edge map: +177.54.154.0/24 Singapore (AS396356 Latitude.sh)

Register dRPC edge prefix 177.54.154.0/24 so the request-split receiver can classify Singapore (asia-southeast) traffic from the Latitude.sh gateway.
utils: canonical dRPC edge IP prefix -> region map (splits pipeline seed)
2026-07-09 12:48:14 +00:00 · 2026-07-09 12:41:05 +00:00 · 2026-07-09 12:15:55 +00:00 · 2026-07-09 09:35:25 +00:00 · 2026-07-09 07:22:13 +00:00 · 2026-07-09 07:20:52 +00:00
202 changed files with 1140 additions and 403 deletions
--- a/abstract/external-node/abstract-mainnet-external-node-archive.yml
+++ b/abstract/external-node/abstract-mainnet-external-node-archive.yml
@@ -98,7 +98,7 @@ services:
      - traefik.http.routers.abstract-mainnet-external-node-archive.service=abstract-mainnet-external-node-archive
      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-mainnet-archive`) || Path(`/abstract-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.abstract-mainnet-external-node-archive-ws.rule=(Path(`/abstract-mainnet-archive`) || Path(`/abstract-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.abstract-mainnet-external-node-archive-ws.middlewares=abstract-mainnet-external-node-archive-stripprefix, ipallowlist
--- a/abstract/external-node/abstract-mainnet-external-node-pruned.yml
+++ b/abstract/external-node/abstract-mainnet-external-node-pruned.yml
@@ -98,7 +98,7 @@ services:
      - traefik.http.routers.abstract-mainnet-external-node-pruned.service=abstract-mainnet-external-node-pruned
      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.abstract-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-mainnet`) || Path(`/abstract-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.abstract-mainnet-external-node-pruned-ws.rule=(Path(`/abstract-mainnet`) || Path(`/abstract-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.abstract-mainnet-external-node-pruned-ws.middlewares=abstract-mainnet-external-node-pruned-stripprefix, ipallowlist
--- a/abstract/external-node/abstract-testnet-external-node-archive.yml
+++ b/abstract/external-node/abstract-testnet-external-node-archive.yml
@@ -98,7 +98,7 @@ services:
      - traefik.http.routers.abstract-testnet-external-node-archive.service=abstract-testnet-external-node-archive
      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-testnet-archive`) || Path(`/abstract-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.abstract-testnet-external-node-archive-ws.rule=(Path(`/abstract-testnet-archive`) || Path(`/abstract-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.abstract-testnet-external-node-archive-ws.middlewares=abstract-testnet-external-node-archive-stripprefix, ipallowlist
--- a/abstract/external-node/abstract-testnet-external-node-pruned.yml
+++ b/abstract/external-node/abstract-testnet-external-node-pruned.yml
@@ -98,7 +98,7 @@ services:
      - traefik.http.routers.abstract-testnet-external-node-pruned.service=abstract-testnet-external-node-pruned
      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.abstract-testnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/abstract-testnet`) || Path(`/abstract-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.abstract-testnet-external-node-pruned-ws.rule=(Path(`/abstract-testnet`) || Path(`/abstract-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.abstract-testnet-external-node-pruned-ws.middlewares=abstract-testnet-external-node-pruned-stripprefix, ipallowlist
--- a/arc/reth/arc-testnet-reth-archive-trace.yml
+++ b/arc/reth/arc-testnet-reth-archive-trace.yml
@@ -132,7 +132,6 @@ services:
      - --execution-socket=/sockets/auth.ipc
      - --follow
      - --follow.endpoint=https://rpc.quicknode.testnet.arc.network,wss=rpc.quicknode.testnet.arc.network
-      - --follow.endpoint=https://rpc.drpc.testnet.arc.network,wss=rpc.drpc.testnet.arc.network
      - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
      - --full
      - --home=/data/consensus
--- a/arc/reth/arc-testnet-reth-pruned-trace.yml
+++ b/arc/reth/arc-testnet-reth-pruned-trace.yml
@@ -133,7 +133,6 @@ services:
      - --execution-socket=/sockets/auth.ipc
      - --follow
      - --follow.endpoint=https://rpc.quicknode.testnet.arc.network,wss=rpc.quicknode.testnet.arc.network
-      - --follow.endpoint=https://rpc.drpc.testnet.arc.network,wss=rpc.drpc.testnet.arc.network
      - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
      - --full
      - --home=/data/consensus
--- a/arc/reth/arc-testnet-reth-pruned.yml
+++ b/arc/reth/arc-testnet-reth-pruned.yml
@@ -133,7 +133,6 @@ services:
      - --execution-socket=/sockets/auth.ipc
      - --follow
      - --follow.endpoint=https://rpc.quicknode.testnet.arc.network,wss=rpc.quicknode.testnet.arc.network
-      - --follow.endpoint=https://rpc.drpc.testnet.arc.network,wss=rpc.drpc.testnet.arc.network
