is running
+docker ps | grep -E "(traefik|proxy|nginx)"
+
+# Check traefik logs
+docker logs <traefik-container> | tail -50
+```
+
+**Common causes:**
+- **Container not running**: Client crashed
+- **Port not exposed**: Wrong port mapping
+- **Traefik misconfiguration**: Labels wrong or missing
+- **Firewall blocking**: Host firewall or cloud security group
+
+### Symptom: RPC Returns Wrong Chain ID
+
+```bash
+# Query chain ID from RPC
+curl -s -X POST http://localhost:<port> \
+  -H "Content-Type: application/json" \
+  -d '{"jsonrpc":"2.0","method":"eth_chainId","params":[],"id":1}'
+```
+
+### Symptom: Cannot Connect to P2P Network
+
+```bash
+# Check peer count
+./peer-count.sh | grep <config-name>
+
+# Test P2P connectivity from container
+docker exec <client-container> nc -zv <bootstrap-node> <p2p-port>
+```
+
+**Fixes:**
+```bash
+# Set public IP in .env
+IP=$(curl -s ipinfo.io/ip)
+echo "IP=$IP" >> .env
+./force-recreate.sh <config-name>
+```
+
+---
+
+## 6. Log Interpretation
+
+### Common Log Patterns
+
+#### Warnings (Node may still function)
+| Pattern | Meaning | Action |
+|---|---|---|
+| `WARN.*sync.*slow` | Sync slower than expected | Check resources |
+| `WARN.*peers.*low` | Fewer peers than desired | Check P2P connectivity |
+| `WARN.*rate.*limit` | API rate limiting active | Normal for public endpoints |
+
+#### Errors (Node is degraded)
+| Pattern | Meaning | Action |
+|---|---|---|
+| `Error.*database.*corrupt` | Database corruption | Restore from backup or resync |
+| `Error.*handshake.*fail` | P2P handshake failed | Check chain ID |
+| `Error.*no.*peers` | Cannot connect to P2P | Check bootstrap nodes |
+| `Error.*timeout` | RPC/HTTP timeout | Check network, increase timeout |
+
+#### Fatal (Node will not function)
+| Pattern | Meaning | Action |
+|---|---|---|
+| `Fatal.*panic` | Client crashed | Check client version |
+| `Fatal.*OOM` | Out of memory | Increase memory limit |
+| `Fatal.*disk.*full` | No disk space | Free space |
+| `Fatal.*permission.*denied` | Filesystem permissions | Fix volume permissions |
+
+---
+
+## 7. Resource Issues
+
+### High CPU Usage
+```bash
+./show-ram.sh <config-name>
+./show-cpu.sh
+docker stats <container-name> --no-stream
+```
+
+### High Memory Usage
+```bash
+./show-ram.sh <config-name>
+docker stats <container-name> --no-stream --format "{{.Container}} | {{.MemUsage}} | {{.MemPerc}}"
+```
+
+### High Disk Usage
+```bash
+./show-db-size.sh
+docker system df -v
+```
+
+### Disk I/O Bottleneck
+```bash
+iotop -o -d 1
+```
+
+---
+
+## 8. Backup and Restore
+
+### Creating a Backup
+```bash
+# Local backup (to /backup directory)
+./backup-node.sh <config-name>
+
+# Remote backup (to WebDAV)
+./backup-node.sh <config-name> https://backup-server.tld/dav
+```
+
+### Restoring from Backup
+```bash
+# List available backups
+./list-backups.sh
+
+# Restore latest backup for config
+./restore-volumes.sh <config-name>
+
+# Restore from specific URL
+./restore-volumes.sh <config-name> https://backup-server.tld/backup/
+```
+
+### Cloning a Node
+
+```bash
+# Clone a node to a new location
+./clone-node.sh <config-name>
+
+# Clone peers (for faster sync)
+./clone-peers.sh <config-name>
+```
+
+### Nuclear Option: Full Reset
+
+```bash
+# WARNING: This deletes ALL data for the config
+./stop.sh <config-name> && \
+./rm.sh <config-name> && \
+./delete-volumes.sh <config-name> && \
+./delete-node-keys.sh <config-name> && \
+./force-recreate.sh <config-name>
+
+# Then check logs
+./logs.sh <config-name>
+```
+
+---
+
+## 9. Common Error Messages
+
+### Database Errors
+| Error | Cause | Solution |
+|---|---|---|
+| `database is corrupted` | Power loss, bug | Restore from backup or resync |
+| `database version mismatch` | Client version changed | Delete and resync |
+
+### P2P Errors
+| Error | Cause | Solution |
+|---|---|---|
+| `no configured peers` | Missing bootstrap nodes | Add bootstrap nodes |
+| `handshake failed` | Chain ID mismatch | Verify genesis.json |
+
+### RPC Errors
+| Error | Cause | Solution |
+|---|---|---|
+| `method not found` | Wrong client | Use correct client |
+| `connection refused` | Port not open | Check container running, port mapping |
+
+---
+
+## 10. OP Stack Specific Debugging
+
+### OP Node Issues
+
+```bash
+# Check op-node logs
+./logs.sh <config-name> | grep -i "op-node\|rollup\|sequencer"
+
+# Check rollup configuration (if custom)
+cat op/<network>/ethereum/rollup.json | jq .
+
+# Check if rollup.json is mounted
+docker exec <op-node-container> cat /config/rollup.json | jq .
+```
+
+### OP Wheel (Manual Intervention)
+
+```bash
+# Rewind to specific block (DANGEROUS - only if you know what you're doing)
+./op-wheel.sh engine set-forkchoice \
+  --unsafe=<block-hash> \
+  --safe=<block-hash> \
+  --finalized=<block-hash> \
+  --engine=http://<client-service>:8551/ \
+  --engine.open=http://<client-service>:8545 \
+  --engine.jwt-secret-path=/jwtsecret
+
+# Nuclear option: finalize latest local block
+./op-wheel-finalize-latest-block.sh <client-service> <node-service>
+```
+
+---
+
+## 11. CometBFT Family (Cosmos, etc.) Specific
+
+### Init Container Issues
+
+```bash
+# CometBFT chains use init.sh inside the container
+# The master script is at scripts/cometbft-common.sh
+
+# Check if init completed
+./logs.sh <config-name> | grep -i "init\|setup\|complete"
+
+# Check the init script
+cat <network>/<chain>/scripts/init.sh
+```
+
+---
+
+## 12. Quick Start Guide
+
+### Starting a Node
+
+```bash
+# 1. Set up environment
+echo "IP=$(curl -s ipinfo.io/ip)" > .env
+echo "DOMAIN=${IP//./-}.traefik.me" >> .env
+echo "MAIL=your-email@example.com" >> .env
+
+# 2. Select which nodes to run
+# Add compose files to COMPOSE_FILE (colon-separated)
+echo "COMPOSE_FILE=base.yml:rpc.yml:ethereum-mainnet-geth-pruned.yml" >> .env
+
+# 3. Start the node
+docker compose up -d
+
+# 4. Verify it's running
+./show-status.sh
+```
+
+### Accessing Your Node
+
+```bash
+# Once running, access via:
+# HTTP: http://<your-domain>/ethereum-mainnet-geth-pruned
+# HTTPS: https://<your-domain>/ethereum-mainnet-geth-pruned
+# WebSocket: wss://<your-domain>/ethereum-mainnet-geth-pruned
+
+# Or locally (if NO_SSL=true):
+# HTTP: http://localhost:<port>
+```
+
+---
+
+## 13. Configuration Reference
+
+### Environment Variables
+
+**Required for most setups:**
+```bash
+IP=203.0.113.42                    # Your public IP
+DOMAIN=203-0-113-42.traefik.me    # Your domain (traefik.me for testing)
+MAIL=your-email@example.com        # For Let's Encrypt SSL
+WHITELIST=0.0.0.0/0               # IP whitelist (0.0.0.0/0 = all)
+```
+
+**Optional:**
+```bash
+NO_SSL=true                       # Disable SSL (testing only)
+CHAINS_SUBNET=192.168.0.0/26      # Docker network subnet
+```
+
+**Chain-specific (examples):**
+```bash
+ETHEREUM_MAINNET_EXECUTION_RPC=https://fallback-rpc.example.com
+ARBITRUM_SEPOLIA_EXECUTION_RPC=https://arb-sepolia-rpc.example.com
+OP_NODE_NETWORK=mainnet
+OP_NODE_L1_RPC_URL=https://l1-rpc.example.com
+```
+
+### Compose File Structure
+
+Each compose file defines one or more services:
+- **client**: Execution layer (Geth, Erigon, Reth, etc.)
+- **node**: Consensus/derivation node (op-node, lighthouse, etc.)
+- **relay**: DA relay (eigenda-proxy, op-alt, etc.)
+- **proxy**: HTTP/WS proxy (nginx, etc.)
+- **database**: External database (Postgres, etc.)
+
+### Volume Naming
+
+Volumes are named after the config:
+```
+<config-name>_<service>_data
+<config-name>_<service>_config
+```
+
+Example: `ethereum-mainnet-geth-pruned_client_data`
+
+---
+
+## 14. Quick Debugging Checklist
+
+Use this checklist when debugging an issue:
+
+- [ ] **Is the container running?** → `./show-running.sh`
+- [ ] **Are there errors in logs?** → `./logs.sh <config> | grep -i error`
+- [ ] **Is the node synced?** → `./sync-status.sh <config>`
+- [ ] **Are peers connected?** → `./peer-count.sh`
+- [ ] **Are resources adequate?** → `./show-ram.sh`, `./show-db-size.sh`
+- [ ] **Is P2P working?** → Check peer count
+- [ ] **Is RPC responding?** → Test with curl
+- [ ] **Is disk space available?** → `df -h /var/lib/docker`
+- [ ] **Is the config file correct?** → `docker compose -f <file>.yml config`
+- [ ] **Are environment variables set?** → Check `.env`
+- [ ] **Is the genesis file correct?** → Check chain ID
+
+---
+
+## 15. When to Escalate
+
+Escalate to a human operator if:
+
+- [ ] Node stuck for > 2 hours with no progress
+- [ ] Repeated `Fatal` or `panic` errors after restart
+- [ ] Database corruption confirmed
+- [ ] Issue affects multiple nodes across different chains
+- [ ] Need to force-push to this repo
+
+---
+
+## 16. File Locations Quick Reference
+
+| What You Need | Where to Find It |
+|---|---|
+| Compose files | Root of this repo (`*.yml`) |
+| Operational scripts | Root of this repo (`*.sh`) |
+| Chain assets | `<network>/<chain>/` or `<stack>/<network>/<settlement>/` |
+| Genesis files | `<stack>/<network>/<settlement>/genesis.json` |
+| Rollup configs | `op/<network>/<settlement>/rollup.json` |
+| Custom Dockerfiles | `<path>/*.Dockerfile` |
+| Init scripts | `<path>/scripts/init.sh` |
+| CometBFT common | `scripts/cometbft-common.sh` |
+| Compose registry | `compose_registry.json` |
+| RPC endpoints | `reference-rpc-endpoint.json` |
+| Environment | `.env` |
+
+---
+
+## 17. Resource Requirements Reference
+
+| Node Type | Disk | RAM | CPU |
+|---|---|---|---|
+| Ethereum pruned | ~500GB | 8GB | 2+ cores |
+| Ethereum archive | ~2TB+ | 16GB+ | 4+ cores |
+| Ethereum archive-trace | ~4TB+ | 32GB+ | 8+ cores |
+| L2 pruned | ~100-500GB | 4-8GB | 2+ cores |
+| L2 archive | ~1-2TB | 8-16GB | 4+ cores |
+
+**Note:** Requirements vary by chain. Check specific chain documentation.
+
+---
+
+*This file is your complete operations and debugging reference. For additional user documentation, see README.md.*

abstract/external-node/abstract-mainnet-external-node-archive.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   abstract-mainnet-archive:
-    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_MAINNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_MAINNET_EXTERNAL_NODE_VERSION:-v31.0.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -98,6 +98,7 @@ services:
       - traefik.http.routers.abstract-mainnet-external-node-archive.service=abstract-mainnet-external-node-archive
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-mainnet-archive`) || Path(`/abstract-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.abstract-mainnet-external-node-archive-ws.rule=(Path(`/abstract-mainnet-archive`) || Path(`/abstract-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.abstract-mainnet-external-node-archive-ws.middlewares=abstract-mainnet-external-node-archive-stripprefix, ipallowlist

abstract/external-node/abstract-mainnet-external-node-pruned.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   abstract-mainnet:
-    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_MAINNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_MAINNET_EXTERNAL_NODE_VERSION:-v31.0.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -98,6 +98,7 @@ services:
       - traefik.http.routers.abstract-mainnet-external-node-pruned.service=abstract-mainnet-external-node-pruned
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-mainnet`) || Path(`/abstract-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.abstract-mainnet-external-node-pruned-ws.rule=(Path(`/abstract-mainnet`) || Path(`/abstract-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.abstract-mainnet-external-node-pruned-ws.middlewares=abstract-mainnet-external-node-pruned-stripprefix, ipallowlist

abstract/external-node/abstract-testnet-external-node-archive.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   abstract-testnet-archive:
-    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_TESTNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_TESTNET_EXTERNAL_NODE_VERSION:-v31.0.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -98,6 +98,7 @@ services:
       - traefik.http.routers.abstract-testnet-external-node-archive.service=abstract-testnet-external-node-archive
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-testnet-archive`) || Path(`/abstract-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.abstract-testnet-external-node-archive-ws.rule=(Path(`/abstract-testnet-archive`) || Path(`/abstract-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.abstract-testnet-external-node-archive-ws.middlewares=abstract-testnet-external-node-archive-stripprefix, ipallowlist

abstract/external-node/abstract-testnet-external-node-pruned.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   abstract-testnet:
-    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_TESTNET_EXTERNAL_NODE_VERSION:-v29.17.0}
+    image: ${ABSTRACT_EXTERNAL_NODE_IMAGE:-matterlabs/external-node}:${ABSTRACT_TESTNET_EXTERNAL_NODE_VERSION:-v31.0.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -98,6 +98,7 @@ services:
       - traefik.http.routers.abstract-testnet-external-node-pruned.service=abstract-testnet-external-node-pruned
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-testnet`) || Path(`/abstract-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.abstract-testnet-external-node-pruned-ws.rule=(Path(`/abstract-testnet`) || Path(`/abstract-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.abstract-testnet-external-node-pruned-ws.middlewares=abstract-testnet-external-node-pruned-stripprefix, ipallowlist

accesslog-shipper.awk

@@ -0,0 +1,18 @@
+# Streams dshackle access-log lines unchanged, and every 1000 lines OR 30s
+# injects a __shipstat__ checkpoint carrying the cumulative sent-count for this
+# connection. The splits cruncher (claude host) filters these OUT of event
+# processing and uses them to reconcile shipped-vs-ingested per gateway per hour
+# — the completeness signal the time-based floor cannot see (event-loss-by-
+# rotation, 2026-07-10). `sess` = connection-start epoch so the cruncher detects
+# counter resets on shipper reconnect (retry loop resumes at file END).
+BEGIN { sess = systime(); last = sess; n = 0 }
+{
+    n++
+    print
+    now = systime()
+    if (n % 1000 == 0 || now - last >= 30) {
+        printf "{\"__shipstat__\":1,\"sess\":%d,\"sent\":%d,\"ts\":%d}\n", sess, n, now
+        fflush()
+        last = now
+    }
+}