      - --follow.endpoint=https://rpc.blockdaemon.testnet.arc.network,wss=rpc.blockdaemon.testnet.arc.network/websocket
      - --full
      - --home=/data/consensus
--- a/avalanche/go/avalanche-fuji-go-archive-leveldb.yml
+++ b/avalanche/go/avalanche-fuji-go-archive-leveldb.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-fuji-go-archive-leveldb.service=avalanche-fuji-go-archive-leveldb
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji-archive`) || Path(`/avalanche-fuji-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.rule=(Path(`/avalanche-fuji-archive`) || Path(`/avalanche-fuji-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-fuji-go-archive-leveldb-ws.middlewares=avalanche-fuji-go-archive-leveldb-stripprefix, avalanche-fuji-go-archive-leveldb-set-ws-path, ipallowlist
--- a/avalanche/go/avalanche-fuji-go-pruned-leveldb.prune.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-leveldb.prune.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb.service=avalanche-fuji-go-pruned-leveldb
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.middlewares=avalanche-fuji-go-pruned-leveldb-stripprefix, avalanche-fuji-go-pruned-leveldb-set-ws-path, ipallowlist
--- a/avalanche/go/avalanche-fuji-go-pruned-leveldb.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-leveldb.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb.service=avalanche-fuji-go-pruned-leveldb
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-fuji-go-pruned-leveldb-ws.middlewares=avalanche-fuji-go-pruned-leveldb-stripprefix, avalanche-fuji-go-pruned-leveldb-set-ws-path, ipallowlist
--- a/avalanche/go/avalanche-fuji-go-pruned-pebbledb.prune.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-pebbledb.prune.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.service=avalanche-fuji-go-pruned-pebbledb
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.middlewares=avalanche-fuji-go-pruned-pebbledb-stripprefix, avalanche-fuji-go-pruned-pebbledb-set-ws-path, ipallowlist
--- a/avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml
+++ b/avalanche/go/avalanche-fuji-go-pruned-pebbledb.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb.service=avalanche-fuji-go-pruned-pebbledb
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-fuji`) || Path(`/avalanche-fuji/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-fuji-go-pruned-pebbledb-ws.middlewares=avalanche-fuji-go-pruned-pebbledb-stripprefix, avalanche-fuji-go-pruned-pebbledb-set-ws-path, ipallowlist
--- a/avalanche/go/avalanche-mainnet-go-archive-leveldb.yml
+++ b/avalanche/go/avalanche-mainnet-go-archive-leveldb.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-mainnet-go-archive-leveldb.service=avalanche-mainnet-go-archive-leveldb
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet-archive`) || Path(`/avalanche-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.rule=(Path(`/avalanche-mainnet-archive`) || Path(`/avalanche-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-mainnet-go-archive-leveldb-ws.middlewares=avalanche-mainnet-go-archive-leveldb-stripprefix, avalanche-mainnet-go-archive-leveldb-set-ws-path, ipallowlist
--- a/avalanche/go/avalanche-mainnet-go-pruned-leveldb.prune.yml
+++ b/avalanche/go/avalanche-mainnet-go-pruned-leveldb.prune.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb.service=avalanche-mainnet-go-pruned-leveldb
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.middlewares=avalanche-mainnet-go-pruned-leveldb-stripprefix, avalanche-mainnet-go-pruned-leveldb-set-ws-path, ipallowlist
--- a/avalanche/go/avalanche-mainnet-go-pruned-leveldb.yml
+++ b/avalanche/go/avalanche-mainnet-go-pruned-leveldb.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb.service=avalanche-mainnet-go-pruned-leveldb
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-mainnet-go-pruned-leveldb-ws.middlewares=avalanche-mainnet-go-pruned-leveldb-stripprefix, avalanche-mainnet-go-pruned-leveldb-set-ws-path, ipallowlist
--- a/avalanche/go/avalanche-mainnet-go-pruned-pebbledb.prune.yml
+++ b/avalanche/go/avalanche-mainnet-go-pruned-pebbledb.prune.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb.service=avalanche-mainnet-go-pruned-pebbledb
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.middlewares=avalanche-mainnet-go-pruned-pebbledb-stripprefix, avalanche-mainnet-go-pruned-pebbledb-set-ws-path, ipallowlist
--- a/avalanche/go/avalanche-mainnet-go-pruned-pebbledb.yml
+++ b/avalanche/go/avalanche-mainnet-go-pruned-pebbledb.yml
@@ -87,7 +87,7 @@ services:
      - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb.service=avalanche-mainnet-go-pruned-pebbledb
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=Host(`$DOMAIN`) && (Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.rule=(Path(`/avalanche-mainnet`) || Path(`/avalanche-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.avalanche-mainnet-go-pruned-pebbledb-ws.middlewares=avalanche-mainnet-go-pruned-pebbledb-stripprefix, avalanche-mainnet-go-pruned-pebbledb-set-ws-path, ipallowlist
--- a/babylon/babylond/babylon-mainnet-babylond-pruned.yml
+++ b/babylon/babylond/babylon-mainnet-babylond-pruned.yml
@@ -96,7 +96,7 @@ services:
      - traefik.http.routers.babylon-mainnet-babylond-pruned.service=babylon-mainnet-babylond-pruned
      - ${NO_SSL:-traefik.http.routers.babylon-mainnet-babylond-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.babylon-mainnet-babylond-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.babylon-mainnet-babylond-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/babylon-mainnet-pruned`) || Path(`/babylon-mainnet-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.babylon-mainnet-babylond-pruned-ws.rule=(Path(`/babylon-mainnet-pruned`) || Path(`/babylon-mainnet-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.babylon-mainnet-babylond-pruned-ws.middlewares=babylon-mainnet-babylond-pruned-stripprefix, babylon-mainnet-babylond-pruned-set-ws-path, ipallowlist
--- a/bitcoin/bitcoind/bitcoin-mainnet-bitcoind-full.yml
+++ b/bitcoin/bitcoind/bitcoin-mainnet-bitcoind-full.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  bitcoin-mainnet:
-    image: ${BITCOIN_BITCOIND_IMAGE:-bitcoin/bitcoin}:${BITCOIN_MAINNET_BITCOIND_VERSION:-31.0}
+    image: ${BITCOIN_BITCOIND_IMAGE:-bitcoin/bitcoin}:${BITCOIN_MAINNET_BITCOIND_VERSION:-31.1}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/bitcoin/bitcoind/bitcoin-testnet-bitcoind-full.yml
+++ b/bitcoin/bitcoind/bitcoin-testnet-bitcoind-full.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  bitcoin-testnet:
-    image: ${BITCOIN_BITCOIND_IMAGE:-bitcoin/bitcoin}:${BITCOIN_TESTNET_BITCOIND_VERSION:-31.0}
+    image: ${BITCOIN_BITCOIND_IMAGE:-bitcoin/bitcoin}:${BITCOIN_TESTNET_BITCOIND_VERSION:-31.1}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/clone-backup.sh
+++ b/clone-backup.sh
@@ -543,15 +543,9 @@ main() {
    # Set up cleanup trap
    trap cleanup_all_ports EXIT INT TERM
    
-    # RETH GUARD: reth refuses to start when its static_files directory is a symlink.
-    # Match restore-volumes.sh: skip the whole /slowdisk static-file symlink offload
-    # for reth nodes and extract everything onto the primary disk.
-    if [[ "$1" == *reth* ]]; then
-        echo "WARNING: $1 contains 'reth' — static-file symlink offload disabled (reth broke whole-dir symlinks)"
-        echo "  All volumes will be extracted onto the primary disk (equivalent to --no-slowdisk)"
-        NO_SLOWDISK=true
-    fi
-    
+    # (RETH GUARD removed 2026-07-09: op-reth v2.3.2 verified running + WRITING through a
+    # symlinked static_files dir on rpc-uk-4. Pre-v2 reths that refuse symlinks fail loudly
+    # at start - rerun with --no-slowdisk for those.)
    setup_ssh_multiplex
    
    # Check if backup directory exists
--- a/clone-node.sh
+++ b/clone-node.sh
@@ -517,15 +517,9 @@ main() {
    # Set up cleanup trap
    trap cleanup_all_ports EXIT INT TERM
    
-    # RETH GUARD: reth refuses to start when its static_files directory is a symlink.
-    # Match restore-volumes.sh: skip the whole /slowdisk static-file symlink offload
-    # for reth nodes and extract everything onto the primary disk.
-    if [[ "$1" == *reth* ]]; then
-        echo "WARNING: $1 contains 'reth' — static-file symlink offload disabled (reth broke whole-dir symlinks)"
-        echo "  All volumes will be extracted onto the primary disk (equivalent to --no-slowdisk)"
-        NO_SLOWDISK=true
-    fi
-    
+    # (RETH GUARD removed 2026-07-09: op-reth v2.3.2 verified running + WRITING through a
+    # symlinked static_files dir on rpc-uk-4. Pre-v2 reths that refuse symlinks fail loudly
+    # at start - rerun with --no-slowdisk for those.)
    setup_ssh_multiplex
    
    # the following sysctls are critical for high-latency networks
--- a/compose_registry.json
+++ b/compose_registry.json
--- a/cosmos/gaiad/cosmos-mainnet-gaiad-pruned.yml
+++ b/cosmos/gaiad/cosmos-mainnet-gaiad-pruned.yml
@@ -96,7 +96,7 @@ services:
      - traefik.http.routers.cosmos-mainnet-gaiad-pruned.service=cosmos-mainnet-gaiad-pruned
      - ${NO_SSL:-traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/cosmos-mainnet-pruned`) || Path(`/cosmos-mainnet-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.rule=(Path(`/cosmos-mainnet-pruned`) || Path(`/cosmos-mainnet-pruned/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.cosmos-mainnet-gaiad-pruned-ws.middlewares=cosmos-mainnet-gaiad-pruned-stripprefix, cosmos-mainnet-gaiad-pruned-set-ws-path, ipallowlist
--- a/cosmos/scripts/README.cometbft.md
+++ b/cosmos/scripts/README.cometbft.md
@@ -0,0 +1,39 @@
+# Cosmos Hub (gaiad) — CometBFT bootstrap notes
+
+Operator guidance for fresh provisioning of the cosmos-hub gaiad node. See also the shared
+family-C reference at `rpc/scripts/README.cometbft.md`.