apply-dshackle-overrides.py

@@ -0,0 +1,143 @@
+#!/usr/bin/env python3
+"""apply-dshackle-overrides.py - weave HOST-LOCAL dshackle upstream overrides into
+the generated main_configs/*.yaml so they survive every configure-drpc regeneration.
+
+Override file (NOT in the repo - host-local, like rpc-local/compose.d):
+    /root/rpc-local/dshackle-overrides.yaml
+
+Schema (match by upstream id OR by chain; id wins):
+    upstreams:
+      uk-4-base-mainnet-op-reth-pruned:        # or e.g. "chain:base"
+        method_groups_disabled: [trace, debug] # removed from enabled, added to disabled
+        methods_disabled: [eth_getFilterLogs]  # per-method disables (methods.disabled)
+        options:
+          disable-validation: true             # merged into upstream options
+
+Rationale: heavy methods at flat per-call pay poison the chain's latency scoring
+(operator method-eviction rule 2026-07-10; see method-economics.py). The disable
+decision is local to the gateway's market, so the config lives on the gateway.
+
+Called by reload_dshackle.sh before signaling dshackle - i.e. re-applied on every
+ansible config push. NOTE: dshackle only re-reads upstream method lists on RESTART;
+this keeps the on-disk config permanently correct, the next restart activates it.
+Idempotent. Silent no-op when the override file is absent.
+"""
+import glob
+import os
+import sys
+
+import yaml
+
+OVERRIDES = '/root/rpc-local/dshackle-overrides.yaml'
+CONFIG_DIR = '/root/rpc/main_configs'
+
+
+def apply(upstream, ov):
+    changed = False
+    mg = upstream.setdefault('method-groups', {}) or {}
+    for grp in ov.get('method_groups_disabled') or []:
+        en = mg.get('enabled') or []
+        if grp in en:
+            en.remove(grp)
+            mg['enabled'] = en
+            changed = True
+        dis = mg.get('disabled') or []
+        if grp not in dis:
+            dis.append(grp)
+            mg['disabled'] = dis
+            changed = True
+    if mg:
+        upstream['method-groups'] = mg
+    for meth in ov.get('methods_disabled') or []:
+        methods = upstream.setdefault('methods', {}) or {}
+        dis = methods.get('disabled') or []
+        if not any((d.get('name') if isinstance(d, dict) else d) == meth for d in dis):
+            dis.append({'name': meth})
+            methods['disabled'] = dis
+            upstream['methods'] = methods
+            changed = True
+    for k, v in (ov.get('options') or {}).items():
+        opts = upstream.setdefault('options', {}) or {}
+        if opts.get(k) != v:
+            opts[k] = v
+            upstream['options'] = opts
+            changed = True
+    return changed
+
+
+ENVFILE = '/root/rpc/.env'
+
+
+def env_overrides():
+    """Chain-level overrides from .env (rendered from host_vars env_overrides):
+        DSHACKLE_<CHAIN>_METHOD_GROUPS_DISABLED=trace,debug
+        DSHACKLE_<CHAIN>_METHODS_DISABLED=eth_getFilterLogs
+    <CHAIN> = dshackle chain name, upper, '-' -> '_' (e.g. BASE, ETH_BEACON_CHAIN)."""
+    spec = {}
+    if not os.path.exists(ENVFILE):
+        return spec
+    import re as _re
+    for line in open(ENVFILE):
+        m = _re.match(r'DSHACKLE_([A-Z0-9_]+)_(METHOD_GROUPS|METHODS)_DISABLED=(.*)', line.strip())
+        if not m:
+            continue
+        chain = m.group(1).lower().replace('_', '-')
+        key = 'method_groups_disabled' if m.group(2) == 'METHOD_GROUPS' else 'methods_disabled'
+        vals = [v.strip() for v in m.group(3).split(',') if v.strip()]
+        if vals:
+            spec.setdefault(f'chain:{chain}', {}).setdefault(key, []).extend(vals)
+    return spec
+
+
+def main():
+    spec = env_overrides()
+    if os.path.exists(OVERRIDES):
+        for k, v in ((yaml.safe_load(open(OVERRIDES)) or {}).get('upstreams') or {}).items():
+            cur = spec.setdefault(k, {})
+            for kk, vv in (v or {}).items():
+                if isinstance(vv, list):
+                    cur[kk] = sorted(set((cur.get(kk) or []) + vv))
+                else:
+                    cur.setdefault(kk, vv)
+    if not spec:
+        return
+    total = 0
+    for path in glob.glob(os.path.join(CONFIG_DIR, '*.yaml')):
+        try:
+            doc = yaml.safe_load(open(path))
+        except yaml.YAMLError:
+            continue
+        if not isinstance(doc, dict) or 'upstreams' not in doc:
+            continue
+        changed = False
+        for up in doc['upstreams'] or []:
+            if not isinstance(up, dict):
+                continue
+            ov = spec.get(up.get('id')) or spec.get(f"chain:{up.get('chain')}")
+            if ov and apply(up, ov):
+                changed = True
+        if changed:
+            text = yaml.safe_dump(doc, default_flow_style=False, sort_keys=False)
+            # dshackle silently refuses to hot-reload configs containing TABS
+            # (operator gotcha 2026-07-10) - fail loudly, never write a tabbed file.
+            if '\t' in text:
+                print(f'dshackle-overrides: REFUSING to write {path} - tab in output')
+                continue
+            with open(path, 'w') as f:
+                f.write(text)
+            total += 1
+            print(f'dshackle-overrides: rewove {path}')
+    # tab audit on ALL configs (even unchanged): a tabbed file silently fails
+    # dshackle's hot-reload, so disk and running state diverge invisibly.
+    for path in glob.glob(os.path.join(CONFIG_DIR, '*.yaml')):
+        try:
+            if '\t' in open(path, errors='replace').read():
+                print(f'dshackle-overrides: WARNING {path} contains TABS - dshackle will SILENTLY skip reloading it')
+        except OSError:
+            pass
+    if total:
+        print(f'dshackle-overrides: {total} file(s) rewoven (dshackle hot-reloads on the HUP that follows)')
+
+
+if __name__ == '__main__':
+    main()

arb/arbnode/arbitrum-one-arbnode-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #

arb/nitro-erigon/arbitrum-sepolia-nitro-erigon-archive-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #

arb/nitro-erigon/arbitrum-sepolia-nitro-erigon-minimal-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #

arb/nitro-erigon/arbitrum-sepolia-nitro-erigon-pruned-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #

arb/nitro/alephzero-mainnet-nitro-archive-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   alephzero-mainnet-archive:
-    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_MAINNET_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das.alephzero.raas.gelato.cloud
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.alephzero.raas.gelato.cloud
       - --node.feed.input.url=wss://feed.alephzero.raas.gelato.cloud
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/alephzero-mainnet-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   alephzero-mainnet:
-    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_MAINNET_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das.alephzero.raas.gelato.cloud
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.alephzero.raas.gelato.cloud
       - --node.feed.input.url=wss://feed.alephzero.raas.gelato.cloud
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/alephzero-sepolia-nitro-archive-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   alephzero-sepolia-archive:
-    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_SEPOLIA_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das.alephzero-testnet.gelato.digital
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.alephzero-testnet.gelato.digital
       - --node.feed.input.url=wss://feed.alephzero-testnet.gelato.digital
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/alephzero-sepolia-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   alephzero-sepolia:
-    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_SEPOLIA_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ALEPHZERO_NITRO_IMAGE:-offchainlabs/nitro-node}:${ALEPHZERO_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das.alephzero-testnet.gelato.digital
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.alephzero-testnet.gelato.digital
       - --node.feed.input.url=wss://feed.alephzero-testnet.gelato.digital
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/apechain-mainnet-nitro-archive-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -73,7 +73,7 @@ services:
       - --node.feed.input.url=wss://apechain.calderachain.xyz/feed
       - --node.sequencer=false
       - --node.staker.enable=false
-      - --parent-chain.connection.url=${ARBITRUM_ONE_EXECUTION_RPC}
+      - --parent-chain.connection.url=https://arb1.arbitrum.io/rpc
       - --persistent.chain=/root/.arbitrum/apechain-mainnet-archive
       - --persistent.db-engine=pebble
       - --ws.addr=0.0.0.0

arb/nitro/apechain-mainnet-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -73,7 +73,7 @@ services:
       - --node.feed.input.url=wss://apechain.calderachain.xyz/feed
       - --node.sequencer=false
       - --node.staker.enable=false
-      - --parent-chain.connection.url=${ARBITRUM_ONE_EXECUTION_RPC}
+      - --parent-chain.connection.url=https://arb1.arbitrum.io/rpc
       - --persistent.chain=/root/.arbitrum/apechain-mainnet
       - --persistent.db-engine=pebble
       - --ws.addr=0.0.0.0

arb/nitro/arbitrum-nova-nitro-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-nova-archive:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/arbitrum-nova-nitro-archive-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-nova-archive:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/arbitrum-nova-nitro-minimal-pebble-hash.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-nova-minimal:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/arbitrum-nova-nitro-minimal-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-nova-minimal:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/arbitrum-nova-nitro-pruned-pebble-hash.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-nova:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/arbitrum-nova-nitro-pruned-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-nova:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_NOVA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/arbitrum-one-nitro-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-one-archive:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/arbitrum-one-nitro-archive-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-one-archive:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/arbitrum-one-nitro-archive-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-one-archive:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/arbitrum-one-nitro-minimal-pebble-hash.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-one-minimal:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/arbitrum-one-nitro-minimal-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-one-minimal:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/arbitrum-one-nitro-pruned-pebble-hash--fireeth.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #

arb/nitro/arbitrum-one-nitro-pruned-pebble-hash--fireeth.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #

arb/nitro/arbitrum-one-nitro-pruned-pebble-hash.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-one:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/arbitrum-one-nitro-pruned-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-one:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_ONE_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle

arb/nitro/arbitrum-sepolia-nitro-archive-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-sepolia-archive:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -62,6 +62,7 @@ services:
       - --http.corsdomain=*
       - --http.port=8545
       - --http.vhosts=*
+      - --init.validate-genesis-assertion=false
       - --metrics
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070

arb/nitro/arbitrum-sepolia-nitro-minimal-pebble-hash.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-sepolia-minimal:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -63,6 +63,7 @@ services:
       - --http.port=8545
       - --http.vhosts=*
       - --init.prune=minimal
+      - --init.validate-genesis-assertion=false
       - --metrics
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070

arb/nitro/arbitrum-sepolia-nitro-minimal-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-sepolia-minimal:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -62,6 +62,7 @@ services:
       - --http.corsdomain=*
       - --http.port=8545
       - --http.vhosts=*
+      - --init.validate-genesis-assertion=false
       - --metrics
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070

arb/nitro/arbitrum-sepolia-nitro-pruned-pebble-hash.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-sepolia:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -63,6 +63,7 @@ services:
       - --http.port=8545
       - --http.vhosts=*
       - --init.prune=full
+      - --init.validate-genesis-assertion=false
       - --metrics
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070

arb/nitro/arbitrum-sepolia-nitro-pruned-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   arbitrum-sepolia:
-    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${ARBITRUM_NITRO_IMAGE:-offchainlabs/nitro-node}:${ARBITRUM_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -62,6 +62,7 @@ services:
       - --http.corsdomain=*
       - --http.port=8545
       - --http.vhosts=*
+      - --init.validate-genesis-assertion=false
       - --metrics
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070

arb/nitro/connext-sepolia-nitro-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   connext-sepolia-archive:
-    image: ${CONNEXT_NITRO_IMAGE:-offchainlabs/nitro-node}:${CONNEXT_SEPOLIA_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${CONNEXT_NITRO_IMAGE:-offchainlabs/nitro-node}:${CONNEXT_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das.connext-sepolia.gelato.digital
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.connext-sepolia.gelato.digital
       - --node.feed.input.url=wss://feed.connext-sepolia.gelato.digital
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/connext-sepolia-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   connext-sepolia:
-    image: ${CONNEXT_NITRO_IMAGE:-offchainlabs/nitro-node}:${CONNEXT_SEPOLIA_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${CONNEXT_NITRO_IMAGE:-offchainlabs/nitro-node}:${CONNEXT_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das.connext-sepolia.gelato.digital
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.connext-sepolia.gelato.digital
       - --node.feed.input.url=wss://feed.connext-sepolia.gelato.digital
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/everclear-mainnet-nitro-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   everclear-mainnet-archive:
-    image: ${EVERCLEAR_NITRO_IMAGE:-offchainlabs/nitro-node}:${EVERCLEAR_MAINNET_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${EVERCLEAR_NITRO_IMAGE:-offchainlabs/nitro-node}:${EVERCLEAR_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das.everclear.raas.gelato.cloud
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.everclear.raas.gelato.cloud
       - --node.feed.input.url=wss://feed.everclear.raas.gelato.cloud
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/everclear-mainnet-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   everclear-mainnet:
-    image: ${EVERCLEAR_NITRO_IMAGE:-offchainlabs/nitro-node}:${EVERCLEAR_MAINNET_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${EVERCLEAR_NITRO_IMAGE:-offchainlabs/nitro-node}:${EVERCLEAR_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das.everclear.raas.gelato.cloud
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.everclear.raas.gelato.cloud
       - --node.feed.input.url=wss://feed.everclear.raas.gelato.cloud
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/opencampuscodex-sepolia-nitro-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   opencampuscodex-sepolia-archive:
-    image: ${OPENCAMPUSCODEX_NITRO_IMAGE:-offchainlabs/nitro-node}:${OPENCAMPUSCODEX_SEPOLIA_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${OPENCAMPUSCODEX_NITRO_IMAGE:-offchainlabs/nitro-node}:${OPENCAMPUSCODEX_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das.open-campus-codex.gelato.digital
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.open-campus-codex.gelato.digital
       - --node.feed.input.url=wss://feed.open-campus-codex.gelato.digital
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/opencampuscodex-sepolia-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   opencampuscodex-sepolia:
-    image: ${OPENCAMPUSCODEX_NITRO_IMAGE:-offchainlabs/nitro-node}:${OPENCAMPUSCODEX_SEPOLIA_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${OPENCAMPUSCODEX_NITRO_IMAGE:-offchainlabs/nitro-node}:${OPENCAMPUSCODEX_SEPOLIA_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das.open-campus-codex.gelato.digital
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.open-campus-codex.gelato.digital
       - --node.feed.input.url=wss://feed.open-campus-codex.gelato.digital
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/playblock-mainnet-nitro-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   playblock-mainnet-archive:
-    image: ${PLAYBLOCK_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLAYBLOCK_MAINNET_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${PLAYBLOCK_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLAYBLOCK_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das.playblock.io
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.playblock.io
       - --node.feed.input.url=wss://feed.playblock.io
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/playblock-mainnet-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   playblock-mainnet:
-    image: ${PLAYBLOCK_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLAYBLOCK_MAINNET_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${PLAYBLOCK_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLAYBLOCK_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das.playblock.io
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.playblock.io
       - --node.feed.input.url=wss://feed.playblock.io
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/plume-mainnet-nitro-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   plume-mainnet-archive:
-    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das-plume-mainnet-1.t.conduit.xyz
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das-plume-mainnet-1.t.conduit.xyz
       - --node.feed.input.url=wss://relay-plume-mainnet-1.t.conduit.xyz
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/plume-mainnet-nitro-archive-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   plume-mainnet-archive:
-    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das-plume-mainnet-1.t.conduit.xyz
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das-plume-mainnet-1.t.conduit.xyz
       - --node.feed.input.url=wss://relay-plume-mainnet-1.t.conduit.xyz
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/plume-mainnet-nitro-pruned-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   plume-mainnet:
-    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das-plume-mainnet-1.t.conduit.xyz
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das-plume-mainnet-1.t.conduit.xyz
       - --node.feed.input.url=wss://relay-plume-mainnet-1.t.conduit.xyz
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/plume-mainnet-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   plume-mainnet:
-    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das-plume-mainnet-1.t.conduit.xyz
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das-plume-mainnet-1.t.conduit.xyz
       - --node.feed.input.url=wss://relay-plume-mainnet-1.t.conduit.xyz
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/plume-testnet-nitro-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   plume-testnet-archive:
-    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das-plume-testnet-1.t.conduit.xyz
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das-plume-testnet-1.t.conduit.xyz
       - --node.feed.input.url=wss://relay-plume-testnet-1.t.conduit.xyz
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/plume-testnet-nitro-archive-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   plume-testnet-archive:
-    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das-plume-testnet-1.t.conduit.xyz
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das-plume-testnet-1.t.conduit.xyz
       - --node.feed.input.url=wss://relay-plume-testnet-1.t.conduit.xyz
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/plume-testnet-nitro-pruned-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   plume-testnet:
-    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das-plume-testnet-1.t.conduit.xyz
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das-plume-testnet-1.t.conduit.xyz
       - --node.feed.input.url=wss://relay-plume-testnet-1.t.conduit.xyz
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/plume-testnet-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   plume-testnet:
-    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${PLUME_NITRO_IMAGE:-offchainlabs/nitro-node}:${PLUME_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das-plume-testnet-1.t.conduit.xyz
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das-plume-testnet-1.t.conduit.xyz
       - --node.feed.input.url=wss://relay-plume-testnet-1.t.conduit.xyz
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/real-mainnet-nitro-archive-leveldb-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   real-mainnet-archive:
-    image: ${REAL_NITRO_IMAGE:-offchainlabs/nitro-node}:${REAL_MAINNET_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${REAL_NITRO_IMAGE:-offchainlabs/nitro-node}:${REAL_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das.realforreal.gelato.digital
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.realforreal.gelato.digital
       - --node.feed.input.url=wss://feed.realforreal.gelato.digital
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/real-mainnet-nitro-archive-pebble-hash.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   real-mainnet-archive:
-    image: ${REAL_NITRO_IMAGE:-offchainlabs/nitro-node}:${REAL_MAINNET_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${REAL_NITRO_IMAGE:-offchainlabs/nitro-node}:${REAL_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das.realforreal.gelato.digital
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.realforreal.gelato.digital
       - --node.feed.input.url=wss://feed.realforreal.gelato.digital
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/real-mainnet-nitro-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   real-mainnet:
-    image: ${REAL_NITRO_IMAGE:-offchainlabs/nitro-node}:${REAL_MAINNET_NITRO_VERSION:-v3.10.1-d7f07be}
+    image: ${REAL_NITRO_IMAGE:-offchainlabs/nitro-node}:${REAL_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -67,9 +67,9 @@ services:
       - --metrics-server.addr=0.0.0.0
       - --metrics-server.port=6070
       - --node.batch-poster.enable=false
-      - --node.data-availability.enable=true
-      - --node.data-availability.rest-aggregator.enable=true
-      - --node.data-availability.rest-aggregator.urls=https://das.realforreal.gelato.digital
+      - --node.da.anytrust.enable=true
+      - --node.da.anytrust.rest-aggregator.enable=true
+      - --node.da.anytrust.rest-aggregator.urls=https://das.realforreal.gelato.digital
       - --node.feed.input.url=wss://feed.realforreal.gelato.digital
       - --node.sequencer=false
       - --node.staker.enable=false