+
+## Fresh bootstrap: use a Polkachu FULL snapshot
+
+For a wasm chain like cosmos-hub, prefer seeding from a **Polkachu FULL snapshot** over
+state-sync. The full archive includes everything on disk — application state, `wasm/`, and
+`data/08-light-client/` (IBC 08-wasm bytecode) — so gaia does not panic with
+`wasmlckeeper failed initialize pinned codes / Error opening Wasm file` on first start.
+
+Snapshot URL pattern:
+
+```
+https://snapshots.polkachu.com/snapshots/cosmos/cosmos_<HEIGHT>.tar.lz4
+```
+
+Replace `<HEIGHT>` with the height published on the Polkachu cosmos snapshot page. Extract
+into the node data volume (`/root/.gaia`) before `docker compose up`.
+
+## CL_VERSION must match the live chain
+
+Cosmos chains upgrade via governance; an old binary halts at the upgrade height or panics
+`upgrade handler is missing for vX.Y.Z`. Before pinning `CL_VERSION` / `COSMOS_MAINNET_GAIAD_VERSION`,
+check the live app version on Polkachu RPC:
+
+```sh
+curl -s https://cosmos-rpc.polkachu.com/abci_info | jq .result.response.version
+```
+
+The Docker image tag must match that version (verify pullability with a manifest HEAD, not
+only the ghcr tags list — it can lag).
+
+## Traefik WebSocket routing
+
+The split-WS router uses `HeadersRegexp('Upgrade','(?i)websocket')` (case-insensitive). Clients
+sending `Upgrade: WebSocket` (e.g. python websocket-client) require this — a case-sensitive
+`Headers('Upgrade','websocket')` matcher falls through to the RPC router (400/200 instead of 101).
--- a/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-archive.yml
+++ b/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-archive.yml
@@ -102,7 +102,7 @@ services:
      - traefik.http.routers.cronos-zkevm-mainnet-external-node-archive.service=cronos-zkevm-mainnet-external-node-archive
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-mainnet-archive`) || Path(`/cronos-zkevm-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.rule=(Path(`/cronos-zkevm-mainnet-archive`) || Path(`/cronos-zkevm-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.cronos-zkevm-mainnet-external-node-archive-ws.middlewares=cronos-zkevm-mainnet-external-node-archive-stripprefix, ipallowlist
--- a/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-pruned.yml
+++ b/cronos-zkevm/external-node/cronos-zkevm-mainnet-external-node-pruned.yml
@@ -102,7 +102,7 @@ services:
      - traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned.service=cronos-zkevm-mainnet-external-node-pruned
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-mainnet`) || Path(`/cronos-zkevm-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.rule=(Path(`/cronos-zkevm-mainnet`) || Path(`/cronos-zkevm-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.cronos-zkevm-mainnet-external-node-pruned-ws.middlewares=cronos-zkevm-mainnet-external-node-pruned-stripprefix, ipallowlist
--- a/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-archive.yml
+++ b/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-archive.yml
@@ -102,7 +102,7 @@ services:
      - traefik.http.routers.cronos-zkevm-testnet-external-node-archive.service=cronos-zkevm-testnet-external-node-archive
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-testnet-archive`) || Path(`/cronos-zkevm-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.rule=(Path(`/cronos-zkevm-testnet-archive`) || Path(`/cronos-zkevm-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.cronos-zkevm-testnet-external-node-archive-ws.middlewares=cronos-zkevm-testnet-external-node-archive-stripprefix, ipallowlist
--- a/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-pruned.yml
+++ b/cronos-zkevm/external-node/cronos-zkevm-testnet-external-node-pruned.yml
@@ -102,7 +102,7 @@ services:
      - traefik.http.routers.cronos-zkevm-testnet-external-node-pruned.service=cronos-zkevm-testnet-external-node-pruned
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-zkevm-testnet`) || Path(`/cronos-zkevm-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.rule=(Path(`/cronos-zkevm-testnet`) || Path(`/cronos-zkevm-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.cronos-zkevm-testnet-external-node-pruned-ws.middlewares=cronos-zkevm-testnet-external-node-pruned-stripprefix, ipallowlist
--- a/cronos/cronos/cronos-mainnet-cronos-pruned.yml
+++ b/cronos/cronos/cronos-mainnet-cronos-pruned.yml
@@ -105,7 +105,7 @@ services:
      - traefik.http.routers.cronos-mainnet-cronos-pruned.service=cronos-mainnet-cronos-pruned
      - ${NO_SSL:-traefik.http.routers.cronos-mainnet-cronos-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.cronos-mainnet-cronos-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.cronos-mainnet-cronos-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/cronos-mainnet`) || Path(`/cronos-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.cronos-mainnet-cronos-pruned-ws.rule=(Path(`/cronos-mainnet`) || Path(`/cronos-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.cronos-mainnet-cronos-pruned-ws.middlewares=cronos-mainnet-cronos-pruned-stripprefix, ipallowlist
--- a/drpc.yml
+++ b/drpc.yml
@@ -4,6 +4,10 @@ services:
    restart: unless-stopped
    volumes:
      - ./main_configs:/etc/dshackle
+      # dshackle accessLog target (main_configs/dshackle.yaml accessLog.filename=/logs/...).
+      # Host-side dir so the splits tailer can aggregate gateway->region request shares
+      # (earnings misattribution fix, operator + claude-machine design 2026-07-09).
+      - ./dshackle_logs:/logs
    expose:
      - 8080
      - 8081
--- a/ethereum/besu/ethereum-classic-besu-pruned-bonsai.yml
+++ b/ethereum/besu/ethereum-classic-besu-pruned-bonsai.yml
@@ -103,7 +103,7 @@ services:
      - traefik.http.routers.ethereum-classic-besu-pruned-bonsai.service=ethereum-classic-besu-pruned-bonsai
      - ${NO_SSL:-traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/ethereum-classic-besu`) || Path(`/ethereum-classic-besu/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.rule=(Path(`/ethereum-classic-besu`) || Path(`/ethereum-classic-besu/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.ethereum-classic-besu-pruned-bonsai-ws.middlewares=ethereum-classic-besu-pruned-bonsai-stripprefix, ipallowlist
--- a/ethereum/besu/ethereum-mainnet-besu-pruned-bonsai--nimbus.yml
+++ b/ethereum/besu/ethereum-mainnet-besu-pruned-bonsai--nimbus.yml
@@ -109,7 +109,7 @@ services:
      - traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai.service=ethereum-mainnet-besu-pruned-bonsai
      - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/ethereum-mainnet-besu`) || Path(`/ethereum-mainnet-besu/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.rule=(Path(`/ethereum-mainnet-besu`) || Path(`/ethereum-mainnet-besu/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.ethereum-mainnet-besu-pruned-bonsai-ws.middlewares=ethereum-mainnet-besu-pruned-bonsai-stripprefix, ipallowlist
--- a/haqq/haqq/haqq-mainnet-haqq-pruned.yml
+++ b/haqq/haqq/haqq-mainnet-haqq-pruned.yml
@@ -92,7 +92,7 @@ services:
      - traefik.http.routers.haqq-mainnet-haqq-pruned.service=haqq-mainnet-haqq-pruned
      - ${NO_SSL:-traefik.http.routers.haqq-mainnet-haqq-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.haqq-mainnet-haqq-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.haqq-mainnet-haqq-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/haqq-mainnet`) || Path(`/haqq-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.haqq-mainnet-haqq-pruned-ws.rule=(Path(`/haqq-mainnet`) || Path(`/haqq-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.haqq-mainnet-haqq-pruned-ws.middlewares=haqq-mainnet-haqq-pruned-stripprefix, ipallowlist
--- a/jovay/aldaba/jovay-mainnet-aldaba-pruned.yml
+++ b/jovay/aldaba/jovay-mainnet-aldaba-pruned.yml
@@ -140,7 +140,7 @@ services:
      - traefik.http.routers.jovay-mainnet-aldaba-pruned.service=jovay-mainnet-aldaba-pruned
      - ${NO_SSL:-traefik.http.routers.jovay-mainnet-aldaba-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.jovay-mainnet-aldaba-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.jovay-mainnet-aldaba-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/jovay-mainnet`) || Path(`/jovay-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.jovay-mainnet-aldaba-pruned-ws.rule=(Path(`/jovay-mainnet`) || Path(`/jovay-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.jovay-mainnet-aldaba-pruned-ws.middlewares=jovay-mainnet-aldaba-pruned-stripprefix, ipallowlist
--- a/jovay/aldaba/jovay-sepolia-aldaba-pruned.yml
+++ b/jovay/aldaba/jovay-sepolia-aldaba-pruned.yml
@@ -140,7 +140,7 @@ services:
      - traefik.http.routers.jovay-sepolia-aldaba-pruned.service=jovay-sepolia-aldaba-pruned
      - ${NO_SSL:-traefik.http.routers.jovay-sepolia-aldaba-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.jovay-sepolia-aldaba-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.jovay-sepolia-aldaba-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/jovay-sepolia`) || Path(`/jovay-sepolia/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.jovay-sepolia-aldaba-pruned-ws.rule=(Path(`/jovay-sepolia`) || Path(`/jovay-sepolia/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.jovay-sepolia-aldaba-pruned-ws.middlewares=jovay-sepolia-aldaba-pruned-stripprefix, ipallowlist
--- a/kite/go/kite-mainnet-go-pruned-leveldb.yml
+++ b/kite/go/kite-mainnet-go-pruned-leveldb.yml