arb/nitro/robinhood-mainnet-nitro-archive-pebble-hash.yml

@@ -0,0 +1,143 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/robinhood-mainnet-nitro-archive-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/robinhood-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  robinhood-mainnet-archive:
+    image: ${ROBINHOOD_NITRO_IMAGE:-offchainlabs/nitro-node}:${ROBINHOOD_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${ROBINHOOD_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ROBINHOOD_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ROBINHOOD_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ROBINHOOD_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.mainnet.chain.robinhood.com
+      - --execution.rpc.filter-log-cache-size=${ROBINHOOD_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_FILTER_LOG_CACHE:-32}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.feed.input.url=wss://feed.mainnet.chain.robinhood.com
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/robinhood-mainnet-archive
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ROBINHOOD_MAINNET_NITRO_ARCHIVE_PEBBLE_HASH_DATA:-robinhood-mainnet-nitro-archive-pebble-hash}:/root/.arbitrum
+      - ./arb/robinhood/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.robinhood-mainnet-nitro-archive-pebble-hash-stripprefix.stripprefix.prefixes=/robinhood-mainnet-archive
+      - traefik.http.services.robinhood-mainnet-nitro-archive-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.robinhood-mainnet-nitro-archive-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.robinhood-mainnet-nitro-archive-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.robinhood-mainnet-nitro-archive-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/robinhood-mainnet-archive`) || Path(`/robinhood-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.robinhood-mainnet-nitro-archive-pebble-hash.rule=Path(`/robinhood-mainnet-archive`) || Path(`/robinhood-mainnet-archive/`)}
+      - traefik.http.routers.robinhood-mainnet-nitro-archive-pebble-hash.middlewares=robinhood-mainnet-nitro-archive-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  robinhood-mainnet-nitro-archive-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: robinhood
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/robinhood-mainnet-nitro-pruned-pebble-path.yml

@@ -0,0 +1,144 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/robinhood-mainnet-nitro-pruned-pebble-path.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/robinhood-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  robinhood-mainnet:
+    image: ${ROBINHOOD_NITRO_IMAGE:-offchainlabs/nitro-node}:${ROBINHOOD_MAINNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${ROBINHOOD_MAINNET_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ROBINHOOD_MAINNET_NITRO_PRUNED_PEBBLE_PATH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ROBINHOOD_MAINNET_NITRO_PRUNED_PEBBLE_PATH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.state-scheme=path
+      - --execution.caching.trie-clean-cache=${ROBINHOOD_MAINNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ROBINHOOD_MAINNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.mainnet.chain.robinhood.com
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.feed.input.url=wss://feed.mainnet.chain.robinhood.com
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_MAINNET_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_MAINNET_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/robinhood-mainnet
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ROBINHOOD_MAINNET_NITRO_PRUNED_PEBBLE_PATH_DATA:-robinhood-mainnet-nitro-pruned-pebble-path}:/root/.arbitrum
+      - ./arb/robinhood/mainnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.robinhood-mainnet-nitro-pruned-pebble-path-stripprefix.stripprefix.prefixes=/robinhood-mainnet
+      - traefik.http.services.robinhood-mainnet-nitro-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.robinhood-mainnet-nitro-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.robinhood-mainnet-nitro-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.robinhood-mainnet-nitro-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/robinhood-mainnet`) || Path(`/robinhood-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.robinhood-mainnet-nitro-pruned-pebble-path.rule=Path(`/robinhood-mainnet`) || Path(`/robinhood-mainnet/`)}
+      - traefik.http.routers.robinhood-mainnet-nitro-pruned-pebble-path.middlewares=robinhood-mainnet-nitro-pruned-pebble-path-stripprefix, ipallowlist
+
+volumes:
+  robinhood-mainnet-nitro-pruned-pebble-path:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: robinhood
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/robinhood-testnet-nitro-archive-pebble-hash.yml

@@ -0,0 +1,143 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/robinhood-testnet-nitro-archive-pebble-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/robinhood-testnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  robinhood-testnet-archive:
+    image: ${ROBINHOOD_NITRO_IMAGE:-offchainlabs/nitro-node}:${ROBINHOOD_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=true
+      - --execution.caching.database-cache=${ROBINHOOD_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ROBINHOOD_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.trie-clean-cache=${ROBINHOOD_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ROBINHOOD_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.testnet.chain.robinhood.com
+      - --execution.rpc.filter-log-cache-size=${ROBINHOOD_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_FILTER_LOG_CACHE:-32}
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.rpc.log-history=0
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.feed.input.url=wss://feed.testnet.chain.robinhood.com
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/robinhood-testnet-archive
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ROBINHOOD_TESTNET_NITRO_ARCHIVE_PEBBLE_HASH_DATA:-robinhood-testnet-nitro-archive-pebble-hash}:/root/.arbitrum
+      - ./arb/robinhood/testnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.robinhood-testnet-nitro-archive-pebble-hash-stripprefix.stripprefix.prefixes=/robinhood-testnet-archive
+      - traefik.http.services.robinhood-testnet-nitro-archive-pebble-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.robinhood-testnet-nitro-archive-pebble-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.robinhood-testnet-nitro-archive-pebble-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.robinhood-testnet-nitro-archive-pebble-hash.rule=Host(`$DOMAIN`) && (Path(`/robinhood-testnet-archive`) || Path(`/robinhood-testnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.robinhood-testnet-nitro-archive-pebble-hash.rule=Path(`/robinhood-testnet-archive`) || Path(`/robinhood-testnet-archive/`)}
+      - traefik.http.routers.robinhood-testnet-nitro-archive-pebble-hash.middlewares=robinhood-testnet-nitro-archive-pebble-hash-stripprefix, ipallowlist
+
+volumes:
+  robinhood-testnet-nitro-archive-pebble-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: robinhood-testnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/nitro/robinhood-testnet-nitro-pruned-pebble-path.yml

@@ -0,0 +1,144 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arb/nitro/robinhood-testnet-nitro-pruned-pebble-path.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/robinhood-testnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  robinhood-testnet:
+    image: ${ROBINHOOD_NITRO_IMAGE:-offchainlabs/nitro-node}:${ROBINHOOD_TESTNET_NITRO_VERSION:-v3.11.2-3599aca}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    expose:
+      - 8545
+    command:
+      - --conf.file=/config/baseConfig.json
+      - --execution.caching.archive=${ROBINHOOD_TESTNET_ARCHIVE_DB:-false}
+      - --execution.caching.database-cache=${ROBINHOOD_TESTNET_NITRO_PRUNED_PEBBLE_PATH_DATABASE_CACHE:-2048}
+      - --execution.caching.snapshot-cache=${ROBINHOOD_TESTNET_NITRO_PRUNED_PEBBLE_PATH_SNAPSHOT_CACHE:-400}
+      - --execution.caching.state-scheme=path
+      - --execution.caching.trie-clean-cache=${ROBINHOOD_TESTNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_CLEAN_CACHE:-600}
+      - --execution.caching.trie-dirty-cache=${ROBINHOOD_TESTNET_NITRO_PRUNED_PEBBLE_PATH_TRIE_DIRTY_CACHE:-1024}
+      - --execution.forwarding-target=https://rpc.testnet.chain.robinhood.com
+      - --execution.rpc.gas-cap=5500000000
+      - --execution.sequencer.enable=false
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,arb,txpool,debug
+      - --http.corsdomain=*
+      - --http.port=8545
+      - --http.vhosts=*
+      - --metrics
+      - --metrics-server.addr=0.0.0.0
+      - --metrics-server.port=6070
+      - --node.batch-poster.enable=false
+      - --node.feed.input.url=wss://feed.testnet.chain.robinhood.com
+      - --node.sequencer=false
+      - --node.staker.enable=false
+      - --parent-chain.blob-client.beacon-url=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - --parent-chain.connection.url=${ETHEREUM_SEPOLIA_EXECUTION_RPC}
+      - --persistent.chain=/root/.arbitrum/robinhood-testnet
+      - --persistent.db-engine=pebble
+      - --ws.addr=0.0.0.0
+      - --ws.origins=*
+      - --ws.port=8545
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${ROBINHOOD_TESTNET_NITRO_PRUNED_PEBBLE_PATH_DATA:-robinhood-testnet-nitro-pruned-pebble-path}:/root/.arbitrum
+      - ./arb/robinhood/testnet:/config
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6070
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.robinhood-testnet-nitro-pruned-pebble-path-stripprefix.stripprefix.prefixes=/robinhood-testnet
+      - traefik.http.services.robinhood-testnet-nitro-pruned-pebble-path.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.robinhood-testnet-nitro-pruned-pebble-path.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.robinhood-testnet-nitro-pruned-pebble-path.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.robinhood-testnet-nitro-pruned-pebble-path.rule=Host(`$DOMAIN`) && (Path(`/robinhood-testnet`) || Path(`/robinhood-testnet/`))}
+      - ${NO_SSL:+traefik.http.routers.robinhood-testnet-nitro-pruned-pebble-path.rule=Path(`/robinhood-testnet`) || Path(`/robinhood-testnet/`)}
+      - traefik.http.routers.robinhood-testnet-nitro-pruned-pebble-path.middlewares=robinhood-testnet-nitro-pruned-pebble-path-stripprefix, ipallowlist
+
+volumes:
+  robinhood-testnet-nitro-pruned-pebble-path:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: robinhood-testnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+        # not compatible with path state scheme
+        - name: debug_traceBlockByHash
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...

arb/robinhood/mainnet/baseConfig.json

@@ -0,0 +1,8 @@
+{
+  "chain": {
+    "info-json": "[{\"chain-id\":4663,\"parent-chain-id\":1,\"parent-chain-is-arbitrum\":false,\"chain-name\":\"robinhood\",\"chain-config\":{\"chainId\":4663,\"homesteadBlock\":0,\"daoForkBlock\":null,\"daoForkSupport\":true,\"eip150Block\":0,\"eip150Hash\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"eip155Block\":0,\"eip158Block\":0,\"byzantiumBlock\":0,\"constantinopleBlock\":0,\"petersburgBlock\":0,\"istanbulBlock\":0,\"muirGlacierBlock\":0,\"berlinBlock\":0,\"londonBlock\":0,\"clique\":{\"period\":0,\"epoch\":0},\"arbitrum\":{\"EnableArbOS\":true,\"AllowDebugPrecompiles\":false,\"DataAvailabilityCommittee\":false,\"InitialArbOSVersion\":51,\"InitialChainOwner\":\"0xc8451c5DE260E7ea1b879e7994967077e71230Ca\",\"GenesisBlockNum\":0,\"MaxCodeSize\":98304,\"MaxInitCodeSize\":196608}},\"rollup\":{\"bridge\":\"0xDf8755334ce7A73cCF6b581C02eA649AE3E864b3\",\"inbox\":\"0x1A07cc4BD17E0118BdB54D70990D2158AbAD7a2D\",\"sequencer-inbox\":\"0xBd0D173EEb87D57A09521c24388a12789F33ba96\",\"rollup\":\"0x23A19d23e89166adedbDcB432518AB01e4272D94\",\"validator-wallet-creator\":\"0xB7FE37712e46F28C8f22Ec4bAA33A09fb8B52BD0\",\"stake-token\":\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"deployed-at\":24994238}}]"
+  },
+  "init": {
+    "genesis-json-file": "/config/robinhood-genesis.json"
+  }
+}

arb/robinhood/testnet/baseConfig.json

@@ -0,0 +1,5 @@
+{
+  "chain": {
+    "info-json": "[{\"chain-id\":46630,\"parent-chain-id\":11155111,\"parent-chain-is-arbitrum\":false,\"chain-name\":\"Robinhood Chain Sepolia\",\"chain-config\":{\"chainId\":46630,\"homesteadBlock\":0,\"daoForkBlock\":null,\"daoForkSupport\":true,\"eip150Block\":0,\"eip150Hash\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"eip155Block\":0,\"eip158Block\":0,\"byzantiumBlock\":0,\"constantinopleBlock\":0,\"petersburgBlock\":0,\"istanbulBlock\":0,\"muirGlacierBlock\":0,\"berlinBlock\":0,\"londonBlock\":0,\"clique\":{\"period\":0,\"epoch\":0},\"arbitrum\":{\"EnableArbOS\":true,\"AllowDebugPrecompiles\":false,\"DataAvailabilityCommittee\":false,\"InitialArbOSVersion\":51,\"InitialChainOwner\":\"0x7131b1c28Df46d845Ee044f2f79AC19Ba14526a8\",\"GenesisBlockNum\":0,\"MaxCodeSize\":98304,\"MaxInitCodeSize\":196608}},\"rollup\":{\"bridge\":\"0x96295BDad104eaD97cC08797b3dC68efF59CcF30\",\"inbox\":\"0xF2939afA86F6f933A3CE17fCAB007907B6b0B7a4\",\"sequencer-inbox\":\"0xA0D9dB3DC9791D54b5183C1C1866eFe1eCA7D414\",\"rollup\":\"0xdc5F8E399DBd8a9F5F87AeC4C23Beb12431b386D\",\"validator-utils\":\"0x0000000000000000000000000000000000000000\",\"validator-wallet-creator\":\"0xB7FE37712e46F28C8f22Ec4bAA33A09fb8B52BD0\",\"stake-token\":\"0x7b79995e5f793A07Bc00c21412e50Ecae098E7f9\",\"deployed-at\":10204516}}]"
+  }
+}