@@ -91,7 +91,7 @@ services:
      - traefik.http.routers.kite-mainnet-go-pruned-leveldb.service=kite-mainnet-go-pruned-leveldb
      - ${NO_SSL:-traefik.http.routers.kite-mainnet-go-pruned-leveldb-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.kite-mainnet-go-pruned-leveldb-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.kite-mainnet-go-pruned-leveldb-ws.rule=Host(`$DOMAIN`) && (Path(`/kite-mainnet`) || Path(`/kite-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.kite-mainnet-go-pruned-leveldb-ws.rule=(Path(`/kite-mainnet`) || Path(`/kite-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.kite-mainnet-go-pruned-leveldb-ws.middlewares=kite-mainnet-go-pruned-leveldb-stripprefix, kite-mainnet-go-pruned-leveldb-set-ws-path, ipallowlist
--- a/lens/external-node/lens-mainnet-external-node-archive.yml
+++ b/lens/external-node/lens-mainnet-external-node-archive.yml
@@ -107,7 +107,7 @@ services:
      - traefik.http.routers.lens-mainnet-external-node-archive.service=lens-mainnet-external-node-archive
      - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-mainnet-archive`) || Path(`/lens-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.lens-mainnet-external-node-archive-ws.rule=(Path(`/lens-mainnet-archive`) || Path(`/lens-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.lens-mainnet-external-node-archive-ws.middlewares=lens-mainnet-external-node-archive-stripprefix, ipallowlist
--- a/lens/external-node/lens-mainnet-external-node-pruned.yml
+++ b/lens/external-node/lens-mainnet-external-node-pruned.yml
@@ -107,7 +107,7 @@ services:
      - traefik.http.routers.lens-mainnet-external-node-pruned.service=lens-mainnet-external-node-pruned
      - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.lens-mainnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-mainnet`) || Path(`/lens-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.lens-mainnet-external-node-pruned-ws.rule=(Path(`/lens-mainnet`) || Path(`/lens-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.lens-mainnet-external-node-pruned-ws.middlewares=lens-mainnet-external-node-pruned-stripprefix, ipallowlist
--- a/lens/external-node/lens-testnet-external-node-archive.yml
+++ b/lens/external-node/lens-testnet-external-node-archive.yml
@@ -106,7 +106,7 @@ services:
      - traefik.http.routers.lens-testnet-external-node-archive.service=lens-testnet-external-node-archive
      - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-archive-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-archive-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-archive-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-testnet-archive`) || Path(`/lens-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.lens-testnet-external-node-archive-ws.rule=(Path(`/lens-testnet-archive`) || Path(`/lens-testnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.lens-testnet-external-node-archive-ws.middlewares=lens-testnet-external-node-archive-stripprefix, ipallowlist
--- a/lens/external-node/lens-testnet-external-node-pruned.yml
+++ b/lens/external-node/lens-testnet-external-node-pruned.yml
@@ -106,7 +106,7 @@ services:
      - traefik.http.routers.lens-testnet-external-node-pruned.service=lens-testnet-external-node-pruned
      - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-pruned-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-pruned-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.lens-testnet-external-node-pruned-ws.rule=Host(`$DOMAIN`) && (Path(`/lens-testnet`) || Path(`/lens-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.lens-testnet-external-node-pruned-ws.rule=(Path(`/lens-testnet`) || Path(`/lens-testnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.lens-testnet-external-node-pruned-ws.middlewares=lens-testnet-external-node-pruned-stripprefix, ipallowlist
--- a/linea/besu/linea-mainnet-besu-pruned-bonsai.yml
+++ b/linea/besu/linea-mainnet-besu-pruned-bonsai.yml
@@ -111,7 +111,7 @@ services:
      - traefik.http.routers.linea-mainnet-besu-pruned-bonsai.service=linea-mainnet-besu-pruned-bonsai
      - ${NO_SSL:-traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/linea-mainnet`) || Path(`/linea-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.rule=(Path(`/linea-mainnet`) || Path(`/linea-mainnet/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.linea-mainnet-besu-pruned-bonsai-ws.middlewares=linea-mainnet-besu-pruned-bonsai-stripprefix, ipallowlist
@@ -122,7 +122,7 @@ services:
      dockerfile: maru.Dockerfile
      args:
        MARU_IMAGE: ${LINEA_MAINNET_MARU_IMAGE:-consensys/maru}
-        MARU_VERSION: ${LINEA_MAINNET_MARU_VERSION:-v1.2.1-20260410142843-d326b73}
+        MARU_VERSION: ${LINEA_MAINNET_MARU_VERSION:-1.0.1-20260529-671ad5d}
    ports:
      - 19816:19816
      - 19816:19816/udp
@@ -150,7 +150,7 @@ services:
    labels:
      - prometheus-scrape.enabled=true
      - prometheus-scrape.port=9090
-      - prometheus-scrape.path=/metrics
+      - prometheus-scrape.path=/debug/metrics/prometheus

 volumes:
  linea-mainnet-besu-pruned-bonsai:
--- a/linea/besu/linea-sepolia-besu-pruned-bonsai.yml
+++ b/linea/besu/linea-sepolia-besu-pruned-bonsai.yml
@@ -111,7 +111,7 @@ services:
      - traefik.http.routers.linea-sepolia-besu-pruned-bonsai.service=linea-sepolia-besu-pruned-bonsai
      - ${NO_SSL:-traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.rule=Host(`$DOMAIN`) && (Path(`/linea-sepolia`) || Path(`/linea-sepolia/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.rule=(Path(`/linea-sepolia`) || Path(`/linea-sepolia/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.linea-sepolia-besu-pruned-bonsai-ws.middlewares=linea-sepolia-besu-pruned-bonsai-stripprefix, ipallowlist
@@ -150,7 +150,7 @@ services:
    labels:
      - prometheus-scrape.enabled=true
      - prometheus-scrape.port=9090
-      - prometheus-scrape.path=/metrics
+      - prometheus-scrape.path=/debug/metrics/prometheus

 volumes:
  linea-sepolia-besu-pruned-bonsai:
--- a/linea/erigon3/linea-mainnet-erigon3-archive-trace.yml
+++ b/linea/erigon3/linea-mainnet-erigon3-archive-trace.yml
@@ -111,7 +111,7 @@ services:
      dockerfile: maru.Dockerfile
      args:
        MARU_IMAGE: ${LINEA_MAINNET_MARU_IMAGE:-consensys/maru}
-        MARU_VERSION: ${LINEA_MAINNET_MARU_VERSION:-v1.2.1-20260410142843-d326b73}
+        MARU_VERSION: ${LINEA_MAINNET_MARU_VERSION:-1.0.1-20260529-671ad5d}
    ports:
      - 15060:15060
      - 15060:15060/udp
@@ -139,7 +139,7 @@ services:
    labels:
      - prometheus-scrape.enabled=true
      - prometheus-scrape.port=9090
-      - prometheus-scrape.path=/metrics
+      - prometheus-scrape.path=/debug/metrics/prometheus

 volumes:
  linea-mainnet-erigon3-archive-trace:
--- a/linea/erigon3/linea-mainnet-erigon3-minimal-trace.yml
+++ b/linea/erigon3/linea-mainnet-erigon3-minimal-trace.yml
@@ -112,7 +112,7 @@ services:
      dockerfile: maru.Dockerfile
      args:
        MARU_IMAGE: ${LINEA_MAINNET_MARU_IMAGE:-consensys/maru}
-        MARU_VERSION: ${LINEA_MAINNET_MARU_VERSION:-v1.2.1-20260410142843-d326b73}
+        MARU_VERSION: ${LINEA_MAINNET_MARU_VERSION:-1.0.1-20260529-671ad5d}
    ports:
      - 19000:19000
      - 19000:19000/udp
@@ -140,7 +140,7 @@ services:
    labels:
      - prometheus-scrape.enabled=true
      - prometheus-scrape.port=9090
-      - prometheus-scrape.path=/metrics
+      - prometheus-scrape.path=/debug/metrics/prometheus

 volumes:
  linea-mainnet-erigon3-minimal-trace:
--- a/linea/erigon3/linea-mainnet-erigon3-pruned-trace.yml
+++ b/linea/erigon3/linea-mainnet-erigon3-pruned-trace.yml
@@ -112,7 +112,7 @@ services:
      dockerfile: maru.Dockerfile
      args:
        MARU_IMAGE: ${LINEA_MAINNET_MARU_IMAGE:-consensys/maru}
-        MARU_VERSION: ${LINEA_MAINNET_MARU_VERSION:-v1.2.1-20260410142843-d326b73}
+        MARU_VERSION: ${LINEA_MAINNET_MARU_VERSION:-1.0.1-20260529-671ad5d}
    ports:
      - 17622:17622
      - 17622:17622/udp
@@ -140,7 +140,7 @@ services:
    labels:
      - prometheus-scrape.enabled=true
      - prometheus-scrape.port=9090
-      - prometheus-scrape.path=/metrics