arc/reth/arc-mainnet-reth-archive-trace.yml

@@ -0,0 +1,180 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arc/reth/arc-mainnet-reth-archive-trace.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arc-mainnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arc-mainnet-archive-consensus-init:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-0.7.2}
+    user: 0:0
+    entrypoint: [/usr/local/bin/arc-node-consensus, init]
+    command:
+      - --home=/data/consensus
+    restart: no
+    networks:
+      - chains
+    volumes:
+      - ${ARC_MAINNET_RETH_ARCHIVE_TRACE_CONSENSUS_DATA:-arc-mainnet-reth-archive-trace-consensus}:/data/consensus
+    logging: *logging-defaults
+
+  arc-mainnet-archive-sockets-init:
+    image: debian:bookworm-slim
+    entrypoint: [/bin/sh, -c]
+    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    restart: no
+    depends_on:
+      arc-mainnet-archive-consensus-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - arc-mainnet-reth-archive-trace-sockets:/sockets
+    logging: *logging-defaults
+
+  arc-mainnet-archive:
+    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_MAINNET_RETH_VERSION:-0.7.2}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: 0:0
+    expose:
+      - 8545
+      - 9001
+    entrypoint: [/usr/local/bin/arc-node-execution, node]
+    command:
+      - --auth-ipc
+      - --auth-ipc.path=/sockets/auth.ipc
+      - --chain=arc-mainnet
+      - --datadir=/data/execution
+      - --disable-discovery
+      - --enable-arc-rpc
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,txpool,trace,debug
+      - --http.port=8545
+      - --ipcpath=/sockets/reth.ipc
+      - --log.file.directory=/data/execution/logs
+      - --metrics=0.0.0.0:9001
+      - --rpc.forwarder=https://rpc.arc.network/
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-mainnet-archive-sockets-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - ${ARC_MAINNET_RETH_ARCHIVE_TRACE_EXECUTION_DATA:-arc-mainnet-reth-archive-trace-execution}:/data/execution
+      - /slowdisk:/slowdisk
+      - arc-mainnet-reth-archive-trace-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=9001
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.arc-mainnet-reth-archive-trace-stripprefix.stripprefix.prefixes=/arc-mainnet-archive
+      - traefik.http.services.arc-mainnet-reth-archive-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arc-mainnet-reth-archive-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arc-mainnet-reth-archive-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arc-mainnet-reth-archive-trace.rule=Host(`$DOMAIN`) && (Path(`/arc-mainnet-archive`) || Path(`/arc-mainnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.arc-mainnet-reth-archive-trace.rule=Path(`/arc-mainnet-archive`) || Path(`/arc-mainnet-archive/`)}
+      - traefik.http.routers.arc-mainnet-reth-archive-trace.middlewares=arc-mainnet-reth-archive-trace-stripprefix, ipallowlist
+    shm_size: 2gb
+
+  arc-mainnet-archive-node:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-0.7.2}
+    user: 0:0
+    expose:
+      - 31000
+      - 29000
+    entrypoint: [/usr/local/bin/arc-node-consensus, start]
+    command:
+      - --eth-socket=/sockets/reth.ipc
+      - --execution-persistence-backpressure
+      - --execution-persistence-backpressure-threshold=200
+      - --execution-socket=/sockets/auth.ipc
+      - --follow
+      - --follow.endpoint=https://rpc.arc.network,wss=rpc.arc.network
+      - --follow.endpoint=https://arc.drpc.org,wss=arc.drpc.org
+      - --full
+      - --home=/data/consensus
+      - --metrics=0.0.0.0:29000
+      - --rpc.addr=0.0.0.0:31000
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-mainnet-archive-consensus-init:
+        condition: service_completed_successfully
+      arc-mainnet-archive:
+        condition: service_started
+        restart: true
+    networks:
+      - chains
+    volumes:
+      - ${ARC_MAINNET_RETH_ARCHIVE_TRACE_CONSENSUS_DATA:-arc-mainnet-reth-archive-trace-consensus}:/data/consensus
+      - arc-mainnet-reth-archive-trace-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=29000
+
+volumes:
+  arc-mainnet-reth-archive-trace-consensus:
+  arc-mainnet-reth-archive-trace-execution:
+  arc-mainnet-reth-archive-trace-sockets:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+    chain: arc
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      enabled:
+        - name: txpool_content
+...

arc/reth/arc-mainnet-reth-pruned-trace.yml

@@ -0,0 +1,181 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arc/reth/arc-mainnet-reth-pruned-trace.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arc-mainnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arc-mainnet-consensus-init:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-0.7.2}
+    user: 0:0
+    entrypoint: [/usr/local/bin/arc-node-consensus, init]
+    command:
+      - --home=/data/consensus
+    restart: no
+    networks:
+      - chains
+    volumes:
+      - ${ARC_MAINNET_RETH_PRUNED_TRACE_CONSENSUS_DATA:-arc-mainnet-reth-pruned-trace-consensus}:/data/consensus
+    logging: *logging-defaults
+
+  arc-mainnet-sockets-init:
+    image: debian:bookworm-slim
+    entrypoint: [/bin/sh, -c]
+    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    restart: no
+    depends_on:
+      arc-mainnet-consensus-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - arc-mainnet-reth-pruned-trace-sockets:/sockets
+    logging: *logging-defaults
+
+  arc-mainnet:
+    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_MAINNET_RETH_VERSION:-0.7.2}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: 0:0
+    expose:
+      - 8545
+      - 9001
+    entrypoint: [/usr/local/bin/arc-node-execution, node]
+    command:
+      - --auth-ipc
+      - --auth-ipc.path=/sockets/auth.ipc
+      - --chain=arc-mainnet
+      - --datadir=/data/execution
+      - --disable-discovery
+      - --enable-arc-rpc
+      - --full
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,txpool,trace,debug
+      - --http.port=8545
+      - --ipcpath=/sockets/reth.ipc
+      - --log.file.directory=/data/execution/logs
+      - --metrics=0.0.0.0:9001
+      - --rpc.forwarder=https://rpc.arc.network/
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-mainnet-sockets-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - ${ARC_MAINNET_RETH_PRUNED_TRACE_EXECUTION_DATA:-arc-mainnet-reth-pruned-trace-execution}:/data/execution
+      - /slowdisk:/slowdisk
+      - arc-mainnet-reth-pruned-trace-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=9001
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.arc-mainnet-reth-pruned-trace-stripprefix.stripprefix.prefixes=/arc-mainnet
+      - traefik.http.services.arc-mainnet-reth-pruned-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arc-mainnet-reth-pruned-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arc-mainnet-reth-pruned-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arc-mainnet-reth-pruned-trace.rule=Host(`$DOMAIN`) && (Path(`/arc-mainnet`) || Path(`/arc-mainnet/`))}
+      - ${NO_SSL:+traefik.http.routers.arc-mainnet-reth-pruned-trace.rule=Path(`/arc-mainnet`) || Path(`/arc-mainnet/`)}
+      - traefik.http.routers.arc-mainnet-reth-pruned-trace.middlewares=arc-mainnet-reth-pruned-trace-stripprefix, ipallowlist
+    shm_size: 2gb
+
+  arc-mainnet-node:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_MAINNET_CONSENSUS_VERSION:-0.7.2}
+    user: 0:0
+    expose:
+      - 31000
+      - 29000
+    entrypoint: [/usr/local/bin/arc-node-consensus, start]
+    command:
+      - --eth-socket=/sockets/reth.ipc
+      - --execution-persistence-backpressure
+      - --execution-persistence-backpressure-threshold=200
+      - --execution-socket=/sockets/auth.ipc
+      - --follow
+      - --follow.endpoint=https://rpc.arc.network,wss=rpc.arc.network
+      - --follow.endpoint=https://arc.drpc.org,wss=arc.drpc.org
+      - --full
+      - --home=/data/consensus
+      - --metrics=0.0.0.0:29000
+      - --rpc.addr=0.0.0.0:31000
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-mainnet-consensus-init:
+        condition: service_completed_successfully
+      arc-mainnet:
+        condition: service_started
+        restart: true
+    networks:
+      - chains
+    volumes:
+      - ${ARC_MAINNET_RETH_PRUNED_TRACE_CONSENSUS_DATA:-arc-mainnet-reth-pruned-trace-consensus}:/data/consensus
+      - arc-mainnet-reth-pruned-trace-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=29000
+
+volumes:
+  arc-mainnet-reth-pruned-trace-consensus:
+  arc-mainnet-reth-pruned-trace-execution:
+  arc-mainnet-reth-pruned-trace-sockets:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+    chain: arc
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      enabled:
+        - name: txpool_content
+...

arc/reth/arc-testnet-reth-archive-trace.yml

@@ -0,0 +1,180 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arc/reth/arc-testnet-reth-archive-trace.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arc-testnet-archive \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arc-testnet-archive-consensus-init:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-v0.7.3}
+    user: 0:0
+    entrypoint: [/usr/local/bin/arc-node-consensus, init]
+    command:
+      - --home=/data/consensus
+    restart: no
+    networks:
+      - chains
+    volumes:
+      - ${ARC_TESTNET_RETH_ARCHIVE_TRACE_CONSENSUS_DATA:-arc-testnet-reth-archive-trace-consensus}:/data/consensus
+    logging: *logging-defaults
+
+  arc-testnet-archive-sockets-init:
+    image: debian:bookworm-slim
+    entrypoint: [/bin/sh, -c]
+    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    restart: no
+    depends_on:
+      arc-testnet-archive-consensus-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - arc-testnet-reth-archive-trace-sockets:/sockets
+    logging: *logging-defaults
+
+  arc-testnet-archive:
+    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_TESTNET_RETH_VERSION:-v0.7.3}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: 0:0
+    expose:
+      - 8545
+      - 9001
+    entrypoint: [/usr/local/bin/arc-node-execution, node]
+    command:
+      - --auth-ipc
+      - --auth-ipc.path=/sockets/auth.ipc
+      - --chain=arc-testnet
+      - --datadir=/data/execution
+      - --disable-discovery
+      - --enable-arc-rpc
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,txpool,trace,debug
+      - --http.port=8545
+      - --ipcpath=/sockets/reth.ipc
+      - --log.file.directory=/data/execution/logs
+      - --metrics=0.0.0.0:9001
+      - --rpc.forwarder=https://rpc.quicknode.testnet.arc.network/
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-testnet-archive-sockets-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - ${ARC_TESTNET_RETH_ARCHIVE_TRACE_EXECUTION_DATA:-arc-testnet-reth-archive-trace-execution}:/data/execution
+      - /slowdisk:/slowdisk
+      - arc-testnet-reth-archive-trace-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=9001
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.arc-testnet-reth-archive-trace-stripprefix.stripprefix.prefixes=/arc-testnet-archive
+      - traefik.http.services.arc-testnet-reth-archive-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-reth-archive-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-reth-archive-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-reth-archive-trace.rule=Host(`$DOMAIN`) && (Path(`/arc-testnet-archive`) || Path(`/arc-testnet-archive/`))}
+      - ${NO_SSL:+traefik.http.routers.arc-testnet-reth-archive-trace.rule=Path(`/arc-testnet-archive`) || Path(`/arc-testnet-archive/`)}
+      - traefik.http.routers.arc-testnet-reth-archive-trace.middlewares=arc-testnet-reth-archive-trace-stripprefix, ipallowlist
+    shm_size: 2gb
+
+  arc-testnet-archive-node:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-v0.7.3}
+    user: 0:0
+    expose:
+      - 31000
+      - 29000
+    entrypoint: [/usr/local/bin/arc-node-consensus, start]
+    command:
+      - --eth-socket=/sockets/reth.ipc
+      - --execution-persistence-backpressure
+      - --execution-persistence-backpressure-threshold=200
+      - --execution-socket=/sockets/auth.ipc
+      - --follow
+      - --follow.endpoint=https://rpc.quicknode.testnet.arc.network,wss=rpc.quicknode.testnet.arc.network
+      - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
+      - --full
+      - --home=/data/consensus
+      - --metrics=0.0.0.0:29000
+      - --rpc.addr=0.0.0.0:31000
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-testnet-archive-consensus-init:
+        condition: service_completed_successfully
+      arc-testnet-archive:
+        condition: service_started
+        restart: true
+    networks:
+      - chains
+    volumes:
+      - ${ARC_TESTNET_RETH_ARCHIVE_TRACE_CONSENSUS_DATA:-arc-testnet-reth-archive-trace-consensus}:/data/consensus
+      - arc-testnet-reth-archive-trace-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=29000
+
+volumes:
+  arc-testnet-reth-archive-trace-consensus:
+  arc-testnet-reth-archive-trace-execution:
+  arc-testnet-reth-archive-trace-sockets:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+    chain: arc-testnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      enabled:
+        - name: txpool_content
+...

arc/reth/arc-testnet-reth-pruned-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -20,7 +20,7 @@ x-logging-defaults: &logging-defaults
 # ...
 # IP=$(curl ipinfo.io/ip)
 # DOMAIN=${IP}.traefik.me
-# COMPOSE_FILE=base.yml:rpc.yml:arc/arc/arc-testnet-arc-full.yml
+# COMPOSE_FILE=base.yml:rpc.yml:arc/reth/arc-testnet-reth-pruned-trace.yml
 #
 # docker compose up -d
 #
@@ -29,36 +29,17 @@ x-logging-defaults: &logging-defaults
 #   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
 
 services:
-  arc-testnet-snapshots:
-    image: ${ARC_ARC_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_TESTNET_ARC_VERSION:-0.7.2}
-    user: 0:0
-    entrypoint: [/usr/local/bin/arc-snapshots, download]
-    command:
-      - --chain=arc-testnet
-      - --consensus-path=/data/consensus
-      - --execution-path=/data/execution
-    restart: no
-    networks:
-      - chains
-    volumes:
-      - ${ARC_TESTNET_ARC_FULL_CONSENSUS_DATA:-arc-testnet-arc-full-consensus}:/data/consensus
-      - ${ARC_TESTNET_ARC_FULL_EXECUTION_DATA:-arc-testnet-arc-full-execution}:/data/execution
-    logging: *logging-defaults
-
   arc-testnet-consensus-init:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-0.7.2}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-v0.7.3}
     user: 0:0
     entrypoint: [/usr/local/bin/arc-node-consensus, init]
     command:
       - --home=/data/consensus
     restart: no
-    depends_on:
-      arc-testnet-snapshots:
-        condition: service_completed_successfully
     networks:
       - chains
     volumes:
-      - ${ARC_TESTNET_ARC_FULL_CONSENSUS_DATA:-arc-testnet-arc-full-consensus}:/data/consensus
+      - ${ARC_TESTNET_RETH_PRUNED_TRACE_CONSENSUS_DATA:-arc-testnet-reth-pruned-trace-consensus}:/data/consensus
     logging: *logging-defaults
 
   arc-testnet-sockets-init:
@@ -72,11 +53,11 @@ services:
     networks:
       - chains
     volumes:
-      - arc-testnet-arc-full-sockets:/sockets
+      - arc-testnet-reth-pruned-trace-sockets:/sockets
     logging: *logging-defaults
 
   arc-testnet:
-    image: ${ARC_ARC_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_TESTNET_ARC_VERSION:-0.7.2}
+    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_TESTNET_RETH_VERSION:-v0.7.3}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -90,6 +71,7 @@ services:
       net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
     ulimits:
       nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
     user: 0:0
     expose:
       - 8545
@@ -119,25 +101,26 @@ services:
     networks:
       - chains
     volumes:
-      - ${ARC_TESTNET_ARC_FULL_EXECUTION_DATA:-arc-testnet-arc-full-execution}:/data/execution
+      - ${ARC_TESTNET_RETH_PRUNED_TRACE_EXECUTION_DATA:-arc-testnet-reth-pruned-trace-execution}:/data/execution
       - /slowdisk:/slowdisk
-      - arc-testnet-arc-full-sockets:/sockets
+      - arc-testnet-reth-pruned-trace-sockets:/sockets
     logging: *logging-defaults
     labels:
       - prometheus-scrape.enabled=true
       - prometheus-scrape.port=9001
       - prometheus-scrape.path=/metrics
       - traefik.enable=true
-      - traefik.http.middlewares.arc-testnet-arc-full-stripprefix.stripprefix.prefixes=/arc-testnet
-      - traefik.http.services.arc-testnet-arc-full.loadbalancer.server.port=8545
-      - ${NO_SSL:-traefik.http.routers.arc-testnet-arc-full.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.arc-testnet-arc-full.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.arc-testnet-arc-full.rule=Host(`$DOMAIN`) && (Path(`/arc-testnet`) || Path(`/arc-testnet/`))}
-      - ${NO_SSL:+traefik.http.routers.arc-testnet-arc-full.rule=Path(`/arc-testnet`) || Path(`/arc-testnet/`)}
-      - traefik.http.routers.arc-testnet-arc-full.middlewares=arc-testnet-arc-full-stripprefix, ipallowlist
+      - traefik.http.middlewares.arc-testnet-reth-pruned-trace-stripprefix.stripprefix.prefixes=/arc-testnet
+      - traefik.http.services.arc-testnet-reth-pruned-trace.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-reth-pruned-trace.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-reth-pruned-trace.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-reth-pruned-trace.rule=Host(`$DOMAIN`) && (Path(`/arc-testnet`) || Path(`/arc-testnet/`))}
+      - ${NO_SSL:+traefik.http.routers.arc-testnet-reth-pruned-trace.rule=Path(`/arc-testnet`) || Path(`/arc-testnet/`)}
+      - traefik.http.routers.arc-testnet-reth-pruned-trace.middlewares=arc-testnet-reth-pruned-trace-stripprefix, ipallowlist
+    shm_size: 2gb
 
   arc-testnet-node:
-    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-0.7.2}
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-v0.7.3}
     user: 0:0
     expose:
       - 31000
@@ -146,12 +129,11 @@ services:
     command:
       - --eth-socket=/sockets/reth.ipc
       - --execution-persistence-backpressure
-      - --execution-persistence-backpressure-threshold=50
+      - --execution-persistence-backpressure-threshold=200
       - --execution-socket=/sockets/auth.ipc
       - --follow
-      - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
-      - --follow.endpoint=https://rpc.drpc.testnet.arc.network,wss=rpc.drpc.testnet.arc.network
       - --follow.endpoint=https://rpc.quicknode.testnet.arc.network,wss=rpc.quicknode.testnet.arc.network
+      - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
       - --full
       - --home=/data/consensus
       - --metrics=0.0.0.0:29000
@@ -163,20 +145,21 @@ services:
         condition: service_completed_successfully
       arc-testnet:
         condition: service_started
+        restart: true
     networks:
       - chains
     volumes:
-      - ${ARC_TESTNET_ARC_FULL_CONSENSUS_DATA:-arc-testnet-arc-full-consensus}:/data/consensus
-      - arc-testnet-arc-full-sockets:/sockets
+      - ${ARC_TESTNET_RETH_PRUNED_TRACE_CONSENSUS_DATA:-arc-testnet-reth-pruned-trace-consensus}:/data/consensus
+      - arc-testnet-reth-pruned-trace-sockets:/sockets
     logging: *logging-defaults
     labels:
       - prometheus-scrape.enabled=true
       - prometheus-scrape.port=29000
 
 volumes:
-  arc-testnet-arc-full-consensus:
-  arc-testnet-arc-full-execution:
-  arc-testnet-arc-full-sockets:
+  arc-testnet-reth-pruned-trace-consensus:
+  arc-testnet-reth-pruned-trace-execution:
+  arc-testnet-reth-pruned-trace-sockets:
 
 x-upstreams:
   - id: $${ID}

arc/reth/arc-testnet-reth-pruned.yml

@@ -0,0 +1,181 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:arc/reth/arc-testnet-reth-pruned.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/arc-testnet \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  arc-testnet-consensus-init:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-v0.7.3}
+    user: 0:0
+    entrypoint: [/usr/local/bin/arc-node-consensus, init]
+    command:
+      - --home=/data/consensus
+    restart: no
+    networks:
+      - chains
+    volumes:
+      - ${ARC_TESTNET_RETH_PRUNED_CONSENSUS_DATA:-arc-testnet-reth-pruned-consensus}:/data/consensus
+    logging: *logging-defaults
+
+  arc-testnet-sockets-init:
+    image: debian:bookworm-slim
+    entrypoint: [/bin/sh, -c]
+    command: [rm -f /sockets/*.ipc && chown 999:999 /sockets]
+    restart: no
+    depends_on:
+      arc-testnet-consensus-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - arc-testnet-reth-pruned-sockets:/sockets
+    logging: *logging-defaults
+
+  arc-testnet:
+    image: ${ARC_RETH_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-execution}:${ARC_TESTNET_RETH_VERSION:-v0.7.3}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+      memlock: -1        # Disable memory locking limits (for in-memory DBs like MDBX)
+    user: 0:0
+    expose:
+      - 8545
+      - 9001
+    entrypoint: [/usr/local/bin/arc-node-execution, node]
+    command:
+      - --auth-ipc
+      - --auth-ipc.path=/sockets/auth.ipc
+      - --chain=arc-testnet
+      - --datadir=/data/execution
+      - --disable-discovery
+      - --enable-arc-rpc
+      - --full
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,txpool,trace,debug
+      - --http.port=8545
+      - --ipcpath=/sockets/reth.ipc
+      - --log.file.directory=/data/execution/logs
+      - --metrics=0.0.0.0:9001
+      - --rpc.forwarder=https://rpc.quicknode.testnet.arc.network/
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-testnet-sockets-init:
+        condition: service_completed_successfully
+    networks:
+      - chains
+    volumes:
+      - ${ARC_TESTNET_RETH_PRUNED_EXECUTION_DATA:-arc-testnet-reth-pruned-execution}:/data/execution
+      - /slowdisk:/slowdisk
+      - arc-testnet-reth-pruned-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=9001
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.arc-testnet-reth-pruned-stripprefix.stripprefix.prefixes=/arc-testnet
+      - traefik.http.services.arc-testnet-reth-pruned.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-reth-pruned.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-reth-pruned.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.arc-testnet-reth-pruned.rule=Host(`$DOMAIN`) && (Path(`/arc-testnet`) || Path(`/arc-testnet/`))}
+      - ${NO_SSL:+traefik.http.routers.arc-testnet-reth-pruned.rule=Path(`/arc-testnet`) || Path(`/arc-testnet/`)}
+      - traefik.http.routers.arc-testnet-reth-pruned.middlewares=arc-testnet-reth-pruned-stripprefix, ipallowlist
+    shm_size: 2gb
+
+  arc-testnet-node:
+    image: ${ARC_CONSENSUS_IMAGE:-docker.cloudsmith.io/circle/arc-network/arc-consensus}:${ARC_TESTNET_CONSENSUS_VERSION:-v0.7.3}
+    user: 0:0
+    expose:
+      - 31000
+      - 29000
+    entrypoint: [/usr/local/bin/arc-node-consensus, start]
+    command:
+      - --eth-socket=/sockets/reth.ipc
+      - --execution-persistence-backpressure
+      - --execution-persistence-backpressure-threshold=200
+      - --execution-socket=/sockets/auth.ipc
+      - --follow
+      - --follow.endpoint=https://rpc.quicknode.testnet.arc.network,wss=rpc.quicknode.testnet.arc.network
+      - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
+      - --full
+      - --home=/data/consensus
+      - --metrics=0.0.0.0:29000
+      - --rpc.addr=0.0.0.0:31000
+    restart: unless-stopped
+    stop_grace_period: 5m
+    depends_on:
+      arc-testnet-consensus-init:
+        condition: service_completed_successfully
+      arc-testnet:
+        condition: service_started
+        restart: true
+    networks:
+      - chains
+    volumes:
+      - ${ARC_TESTNET_RETH_PRUNED_CONSENSUS_DATA:-arc-testnet-reth-pruned-consensus}:/data/consensus
+      - arc-testnet-reth-pruned-sockets:/sockets
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=29000
+
+volumes:
+  arc-testnet-reth-pruned-consensus:
+  arc-testnet-reth-pruned-execution:
+  arc-testnet-reth-pruned-sockets:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+    chain: arc-testnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+        - trace
+    methods:
+      enabled:
+        - name: txpool_content
+...

avalanche/go/avalanche-fuji-go-archive-leveldb.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -87,6 +87,7 @@ services:
       - traefik.http.routers.avalanche-fuji-go-archive-leveldb.service=avalanche-fuji-go-archive-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji-archive`) || Path(`/avalanche-fuji-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.rule=(Path(`/avalanche-fuji-archive`) || Path(`/avalanche-fuji-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.middlewares=avalanche-fuji-go-archive-leveldb-stripprefix, avalanche-fuji-go-archive-leveldb-set-ws-path, ipallowlist

avalanche/go/avalanche-fuji-go-pruned-leveldb.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -87,6 +87,7 @@ services:
       - traefik.http.routers.avalanche-fuji-go-pruned-leveldb.service=avalanche-fuji-go-pruned-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.middlewares=avalanche-fuji-go-pruned-leveldb-stripprefix, avalanche-fuji-go-pruned-leveldb-set-ws-path, ipallowlist

avalanche/go/avalanche-fuji-go-pruned-leveldb.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -87,6 +87,7 @@ services:
       - traefik.http.routers.avalanche-fuji-go-pruned-leveldb.service=avalanche-fuji-go-pruned-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.middlewares=avalanche-fuji-go-pruned-leveldb-stripprefix, avalanche-fuji-go-pruned-leveldb-set-ws-path, ipallowlist

avalanche/go/avalanche-fuji-go-pruned-pebbledb.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -87,6 +87,7 @@ services:
       - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.service=avalanche-fuji-go-pruned-pebbledb
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.middlewares=avalanche-fuji-go-pruned-pebbledb-stripprefix, avalanche-fuji-go-pruned-pebbledb-set-ws-path, ipallowlist

avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -87,6 +87,7 @@ services:
       - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.service=avalanche-fuji-go-pruned-pebbledb
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.middlewares=avalanche-fuji-go-pruned-pebbledb-stripprefix, avalanche-fuji-go-pruned-pebbledb-set-ws-path, ipallowlist

avalanche/go/avalanche-mainnet-go-archive-leveldb.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -87,6 +87,7 @@ services:
       - traefik.http.routers.avalanche-mainnet-go-archive-leveldb.service=avalanche-mainnet-go-archive-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet-archive`) || Path(`/avalanche-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.rule=(Path(`/avalanche-mainnet-archive`) || Path(`/avalanche-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.middlewares=avalanche-mainnet-go-archive-leveldb-stripprefix, avalanche-mainnet-go-archive-leveldb-set-ws-path, ipallowlist

avalanche/go/avalanche-mainnet-go-pruned-leveldb.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -87,6 +87,7 @@ services:
       - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb.service=avalanche-mainnet-go-pruned-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.middlewares=avalanche-mainnet-go-pruned-leveldb-stripprefix, avalanche-mainnet-go-pruned-leveldb-set-ws-path, ipallowlist

avalanche/go/avalanche-mainnet-go-pruned-leveldb.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -87,6 +87,7 @@ services:
       - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb.service=avalanche-mainnet-go-pruned-leveldb
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.middlewares=avalanche-mainnet-go-pruned-leveldb-stripprefix, avalanche-mainnet-go-pruned-leveldb-set-ws-path, ipallowlist

avalanche/go/avalanche-mainnet-go-pruned-pebbledb.prune.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -87,6 +87,7 @@ services:
       - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb.service=avalanche-mainnet-go-pruned-pebbledb
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.middlewares=avalanche-mainnet-go-pruned-pebbledb-stripprefix, avalanche-mainnet-go-pruned-pebbledb-set-ws-path, ipallowlist

avalanche/go/avalanche-mainnet-go-pruned-pebbledb.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -87,6 +87,7 @@ services:
       - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb.service=avalanche-mainnet-go-pruned-pebbledb
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.entrypoints=websecure}
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
       - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
       - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.middlewares=avalanche-mainnet-go-pruned-pebbledb-stripprefix, avalanche-mainnet-go-pruned-pebbledb-set-ws-path, ipallowlist

aztec/aztec/aztec-mainnet-aztec-pruned.yml

@@ -0,0 +1,112 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+# Aztec full node. See https://docs.aztec.network/network/setup/running_a_node
+# Admin port (8880) is not exposed; use docker exec for admin API.
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:aztec/aztec/aztec-mainnet-aztec-pruned.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/aztec-mainnet-pruned \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  aztec-mainnet-pruned:
+    image: ${AZTEC_AZTEC_IMAGE:-aztecprotocol/aztec}:${AZTEC_MAINNET_AZTEC_VERSION:-5.0.1}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 13840:13840
+      - 13840:13840/udp
+    expose:
+      - 8545
+    environment:
+      AZTEC_ADMIN_PORT: '8880'
+      AZTEC_PORT: '8545'
+      DATA_DIRECTORY: /var/lib/data
+      ETHEREUM_DEBUG_HOSTS: ${ETHEREUM_MAINNET_DEBUG_HOSTS:-${ETHEREUM_MAINNET_EXECUTION_RPC}}
+      ETHEREUM_HOSTS: ${ETHEREUM_MAINNET_EXECUTION_RPC}
+      L1_CONSENSUS_HOST_URLS: ${ETHEREUM_MAINNET_BEACON_REST}
+      LOG_LEVEL: ${AZTEC_LOG_LEVEL:-info}
+      P2P_IP: ${IP}
+      P2P_PORT: '13840'
+    entrypoint: [node, --no-warnings, /usr/src/yarn-project/aztec/dest/bin/index.js, start]
+    command:
+      - --node
+      - --network=mainnet
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${AZTEC_MAINNET_AZTEC_PRUNED_DATA:-aztec-mainnet-aztec-pruned}:/var/lib/data
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
+      - traefik.enable=true
+      - traefik.http.middlewares.aztec-mainnet-aztec-pruned-stripprefix.stripprefix.prefixes=/aztec-mainnet-pruned
+      - traefik.http.services.aztec-mainnet-aztec-pruned.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.aztec-mainnet-aztec-pruned.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.aztec-mainnet-aztec-pruned.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.aztec-mainnet-aztec-pruned.rule=Host(`$DOMAIN`) && (Path(`/aztec-mainnet-pruned`) || Path(`/aztec-mainnet-pruned/`))}
+      - ${NO_SSL:+traefik.http.routers.aztec-mainnet-aztec-pruned.rule=Path(`/aztec-mainnet-pruned`) || Path(`/aztec-mainnet-pruned/`)}
+      - traefik.http.routers.aztec-mainnet-aztec-pruned.middlewares=aztec-mainnet-aztec-pruned-stripprefix, ipallowlist
+
+volumes:
+  aztec-mainnet-aztec-pruned:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: aztec-mainnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...

aztec/aztec/aztec-testnet-aztec-pruned.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 # Aztec full node. See https://docs.aztec.network/network/setup/running_a_node
 # Admin port (8880) is not exposed; use docker exec for admin API.
 
@@ -32,7 +32,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   aztec-testnet-pruned:
-    image: ${AZTEC_AZTEC_IMAGE:-aztecprotocol/aztec}:${AZTEC_TESTNET_AZTEC_VERSION:-5.0.0-rc.1}
+    image: ${AZTEC_AZTEC_IMAGE:-aztecprotocol/aztec}:${AZTEC_TESTNET_AZTEC_VERSION:-5.0.1}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -56,6 +56,7 @@ services:
       AZTEC_ADMIN_PORT: '8880'
       AZTEC_PORT: '8545'
       DATA_DIRECTORY: /var/lib/data
+      ETHEREUM_DEBUG_HOSTS: ${ETHEREUM_SEPOLIA_DEBUG_HOSTS:-${ETHEREUM_SEPOLIA_EXECUTION_RPC}}
       ETHEREUM_HOSTS: ${ETHEREUM_SEPOLIA_EXECUTION_RPC}
       L1_CONSENSUS_HOST_URLS: ${ETHEREUM_SEPOLIA_BEACON_REST}
       LOG_LEVEL: ${AZTEC_LOG_LEVEL:-info}

babylon/babylond/babylon-mainnet-babylond-pruned.yml

@@ -0,0 +1,128 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:babylon/babylond/babylon-mainnet-babylond-pruned.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/babylon-mainnet-pruned \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  babylon-mainnet-pruned:
+    build:
+      context: ./babylon
+      dockerfile: cometbft.Dockerfile
+      args:
+        CL_IMAGE: ${BABYLON_BABYLOND_IMAGE:-babylonlabs/babylond}
+        CL_VERSION: ${BABYLON_MAINNET_BABYLOND_VERSION:-v4.3.0}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 10871:10871
+      - 10871:10871/udp
+    expose:
+      - 26657
+      - 26660
+      - 9090
+      - 1317
+    environment:
+      - CHAIN_ID=bbn-1
+      - GENESIS_URL=https://raw.githubusercontent.com/babylonlabs-io/networks/main/bbn-1/network-artifacts/genesis.json
+      - IP=${IP}
+      - MIN_GAS=0.002ubbn
+      - MONIKER=d${DOMAIN:-local}
+      - P2P_PORT=10871
+      - SEEDS=42fad8afbf7dfca51020c3c6e1a487ce17c4c218@babylon-seed-1.nodes.guru:55706,ade4d8bc8cbe014af6ebdf3cb7b1e9ad36f412c0@seeds.polkachu.com:20656
+      - STATESYNC_RPC=https://babylon-rpc.polkachu.com:443
+      - WASM_SNAPSHOT_URL=https://snapshots.polkachu.com/wasm/babylon/babylon_wasmonly.tar.lz4
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${BABYLON_MAINNET_BABYLOND_PRUNED_DATA:-babylon-mainnet-babylond-pruned}:/root/.babylond
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=26660
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.babylon-mainnet-babylond-pruned-stripprefix.stripprefix.prefixes=/babylon-mainnet-pruned
+      - traefik.http.services.babylon-mainnet-babylond-pruned.loadbalancer.server.port=26657
+      - ${NO_SSL:-traefik.http.routers.babylon-mainnet-babylond-pruned.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.babylon-mainnet-babylond-pruned.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.babylon-mainnet-babylond-pruned.rule=Host(`$DOMAIN`) && (Path(`/babylon-mainnet-pruned`) || Path(`/babylon-mainnet-pruned/`))}
+      - ${NO_SSL:+traefik.http.routers.babylon-mainnet-babylond-pruned.rule=Path(`/babylon-mainnet-pruned`) || Path(`/babylon-mainnet-pruned/`)}
+      - traefik.http.routers.babylon-mainnet-babylond-pruned.middlewares=babylon-mainnet-babylond-pruned-stripprefix, ipallowlist
+      - traefik.http.routers.babylon-mainnet-babylond-pruned.priority=50   # gets any request that is not GET with UPGRADE header
+      - traefik.http.routers.babylon-mainnet-babylond-pruned-ws.priority=100   # answers GET requests first
+      - traefik.http.middlewares.babylon-mainnet-babylond-pruned-set-ws-path.replacepath.path=/websocket
+      - traefik.http.services.babylon-mainnet-babylond-pruned-ws.loadbalancer.server.port=26657
+      - traefik.http.routers.babylon-mainnet-babylond-pruned-ws.service=babylon-mainnet-babylond-pruned-ws
+      - traefik.http.routers.babylon-mainnet-babylond-pruned.service=babylon-mainnet-babylond-pruned
+      - ${NO_SSL:-traefik.http.routers.babylon-mainnet-babylond-pruned-ws.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.babylon-mainnet-babylond-pruned-ws.tls.certresolver=myresolver}
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
+      - ${NO_SSL:-traefik.http.routers.babylon-mainnet-babylond-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/babylon-mainnet-pruned`) || Path(`/babylon-mainnet-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - ${NO_SSL:+traefik.http.routers.babylon-mainnet-babylond-pruned-ws.rule=(Path(`/babylon-mainnet-pruned`) || Path(`/babylon-mainnet-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
+      - traefik.http.routers.babylon-mainnet-babylond-pruned-ws.middlewares=babylon-mainnet-babylond-pruned-stripprefix, babylon-mainnet-babylond-pruned-set-ws-path, ipallowlist
+
+volumes:
+  babylon-mainnet-babylond-pruned:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: babylon
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+...

babylon/cometbft.Dockerfile

@@ -0,0 +1,11 @@
+ARG CL_IMAGE
+ARG CL_VERSION
+FROM ${CL_IMAGE}:${CL_VERSION}
+# Layer the shared CometBFT bootstrap lib + the chain init.sh onto the upstream
+# babylond binary image (alpine-based, has sh+apk; runs nonroot by default — the compose
+# sets user: root so init.sh can apk-add curl and write the /root home).
+USER root
+COPY ./scripts/cometbft-common.sh /usr/local/bin/cometbft-common.sh
+COPY ./scripts/init.sh            /usr/local/bin/init.sh
+RUN chmod +x /usr/local/bin/init.sh /usr/local/bin/cometbft-common.sh
+ENTRYPOINT ["init.sh"]

babylon/scripts/cometbft-common.sh

@@ -0,0 +1,223 @@
+#!/bin/sh
+# cometbft-common.sh — reusable CometBFT-node bootstrap helpers (family C).
+#
+# Source this from a chain-specific init.sh. It encapsulates the operations every
+# CometBFT-consensus node needs (init, fetch config artifacts, patch config.toml /
+# app.toml, seed priv_validator_state), extracted verbatim from the proven berachain
+# beacon-kit entrypoint so callers inherit known-good behavior.
+#
+# Each function takes explicit arguments (paths/values) — it is binary-agnostic. The
+# caller owns the binary name, the `<binary> init` invocation, the artifact URLs, and
+# the final `exec <binary> start ...`. EL-driven chains (beacon-kit, morph) also call
+# the JWT / engine-dial helpers; pure-consensus chains (gaiad) skip them.
+#
+# Conventions: POSIX sh (alpine). Config dir is conventionally $HOME_DIR/config.
+# Used by: morph-node, gaiad (cosmos batch), and any future family-C chain.
+# beacon-kit (berachain) keeps its own bespoke init.sh on purpose — do not retrofit it.
+
+set -e
+
+ct_log() { echo "[cometbft-init] $*"; }
+
+# Ensure curl exists (alpine base images often omit it). Idempotent.
+ct_require_curl() {
+  if ! command -v curl >/dev/null 2>&1; then
+    ct_log "installing curl"
+    apk add --no-cache curl
+  fi
+}
+
+# ct_fetch URL DEST [required]
+#   Download URL -> DEST. If the 3rd arg is "required", a failure is fatal;
+#   otherwise a missing/failed fetch is logged and skipped (returns 0).
+ct_fetch() {
+  _url="$1"; _dest="$2"; _req="${3:-optional}"
+  [ -n "$_url" ] || { [ "$_req" = required ] && { ct_log "FATAL: empty URL for $_dest"; exit 1; }; return 0; }
+  if curl -fsSL "$_url" -o "$_dest"; then
+    ct_log "fetched $_url -> $_dest"
+  else
+    if [ "$_req" = required ]; then
+      ct_log "FATAL: failed to fetch required $_url"; exit 1
+    fi
+    ct_log "skip: could not fetch optional $_url"
+  fi
+}
+
+# ct_patch_p2p CONFIG_TOML IP P2P_PORT
+#   Bind p2p to 0.0.0.0:PORT and advertise IP:PORT (only within the [p2p] section).
+ct_patch_p2p() {
+  _cfg="$1"; _ip="$2"; _port="$3"
+  [ -f "$_cfg" ] || { ct_log "patch_p2p: $_cfg missing, skipping"; return 0; }
+  _laddr="tcp:\\/\\/0\\.0\\.0\\.0\\:${_port}"
+  sed -i "/^\[p2p\]/,/^\[/{s|^laddr = .*|laddr = \"$_laddr\"|}" "$_cfg"
+  sed -i "/^\[p2p\]/,/^\[/{s|^external_address = .*|external_address = \"${_ip}:${_port}\"|}" "$_cfg"
+}
+
+# ct_merge_seeds CONFIG_TOML CONFIGURED_SEEDS [SEEDS_URL]
+#   Merge operator-configured seeds with an optional official seed list (1 entry per
+#   line, first line skipped like the berachain cl-seeds.txt header), dedupe, write.
+ct_merge_seeds() {
+  _cfg="$1"; _seeds="$2"; _url="$3"
+  [ -f "$_cfg" ] || return 0
+  if [ -n "$_url" ]; then
+    _official=$(curl -f -s "$_url" | tail -n +2 | tr '\n' ',' | sed 's/,$//' || true)
+    if [ -n "$_official" ]; then
+      ct_log "merging official seeds from $_url"
+      _seeds=$(echo "${_seeds},${_official}" | tr ',' '\n' | sed '/^$/d' | sort -u | paste -sd,)
+    else
+      ct_log "no official seeds fetched from $_url (continuing with configured)"
+    fi
+  fi
+  if [ -n "$_seeds" ]; then
+    sed -i "s/^seeds = \".*\"/seeds = \"${_seeds}\"/" "$_cfg"
+  fi
+}
+
+# ct_set_persistent_peers CONFIG_TOML PEERS
+#   Handles both cometbft-classic `persistent_peers` (underscore) and forks that use
+#   `persistent-peers` (hyphen, e.g. sei) — patches whichever key is present.
+ct_set_persistent_peers() {
+  _cfg="$1"; _peers="$2"
+  [ -f "$_cfg" ] || return 0
+  [ -n "$_peers" ] || return 0
+  sed -i "s/^persistent_peers = \".*\"/persistent_peers = \"${_peers}\"/" "$_cfg"
+  sed -i "s/^persistent-peers = \".*\"/persistent-peers = \"${_peers}\"/" "$_cfg"
+  return 0
+}
+
+# ct_set_moniker CONFIG_TOML MONIKER
+ct_set_moniker() {
+  _cfg="$1"; _mon="$2"
+  [ -f "$_cfg" ] || return 0
+  [ -n "$_mon" ] && sed -i "s/^moniker = \".*\"/moniker = \"$_mon\"/" "$_cfg"
+  return 0
+}
+
+# ct_set_addrbook CONFIG_DIR ADDRBOOK_URL
+#   Optional: cosmos chains often seed an addrbook.json for faster peer discovery.
+ct_set_addrbook() {
+  _dir="$1"; _url="$2"
+  [ -n "$_url" ] || return 0
+  ct_fetch "$_url" "$_dir/addrbook.json" optional
+}
+
+# ct_write_jwt CONFIG_DIR  [JWT_SRC]
+#   EL-driven chains: copy the shared engine JWT (default /jwtsecret) into the config
+#   dir as jwt.hex so the CL can authenticate to the EL engine API.
+ct_write_jwt() {
+  _dir="$1"; _src="${2:-/jwtsecret}"
+  [ -f "$_src" ] || { ct_log "write_jwt: $_src missing, skipping"; return 0; }
+  cat "$_src" > "$_dir/jwt.hex"
+}
+
+# ct_set_rpc_dial_url APP_TOML AUTH_RPC
+#   beacon-kit / app.toml-style EL engine endpoint (e.g. http://<el>:8551).
+ct_set_rpc_dial_url() {
+  _app="$1"; _rpc="$2"
+  [ -f "$_app" ] || return 0
+  [ -n "$_rpc" ] && sed -i "s|^rpc-dial-url = \".*\"|rpc-dial-url = \"$_rpc\"|" "$_app"
+  return 0
+}
+
+# ct_seed_priv_validator_state HOME_DIR
+#   Ensure data/priv_validator_state.json exists (cometbft refuses to start without it
+#   when one is present in config/). Mirrors the berachain init.sh behavior.
+ct_seed_priv_validator_state() {
+  _home="$1"
+  if [ -e "$_home/config/priv_validator_state.json" ] && [ ! -e "$_home/data/priv_validator_state.json" ]; then
+    mkdir -p "$_home/data"
+    cp "$_home/config/priv_validator_state.json" "$_home/data/priv_validator_state.json"
+  fi
+  return 0
+}
+
+# ct_apk PKG...
+#   Install alpine packages idempotently (most cosmos init scripts need curl, some jq).
+ct_apk() {
+  apk add --no-cache "$@"
+}
+
+# ct_localize_home CONFIG_DIR
+#   Rewrite `~/` to `/root/` in config.toml + app.toml. Cosmos `init` writes home-relative
+#   paths; the container runs as root with a static home, so make paths absolute.
+ct_localize_home() {
+  _dir="$1"
+  [ -f "$_dir/config.toml" ] && sed -i 's|~/|/root/|g' "$_dir/config.toml"
+  [ -f "$_dir/app.toml" ]    && sed -i 's|~/|/root/|g' "$_dir/app.toml"
+  return 0
+}
+
+# ct_set_min_gas_prices APP_TOML PRICE
+#   Cosmos chains reject txs (and sometimes refuse to start) with an empty
+#   minimum-gas-prices. PRICE e.g. "0.01usei", "0.0025uatom", "0.01hqq".
+ct_set_min_gas_prices() {
+  _app="$1"; _price="$2"
+  [ -f "$_app" ] || return 0
+  [ -n "$_price" ] || return 0
+  sed -i "s/minimum-gas-prices = \"\"/minimum-gas-prices = \"${_price}\"/g" "$_app"
+  return 0
+}
+
+# ct_configure_statesync CONFIG_TOML RPC_SERVERS [TRUST_OFFSET]
+#   Enable cometbft state-sync so a fresh node bootstraps near chainhead instead of
+#   replaying from genesis — the single biggest lever for "can't keep it at chainhead"
+#   chains. RPC_SERVERS = comma list of trusted RPC endpoints (>=2 recommended; a single
+#   endpoint is duplicated). TRUST_OFFSET = blocks below head to trust (default 2000).
+#   Requires jq + curl. No-op (logged) if head height can't be fetched.
+ct_configure_statesync() {
+  _cfg="$1"; _rpc="$2"; _offset="${3:-2000}"
+  [ -f "$_cfg" ] || return 0
+  # NEVER re-arm statesync on a node that already has application state (a restored
+  # snapshot or a prior sync). Re-statesyncing over it leaves a broken/partial datadir and,
+  # for wasm chains, drops the wasm files -> startup panic. _cfg is $HOME/config/config.toml,
+  # so application state lives at $HOME/data/application.db.
+  _home=$(dirname "$(dirname "$_cfg")")
+  if [ -e "$_home/data/application.db" ]; then
+    ct_log "statesync: existing data dir, skipping"
+    return 0
+  fi
+  [ -n "$_rpc" ] || { ct_log "statesync: no RPC servers given, skipping"; return 0; }
+  _primary=$(echo "$_rpc" | cut -d, -f1)
+  _latest=$(curl -s "$_primary/block" | jq -r '.result.block.header.height // .block.header.height' 2>/dev/null || true)
+  if [ -z "$_latest" ] || [ "$_latest" = null ]; then
+    ct_log "statesync: could not read head height from $_primary, skipping"; return 0
+  fi
+  _trust_h=$((_latest - _offset))
+  _trust_hash=$(curl -s "$_primary/block?height=$_trust_h" | jq -r '.result.block_id.hash // .block_id.hash' 2>/dev/null || true)
+  [ -n "$_trust_hash" ] && [ "$_trust_hash" != null ] || { ct_log "statesync: no trust hash, skipping"; return 0; }
+  # second server defaults to the first (cometbft wants >=2 for light-client cross-check)
+  echo "$_rpc" | grep -q ',' || _rpc="$_rpc,$_rpc"
+  ct_log "statesync: enable trust_height=$_trust_h trust_hash=$_trust_hash"
+  # Patch ONLY the [statesync] section. CometBFT config.toml uses underscore keys
+  # (rpc_servers/trust_height/trust_hash); tolerate hyphen variants with [_-].
+  sed -i.bak -E "/^\[statesync\]/,/^\[/{
+    s|^([[:space:]]*enable[[:space:]]*=[[:space:]]*).*|\1true|
+    s|^([[:space:]]*rpc[_-]servers[[:space:]]*=[[:space:]]*).*|\1\"$_rpc\"|
+    s|^([[:space:]]*trust[_-]height[[:space:]]*=[[:space:]]*).*|\1$_trust_h|
+    s|^([[:space:]]*trust[_-]hash[[:space:]]*=[[:space:]]*).*|\1\"$_trust_hash\"|
+  }" "$_cfg"
+  return 0
+}
+
+# ct_ensure_wasm HOME_DIR WASM_SNAPSHOT_URL
+#   CosmWasm + IBC 08-wasm bytecode are FILES on disk that state-sync does NOT restore, so
+#   a state-synced wasm chain panics at startup ("wasmlckeeper failed initialize pinned codes
+#   / Error opening Wasm file"). Seed them from a wasm-only snapshot (e.g. polkachu
+#   cosmos_wasmonly.tar.lz4) when the wasm dir is missing/empty. No-op if URL unset or wasm
+#   already present. Best-effort (logs on failure); the fully robust path for wasm chains is a
+#   FULL snapshot restore. Requires lz4 + tar (installed here).
+ct_ensure_wasm() {
+  _home="$1"; _url="$2"
+  [ -n "$_url" ] || return 0
+  if [ -d "$_home/wasm" ] && [ -n "$(ls -A "$_home/wasm" 2>/dev/null)" ]; then
+    return 0   # wasm already present
+  fi
+  ct_log "wasm: empty, fetching snapshot $_url"
+  ct_apk lz4 tar
+  if curl -sL "$_url" | lz4 -dc | tar -xf - -C "$_home"; then
+    ct_log "wasm: extracted into $_home"
+  else
+    ct_log "WARN wasm: fetch/extract failed ($_url)"
+  fi
+  return 0
+}

babylon/scripts/init.sh

@@ -0,0 +1,55 @@
+#!/bin/sh
+# babylon-genesis (babylond) entrypoint — family C, pure CometBFT (no EL). Thin: sources the
+# shared cometbft-common.sh and orchestrates init + statesync bootstrap + start.
+# Genesis replay is impractical; statesync near head with the current binary.
+# Serves CometBFT RPC :26657 (the dshackle upstream).
+set -e
+. /usr/local/bin/cometbft-common.sh
+
+HOME_DIR="/root/.babylond"
+CONFIG_DIR="$HOME_DIR/config"
+CHAIN_ID="${CHAIN_ID:-bbn-1}"
+GENESIS_URL="${GENESIS_URL:-https://raw.githubusercontent.com/babylonlabs-io/networks/main/bbn-1/network-artifacts/genesis.json}"
+STATESYNC_RPC="${STATESYNC_RPC:-https://babylon-rpc.polkachu.com:443}"
+MIN_GAS="${MIN_GAS:-0.002ubbn}"
+MONIKER="${MONIKER:-rpc-node}"
+
+ct_apk curl jq
+
+if babylond init "$MONIKER" --chain-id "$CHAIN_ID" --home "$HOME_DIR" >/dev/null 2>&1; then
+  ct_log "fresh init; fetching genesis"
+  ct_fetch "$GENESIS_URL" "$CONFIG_DIR/genesis.json" required
+  ct_localize_home "$CONFIG_DIR"
+  ct_set_min_gas_prices "$CONFIG_DIR/app.toml" "$MIN_GAS"
+else
+  ct_log "already initialized, continuing"
+fi
+
+# v4.x start prompts for a BLS password if no key exists; RPC replicas never sign
+# checkpoints, so pre-create an empty-password key before the first start.
+if [ ! -f "$CONFIG_DIR/bls_key.json" ]; then
+  ct_log "pre-creating BLS key (no password — RPC replica)"
+  babylond create-bls-key --home "$HOME_DIR" --no-bls-password
+fi
+
+# Serve RPC on all interfaces (dshackle/traefik upstream); default is 127.0.0.1.
+sed -i '/^\[rpc\]/,/^\[/{s|^laddr = .*|laddr = "tcp://0.0.0.0:26657"|}' "$CONFIG_DIR/config.toml"
+
+# Babylon Genesis block time (9200ms) — required for consensus.
+sed -i 's|^timeout_commit = .*|timeout_commit = "9200ms"|' "$CONFIG_DIR/config.toml"
+
+# BTC checkpointing network params only — no bitcoind needed for an RPC replica.
+sed -i '/^\[btc-config\]/,/^\[/{s|^network = .*|network = "mainnet"|}' "$CONFIG_DIR/app.toml"
+
+# Recommended for pruned RPC nodes (reduces memory pressure).
+sed -i 's|^iavl-cache-size = .*|iavl-cache-size = 0|' "$CONFIG_DIR/app.toml"
+
+ct_patch_p2p             "$CONFIG_DIR/config.toml" "$IP" "${P2P_PORT:-26656}"
+ct_merge_seeds           "$CONFIG_DIR/config.toml" "$SEEDS"
+ct_set_persistent_peers  "$CONFIG_DIR/config.toml" "$PERSISTENT_PEERS"
+ct_set_moniker           "$CONFIG_DIR/config.toml" "$MONIKER"
+ct_configure_statesync   "$CONFIG_DIR/config.toml" "$STATESYNC_RPC"
+ct_ensure_wasm           "$HOME_DIR" "$WASM_SNAPSHOT_URL"
+ct_seed_priv_validator_state "$HOME_DIR"
+
+exec babylond start --home "$HOME_DIR" --minimum-gas-prices "$MIN_GAS" --no-bls-password "$@"

backup-node.sh

@@ -1,10 +1,73 @@
 #!/bin/bash
+#
+# Backup persistent compose volumes to /backup or WebDAV.
+#
+# Usage:
+#   ./backup-node.sh [--hot] [--force] <compose-name> [webdav-url]
+#
+# Lifecycle (default, omitted with --hot):
+#   stop services -> fence compose out of COMPOSE_FILE -> tar+zstd -> unfence+start (EXIT trap).
+#   Hot backups skip stop/fence; leveldb/pebble live tars are NOT restore-trustworthy.
+#
+# --force  Allow backing up an existing but very small datadir (<1GB reported size).
+#          Does NOT bypass a missing volume path (always fatal).
 
 BASEPATH="$(dirname "$0")"
 source "$BASEPATH/volume-utils.sh"
 backup_dir="/backup"
 
-remote_target="$2"
+HOT_BACKUP=false
+FORCE_SMALL=false
+_pos=()
+for _a in "$@"; do
+    case "$_a" in
+        --hot) HOT_BACKUP=true ;;
+        --force) FORCE_SMALL=true ;;
+        *) _pos+=("$_a") ;;
+    esac
+done
+set -- "${_pos[@]}"
+
+if [ -z "${1:-}" ] || [ ! -f "/root/rpc/$1.yml" ]; then
+    echo "Error: Either no argument provided or /root/rpc/$1.yml does not exist."
+    exit 1
+fi
+
+compose_name="$1"
+remote_target="${2:-}"
+lifecycle_active=false
+fenced=false
+stopped=false
+
+backup_lifecycle_cleanup() {
+    local rc=$?
+    if [[ "$lifecycle_active" != true ]]; then
+        exit "$rc"
+    fi
+    if [[ "$fenced" == true ]]; then
+        unfence_compose_in_env "$compose_name" || true
+        fenced=false
+    fi
+    if [[ "$stopped" == true ]]; then
+        "$BASEPATH/start.sh" "$compose_name" || true
+        stopped=false
+    fi
+    exit "$rc"
+}
+
+if [[ "$HOT_BACKUP" == true ]]; then
+    echo "WARNING: --hot backup skips stop/fence; live leveldb/pebble archives may not restore cleanly"
+else
+    trap backup_lifecycle_cleanup EXIT
+    lifecycle_active=true
+    echo "Stopping services for $compose_name before backup..."
+    "$BASEPATH/stop.sh" "$compose_name"
+    stopped=true
+    if fence_compose_in_env "$compose_name"; then
+        fenced=true
+    fi
+fi
+
 if [[ -n "$remote_target" ]] && is_local_backup_url "$remote_target"; then
     echo "Target URL points to this server, using local /backup instead of $remote_target"
     remote_target=""
@@ -62,13 +125,19 @@ generate_volume_metadata() {
 }
 
 # Read the JSON input and extract the list of keys
-keys=$(get_persistent_volume_keys "/root/rpc/$1.yml")
+keys=$(get_persistent_volume_keys "/root/rpc/$compose_name.yml")
 
 # Iterate over the list of keys
 for key in $keys; do
     echo "Executing command with key: /var/lib/docker/volumes/rpc_$key/_data"
 
     source_folder="/var/lib/docker/volumes/rpc_$key/_data"
+
+    if [[ ! -d "$source_folder" ]]; then
+	echo "FATAL: volume data directory missing, refusing backup: $source_folder" >&2
+	exit 1
+    fi
+
     folder_size=$(du -shL "$source_folder" | awk '{
      size = $1
      sub(/[Kk]$/, "", size)  # Remove 'K' suffix if present
@@ -87,6 +156,11 @@ for key in $keys; do
 
     folder_size_gb=$(printf "%.0f" "$folder_size")
 
+    if (( folder_size_gb < 1 )) && [[ "$FORCE_SMALL" != true ]]; then
+	echo "FATAL: existing datadir too small for backup (${folder_size_gb}G at $source_folder); use --force if intentional" >&2
+	exit 1
+    fi
+    
     timestamp=$(date +'%Y-%m-%d-%H-%M-%S')
     target_file="rpc_$key-${timestamp}-${folder_size_gb}G.tar.zst"
     metadata_file_name="rpc_$key-${timestamp}-${folder_size_gb}G.txt"
@@ -119,5 +193,5 @@ done
 echo ""
 echo "=== Overall Size Summary ==="
 if [[ -f "$BASEPATH/show-size.sh" ]]; then
-    "$BASEPATH/show-size.sh" "$1" 2>&1
+    "$BASEPATH/show-size.sh" "$compose_name" 2>&1
 fi

berachain/geth/berachain-bepolia-geth-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -112,7 +112,7 @@ services:
       context: ./berachain
       dockerfile: beacon-kit.Dockerfile
       args:
-        BEACONKIT_VERSION: ${BERACHAIN_BEPOLIA_BEACON_KIT_VERSION:-v1.4.0-rc3}
+        BEACONKIT_VERSION: ${BERACHAIN_BEPOLIA_BEACON_KIT_VERSION:-v1.4.1}
         BEACONKIT_IMAGE: ${BERACHAIN_BEPOLIA_BEACON_KIT_IMAGE:-ghcr.io/berachain/beacon-kit}
     ports:
       - 19888:19888

berachain/geth/berachain-mainnet-geth-pruned-pebble-path.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -112,7 +112,7 @@ services:
       context: ./berachain
       dockerfile: beacon-kit.Dockerfile
       args:
-        BEACONKIT_VERSION: ${BERACHAIN_MAINNET_BEACON_KIT_VERSION:-v1.4.0-rc3}
+        BEACONKIT_VERSION: ${BERACHAIN_MAINNET_BEACON_KIT_VERSION:-v1.4.1}
         BEACONKIT_IMAGE: ${BERACHAIN_MAINNET_BEACON_KIT_IMAGE:-ghcr.io/berachain/beacon-kit}
     ports:
       - 16562:16562

berachain/reth/berachain-bartio-reth-archive-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 # you should backup the peers of your beacond node frequently.
 # docker exec -it rpc-berachain-bartio-reth-node-1 curl http://localhost:26657/net_info | jq -r '
 #  .result.peers[]

berachain/reth/berachain-bartio-reth-pruned-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 # you should backup the peers of your beacond node frequently.
 # docker exec -it rpc-berachain-bartio-reth-pruned-node-1 curl http://localhost:26657/net_info | jq -r '
 #  .result.peers[]

berachain/reth/berachain-bepolia-reth-archive-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 # you should backup the peers of your beacond node frequently.
 # docker exec -it rpc-berachain-bepolia-reth-node-1 curl http://localhost:26657/net_info | jq -r '
 #  .result.peers[]
@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   berachain-bepolia-reth:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BEPOLIA_RETH_VERSION:-v1.4.0}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BEPOLIA_RETH_VERSION:-v1.4.3-rc.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -152,7 +152,7 @@ services:
       context: ./berachain
       dockerfile: beacon-kit.Dockerfile
       args:
-        BEACONKIT_VERSION: ${BERACHAIN_BEPOLIA_BEACON_KIT_VERSION:-v1.4.0-rc3}
+        BEACONKIT_VERSION: ${BERACHAIN_BEPOLIA_BEACON_KIT_VERSION:-v1.4.1}
         BEACONKIT_IMAGE: ${BERACHAIN_BEPOLIA_BEACON_KIT_IMAGE:-ghcr.io/berachain/beacon-kit}
     ports:
       - 16347:16347

berachain/reth/berachain-bepolia-reth-pruned-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 # you should backup the peers of your beacond node frequently.
 # docker exec -it rpc-berachain-bepolia-reth-pruned-node-1 curl http://localhost:26657/net_info | jq -r '
 #  .result.peers[]
@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   berachain-bepolia-reth-pruned:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BEPOLIA_RETH_VERSION:-v1.4.0}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_BEPOLIA_RETH_VERSION:-v1.4.3-rc.0}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -153,7 +153,7 @@ services:
       context: ./berachain
       dockerfile: beacon-kit.Dockerfile
       args:
-        BEACONKIT_VERSION: ${BERACHAIN_BEPOLIA_BEACON_KIT_VERSION:-v1.4.0-rc3}
+        BEACONKIT_VERSION: ${BERACHAIN_BEPOLIA_BEACON_KIT_VERSION:-v1.4.1}
         BEACONKIT_IMAGE: ${BERACHAIN_BEPOLIA_BEACON_KIT_IMAGE:-ghcr.io/berachain/beacon-kit}
     ports:
       - 17274:17274

berachain/reth/berachain-mainnet-reth-archive-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 # you should backup the peers of your beacond node frequently.
 # docker exec -it rpc-berachain-mainnet-reth-node-1 curl http://localhost:26657/net_info | jq -r '
 #  .result.peers[]
@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   berachain-mainnet-reth:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_MAINNET_RETH_VERSION:-v1.4.0}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_MAINNET_RETH_VERSION:-v1.4.2}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -89,10 +89,10 @@ services:
       - CHAINID=80094
       - CHAINNAME=mainnet
       - CHAIN_SPEC=mainnet
-    entrypoint: [/bin/bash, -c, "trap 'exit 0' SIGTERM; while [ ! -f /config/eth-genesis.json ] && [ ! -f /tmp/stop ]; do sleep 1 & wait $!; done; exec bera-reth node \"$@\"", --]
+    entrypoint: [bera-reth, node]
     command:
       - --bootnodes=enode://0c5a4a3c0e81fce2974e4d317d88df783731183d534325e32e0fdf8f4b119d7889fa254d3a38890606ec300d744e2aa9c87099a4a032f5c94efe53f3fcdfecfe@34.64.176.79:30303,enode://b6a3137d3a36ef37c4d31843775a9dc293f41bcbde33b6309c80b1771b6634827cd188285136a57474427bd8845adc2f6fe2e0b106bd58d14795b08910b9c326@34.64.181.70:30303,enode://0b6633300614bc2b9749aee0cace7a091ec5348762aee7b1d195f7616d03a9409019d9bef336624bab72e0d069cd4cf0b0de6fbbf53f04f6b6e4c5b39c6bdca6@34.64.39.31:30303,enode://552b001abebb5805fcd734ad367cd05d9078d18f23ec598d7165460fadcfc51116ad95c418f7ea9a141aa8cbc496c8bea3322b67a5de0d3380f11aab1a797513@34.64.183.158:30303,enode://5b037f66099d5ded86eb7e1619f6d06ceb15609e8cc345ced22a4772b06178004e1490a3cd32fd1222789de4c6e4021c2d648a3d750f6d5323e64b771bbd8de7@34.87.142.180:30303,enode://846db253c53753d3ea1197aec296306dc84c25f3afdf142b65cb0fe0f984de55072daa3bbf05a9aea046a38a2292403137b6eafefd5646fcf62120b74e3b898d@34.142.170.110:30303,enode://64b7f6ee9bcd942ad4949c70f2077627f078a057dfd930e6e904e12643d8952f5ae87c91e24559765393f244a72c9d5c011d7d5176e59191d38f315db85a20f5@34.126.161.16:30303,enode://cf4d19bfb8ec507427ec882bac0bac85a0c8c9ddaa0ec91b773bb614e5e09d107cd9fbe323b96f62f31c493f8f42cc5495c18b87c08560c5dea1dfd25256dcf6@35.247.162.2:30303,enode://bb7e44178543431feac8f0ee3827056b7b84d8235b802a8bdbbcd4939dab7f7dd2579ff577a38b002bb0139792af67abd2dd5c9f4f85b8da6e914fa76dca82bc@35.198.150.35:30303,enode://8fef1f5df45e7b31be00a21e1da5665d5a5f5bf4c379086b843f03eade941bdd157f08c95b31880c492577edb9a9b185df7191eaebf54ab06d5bd683b289f3af@34.107.7.241:30303,enode://ce9c87cfe089f6811d26c96913fa3ec10b938d9017fc6246684c74a33679ee34ceca9447180fb509e37bf2b706c2877a82085d34bfd83b5b520ee1288b0fc32f@35.198.109.49:30303,enode://713657eb6a53feadcbc47e634ad557326a51eb6818a3e19a00a8111492f50a666ccbf2f5d334d247ecf941e68d242ef5c3b812b63c44d381ef11f79c2cdb45c7@34.141.15.100:30303,enode://d071fa740e063ce1bb9cdc2b7937baeff6dc4000f91588d730a731c38a6ff0d4015814812c160fab8695e46f74b9b618735368ea2f16db4d785f16d29b3fb7b0@35.203.2.210:30303,enode://ffc452fe451a2e5f89fe634744aea334d92dcd30d881b76209d2db7dbf4b7ee047e7c69a5bb1633764d987a7441d9c4bc57ccdbfd6442a2f860bf953bc89a9b9@34.152.50.224:30303,enode://da94328302a1d1422209d1916744e90b6095a48b2340dcec39b22002c098bb4d58a880dab98eb26edf03fa4705d1b62f99a8c5c14e6666e4726b6d3066d8a4d7@34.95.61.106:30303,enode://19c7671a4844699b481e81a5bcfe7bafc7fefa953c16ebbe1951b1046371e73839e9058de6b7d3c934318fe7e7233dde3621c1c1018eb8b294ea3d4516147150@35.203.82.137:30303
-      - --chain=/config/eth-genesis.json
+      - --chain=mainnet
       - --datadir=/root/.local/share/reth
       - --discovery.port=12881
       - --engine.always-process-payload-attributes-on-canonical-head
@@ -131,7 +131,6 @@ services:
       - ${BERACHAIN_MAINNET_RETH_ARCHIVE_TRACE_DATA:-berachain-mainnet-reth-archive-trace}:/root/.local/share/reth
       - .jwtsecret:/jwtsecret:ro
       - /slowdisk:/slowdisk
-      - berachain-mainnet-reth-archive-trace_config:/config
     logging: *logging-defaults
     labels:
       - prometheus-scrape.enabled=true
@@ -152,7 +151,7 @@ services:
       context: ./berachain
       dockerfile: beacon-kit.Dockerfile
       args:
-        BEACONKIT_VERSION: ${BERACHAIN_MAINNET_BEACON_KIT_VERSION:-v1.4.0-rc3}
+        BEACONKIT_VERSION: ${BERACHAIN_MAINNET_BEACON_KIT_VERSION:-v1.4.1}
         BEACONKIT_IMAGE: ${BERACHAIN_MAINNET_BEACON_KIT_IMAGE:-ghcr.io/berachain/beacon-kit}
     ports:
       - 17881:17881

berachain/reth/berachain-mainnet-reth-pruned-trace.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 # you should backup the peers of your beacond node frequently.
 # docker exec -it rpc-berachain-mainnet-reth-pruned-node-1 curl http://localhost:26657/net_info | jq -r '
 #  .result.peers[]
@@ -61,7 +61,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   berachain-mainnet-reth-pruned:
-    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_MAINNET_RETH_VERSION:-v1.4.0}
+    image: ${BERACHAIN_RETH_IMAGE:-ghcr.io/berachain/bera-reth}:${BERACHAIN_MAINNET_RETH_VERSION:-v1.4.2}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -153,7 +153,7 @@ services:
       context: ./berachain
       dockerfile: beacon-kit.Dockerfile
       args:
-        BEACONKIT_VERSION: ${BERACHAIN_MAINNET_BEACON_KIT_VERSION:-v1.4.0-rc3}
+        BEACONKIT_VERSION: ${BERACHAIN_MAINNET_BEACON_KIT_VERSION:-v1.4.1}
         BEACONKIT_IMAGE: ${BERACHAIN_MAINNET_BEACON_KIT_IMAGE:-ghcr.io/berachain/beacon-kit}
     ports:
       - 15900:15900

bitcoin-cash/bitcoind/bitcoin-cash-mainnet-bitcoind-full.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   bitcoin-cash-mainnet:
-    image: ${BITCOIN_CASH_BITCOIND_IMAGE:-bitcoinabc/bitcoin-abc}:${BITCOIN_CASH_MAINNET_BITCOIND_VERSION:-0.33.6}
+    image: ${BITCOIN_CASH_BITCOIND_IMAGE:-bitcoinabc/bitcoin-abc}:${BITCOIN_CASH_MAINNET_BITCOIND_VERSION:-0.33.8}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -60,6 +60,7 @@ services:
       - -externalip=${IP}
       - -port=10863
       - -printtoconsole
+      - -rpcallowip=0.0.0.0/0
       - -rpcallowip=::/0
       - -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7
       - -rpcbind=0.0.0.0

bitcoin-cash/bitcoind/bitcoin-cash-testnet-bitcoind-full.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   bitcoin-cash-testnet:
-    image: ${BITCOIN_CASH_BITCOIND_IMAGE:-bitcoinabc/bitcoin-abc}:${BITCOIN_CASH_TESTNET_BITCOIND_VERSION:-0.33.6}
+    image: ${BITCOIN_CASH_BITCOIND_IMAGE:-bitcoinabc/bitcoin-abc}:${BITCOIN_CASH_TESTNET_BITCOIND_VERSION:-0.33.8}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -60,6 +60,7 @@ services:
       - -externalip=${IP}
       - -port=14363
       - -printtoconsole
+      - -rpcallowip=0.0.0.0/0
       - -rpcallowip=::/0
       - -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7
       - -rpcbind=0.0.0.0

bitcoin/bitcoind/bitcoin-mainnet-bitcoind-full.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   bitcoin-mainnet:
-    image: ${BITCOIN_BITCOIND_IMAGE:-lncm/bitcoind}:${BITCOIN_MAINNET_BITCOIND_VERSION:-v28.0}
+    image: ${BITCOIN_BITCOIND_IMAGE:-bitcoin/bitcoin}:${BITCOIN_MAINNET_BITCOIND_VERSION:-31.1}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -57,14 +57,21 @@ services:
     entrypoint: [bitcoind]
     command:
       - -datadir=/data
+      - -dbcache=4096
+      - -disablewallet=1
       - -externalip=${IP}
+      - -maxconnections=64
       - -port=12518
       - -printtoconsole
+      - -rpcallowip=0.0.0.0/0
       - -rpcallowip=::/0
       - -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7
       - -rpcbind=0.0.0.0
       - -rpcport=8545
+      - -rpcthreads=16
+      - -rpcworkqueue=512
       - -server
+      - -txindex=1
       - -zmqpubhashblock=tcp://0.0.0.0:28332
       - -zmqpubhashtx=tcp://0.0.0.0:28333
       - -zmqpubrawblock=tcp://0.0.0.0:28334
@@ -117,40 +124,8 @@ services:
       - ${NO_SSL:+traefik.http.routers.bitcoin-mainnet-bitcoind-full-rawtx.rule=PathPrefix(`/bitcoin-mainnet/rawtx`)}
       - traefik.http.routers.bitcoin-mainnet-bitcoind-full-rawtx.middlewares=bitcoin-mainnet-bitcoind-full-stripprefix, ipallowlist
 
-  bitcoin-mainnet-indexer:
-    image: blockstream/esplora
-    expose:
-      - 3000 # HTTP
-      - 50001 # RPC (electrum)
-    environment:
-      - ELECTRS_DAEMON_P2P_ADDR=bitcoin-mainnet:12518
-      - ELECTRS_DAEMON_RPC_ADDR=bitcoin-mainnet:8545
-      - ELECTRS_DB_DIR=/data/electrs
-      - ELECTRS_ELECTRUM_RPC_ADDR=0.0.0.0:50001
-      - ELECTRS_HTTP_ADDR=0.0.0.0:3000
-      - ELECTRS_JSONRPC_IMPORT=true
-      - ELECTRS_NETWORK=bitcoin
-      - ELECTRS_RPC_PASS=password
-      - ELECTRS_RPC_USER=username
-    networks:
-      - chains
-    volumes:
-      - ${BITCOIN_MAINNET_BITCOIND_FULL__ESPLORA_DATA:-bitcoin-mainnet-bitcoind-full_esplora}:/data
-    logging: *logging-defaults
-    labels:
-      - traefik.enable=true
-      - traefik.http.routers.bitcoin-mainnet-bitcoind-full-esplora.service=bitcoin-mainnet-bitcoind-full-esplora
-      - traefik.http.middlewares.bitcoin-mainnet-bitcoind-full-esplora-stripprefix.stripprefix.prefixes=/bitcoin-mainnet
-      - traefik.http.services.bitcoin-mainnet-bitcoind-full-esplora.loadbalancer.server.port=3000
-      - ${NO_SSL:-traefik.http.routers.bitcoin-mainnet-bitcoind-full-esplora.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.bitcoin-mainnet-bitcoind-full-esplora.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.bitcoin-mainnet-bitcoind-full-esplora.rule=Host(`$DOMAIN`) && (PathPrefix(`bitcoin-mainnet/address`) || PathPrefix(`bitcoin-mainnet/tx`) || PathPrefix(`bitcoin-mainnet/block`) || PathPrefix(`bitcoin-mainnet/blocks`) || PathPrefix(`bitcoin-mainnet/mempool`) || PathPrefix(`bitcoin-mainnet/fee-estimates`) || PathPrefix(`bitcoin-mainnet/scripthash`) || PathPrefix(`bitcoin-mainnet/asset`))}
-      - ${NO_SSL:+traefik.http.routers.bitcoin-mainnet-bitcoind-full-esplora.rule=PathPrefix(`bitcoin-mainnet/address`) || PathPrefix(`bitcoin-mainnet/tx`) || PathPrefix(`bitcoin-mainnet/block`) || PathPrefix(`bitcoin-mainnet/blocks`) || PathPrefix(`bitcoin-mainnet/mempool`) || PathPrefix(`bitcoin-mainnet/fee-estimates`) || PathPrefix(`bitcoin-mainnet/scripthash`) || PathPrefix(`bitcoin-mainnet/asset`))}
-      - traefik.http.routers.bitcoin-mainnet-bitcoind-full-esplora.middlewares=bitcoin-mainnet-bitcoind-full-esplora-stripprefix, ipallowlist
-
 volumes:
   bitcoin-mainnet-bitcoind-full:
-  bitcoin-mainnet-bitcoind-full_esplora:
 
 x-upstreams:
   - id: $${ID}

bitcoin/bitcoind/bitcoin-testnet-bitcoind-full.yml

@@ -2,8 +2,8 @@
 x-logging-defaults: &logging-defaults
   driver: json-file
   options:
-    max-size: "10m"
-    max-file: "3"
+    max-size: "512m"
+    max-file: "2"
 
 # Usage:
 #
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults
 
 services:
   bitcoin-testnet:
-    image: ${BITCOIN_BITCOIND_IMAGE:-lncm/bitcoind}:${BITCOIN_TESTNET_BITCOIND_VERSION:-v28.0}
+    image: ${BITCOIN_BITCOIND_IMAGE:-bitcoin/bitcoin}:${BITCOIN_TESTNET_BITCOIND_VERSION:-31.1}
     sysctls:
       # TCP Performance
       net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -57,15 +57,22 @@ services:
     entrypoint: [bitcoind]
     command:
       - -datadir=/data
+      - -dbcache=4096
+      - -disablewallet=1
       - -externalip=${IP}
+      - -maxconnections=64
       - -port=13668
       - -printtoconsole
+      - -rpcallowip=0.0.0.0/0
       - -rpcallowip=::/0
       - -rpcauth=username:0b6623bdebb516ced10631668833e42a$$c478b38890678c51b9f013174a20addb317c2046b68c05e0250ff86e31a505f7
       - -rpcbind=0.0.0.0
       - -rpcport=8545
+      - -rpcthreads=16
+      - -rpcworkqueue=512
       - -server
       - -testnet
+      - -txindex=1
       - -zmqpubhashblock=tcp://0.0.0.0:28332
       - -zmqpubhashtx=tcp://0.0.0.0:28333
       - -zmqpubrawblock=tcp://0.0.0.0:28334
@@ -118,40 +125,8 @@ services:
       - ${NO_SSL:+traefik.http.routers.bitcoin-testnet-bitcoind-full-rawtx.rule=PathPrefix(`/bitcoin-testnet/rawtx`)}
       - traefik.http.routers.bitcoin-testnet-bitcoind-full-rawtx.middlewares=bitcoin-testnet-bitcoind-full-stripprefix, ipallowlist
 
-  bitcoin-testnet-indexer:
-    image: blockstream/esplora
-    expose:
-      - 3000 # HTTP
-      - 50001 # RPC (electrum)
-    environment:
-      - ELECTRS_DAEMON_P2P_ADDR=bitcoin-testnet:13668
-      - ELECTRS_DAEMON_RPC_ADDR=bitcoin-testnet:8545
-      - ELECTRS_DB_DIR=/data/electrs
-      - ELECTRS_ELECTRUM_RPC_ADDR=0.0.0.0:50001
-      - ELECTRS_HTTP_ADDR=0.0.0.0:3000
-      - ELECTRS_JSONRPC_IMPORT=true
-      - ELECTRS_NETWORK=bitcoin-testnet
-      - ELECTRS_RPC_PASS=password
-      - ELECTRS_RPC_USER=username
-    networks:
-      - chains
-    volumes:
-      - ${BITCOIN_TESTNET_BITCOIND_FULL__ESPLORA_DATA:-bitcoin-testnet-bitcoind-full_esplora}:/data
-    logging: *logging-defaults
-    labels:
-      - traefik.enable=true
-      - traefik.http.routers.bitcoin-testnet-bitcoind-full-esplora.service=bitcoin-testnet-bitcoind-full-esplora
-      - traefik.http.middlewares.bitcoin-testnet-bitcoind-full-esplora-stripprefix.stripprefix.prefixes=/bitcoin-testnet
-      - traefik.http.services.bitcoin-testnet-bitcoind-full-esplora.loadbalancer.server.port=3000
-      - ${NO_SSL:-traefik.http.routers.bitcoin-testnet-bitcoind-full-esplora.entrypoints=websecure}
-      - ${NO_SSL:-traefik.http.routers.bitcoin-testnet-bitcoind-full-esplora.tls.certresolver=myresolver}
-      - ${NO_SSL:-traefik.http.routers.bitcoin-testnet-bitcoind-full-esplora.rule=Host(`$DOMAIN`) && (PathPrefix(`bitcoin-testnet/address`) || PathPrefix(`bitcoin-testnet/tx`) || PathPrefix(`bitcoin-testnet/block`) || PathPrefix(`bitcoin-testnet/blocks`) || PathPrefix(`bitcoin-testnet/mempool`) || PathPrefix(`bitcoin-testnet/fee-estimates`) || PathPrefix(`bitcoin-testnet/scripthash`) || PathPrefix(`bitcoin-testnet/asset`))}
-      - ${NO_SSL:+traefik.http.routers.bitcoin-testnet-bitcoind-full-esplora.rule=PathPrefix(`bitcoin-testnet/address`) || PathPrefix(`bitcoin-testnet/tx`) || PathPrefix(`bitcoin-testnet/block`) || PathPrefix(`bitcoin-testnet/blocks`) || PathPrefix(`bitcoin-testnet/mempool`) || PathPrefix(`bitcoin-testnet/fee-estimates`) || PathPrefix(`bitcoin-testnet/scripthash`) || PathPrefix(`bitcoin-testnet/asset`))}
-      - traefik.http.routers.bitcoin-testnet-bitcoind-full-esplora.middlewares=bitcoin-testnet-bitcoind-full-esplora-stripprefix, ipallowlist
-
 volumes:
   bitcoin-testnet-bitcoind-full:
-  bitcoin-testnet-bitcoind-full_esplora:
 
 x-upstreams:
   - id: $${ID}