+      - prometheus-scrape.path=/debug/metrics/prometheus

 volumes:
  linea-mainnet-erigon3-pruned-trace:
--- a/linea/erigon3/linea-sepolia-erigon3-archive-trace.yml
+++ b/linea/erigon3/linea-sepolia-erigon3-archive-trace.yml
@@ -139,7 +139,7 @@ services:
    labels:
      - prometheus-scrape.enabled=true
      - prometheus-scrape.port=9090
-      - prometheus-scrape.path=/metrics
+      - prometheus-scrape.path=/debug/metrics/prometheus

 volumes:
  linea-sepolia-erigon3-archive-trace:
--- a/linea/erigon3/linea-sepolia-erigon3-minimal-trace.yml
+++ b/linea/erigon3/linea-sepolia-erigon3-minimal-trace.yml
@@ -140,7 +140,7 @@ services:
    labels:
      - prometheus-scrape.enabled=true
      - prometheus-scrape.port=9090
-      - prometheus-scrape.path=/metrics
+      - prometheus-scrape.path=/debug/metrics/prometheus

 volumes:
  linea-sepolia-erigon3-minimal-trace:
--- a/linea/erigon3/linea-sepolia-erigon3-pruned-trace.yml
+++ b/linea/erigon3/linea-sepolia-erigon3-pruned-trace.yml
@@ -140,7 +140,7 @@ services:
    labels:
      - prometheus-scrape.enabled=true
      - prometheus-scrape.port=9090
-      - prometheus-scrape.path=/metrics
+      - prometheus-scrape.path=/debug/metrics/prometheus

 volumes:
  linea-sepolia-erigon3-pruned-trace:
--- a/linea/geth/linea-mainnet-geth-archive-leveldb-hash.yml
+++ b/linea/geth/linea-mainnet-geth-archive-leveldb-hash.yml
@@ -90,8 +90,14 @@ services:
    volumes:
      - ${LINEA_MAINNET_GETH_ARCHIVE_LEVELDB_HASH_DATA:-linea-mainnet-geth-archive-leveldb-hash}:/root/.ethereum
      - ./linea/mainnet:/config
+      - ./linea/scripts/engine-healthcheck.sh:/engine-healthcheck.sh:ro
      - .jwtsecret:/jwtsecret:ro
      - /slowdisk:/slowdisk
+    healthcheck:
+      test: [CMD-SHELL, /engine-healthcheck.sh]
+      interval: 5s
+      start_period: 60s
+      retries: 30
    logging: *logging-defaults
    labels:
      - prometheus-scrape.enabled=true
@@ -112,7 +118,7 @@ services:
      dockerfile: maru.Dockerfile
      args:
        MARU_IMAGE: ${LINEA_MAINNET_MARU_IMAGE:-consensys/maru}
-        MARU_VERSION: ${LINEA_MAINNET_MARU_VERSION:-v1.2.1-20260410142843-d326b73}
+        MARU_VERSION: ${LINEA_MAINNET_MARU_VERSION:-1.0.1-20260529-671ad5d}
    ports:
      - 15037:15037
      - 15037:15037/udp
@@ -130,6 +136,10 @@ services:
        envsubst < /config/maru/config.toml.template > /config.toml
        exec java -Dlog4j2.configurationFile=/config/maru/log4j.xml -jar /opt/consensys/maru/maru.jar --network=linea-mainnet --config=/config.toml "$@"
    restart: unless-stopped
+    depends_on:
+      linea-mainnet-geth-archive:
+        condition: service_healthy
+        restart: true
    networks:
      - chains
    volumes:
@@ -140,7 +150,7 @@ services:
    labels:
      - prometheus-scrape.enabled=true
      - prometheus-scrape.port=9090
-      - prometheus-scrape.path=/metrics
+      - prometheus-scrape.path=/debug/metrics/prometheus

 volumes:
  linea-mainnet-geth-archive-leveldb-hash:
--- a/linea/geth/linea-mainnet-geth-pruned-pebble-path.yml
+++ b/linea/geth/linea-mainnet-geth-pruned-pebble-path.yml
@@ -90,8 +90,14 @@ services:
    volumes:
      - ${LINEA_MAINNET_GETH_PRUNED_PEBBLE_PATH_DATA:-linea-mainnet-geth-pruned-pebble-path}:/root/.ethereum
      - ./linea/mainnet:/config
+      - ./linea/scripts/engine-healthcheck.sh:/engine-healthcheck.sh:ro
      - .jwtsecret:/jwtsecret:ro
      - /slowdisk:/slowdisk
+    healthcheck:
+      test: [CMD-SHELL, /engine-healthcheck.sh]
+      interval: 5s
+      start_period: 60s
+      retries: 30
    logging: *logging-defaults
    labels:
      - prometheus-scrape.enabled=true
@@ -112,7 +118,7 @@ services:
      dockerfile: maru.Dockerfile
      args:
        MARU_IMAGE: ${LINEA_MAINNET_MARU_IMAGE:-consensys/maru}
-        MARU_VERSION: ${LINEA_MAINNET_MARU_VERSION:-v1.2.1-20260410142843-d326b73}
+        MARU_VERSION: ${LINEA_MAINNET_MARU_VERSION:-1.0.1-20260529-671ad5d}
    ports:
      - 18522:18522
      - 18522:18522/udp
@@ -130,6 +136,10 @@ services:
        envsubst < /config/maru/config.toml.template > /config.toml
        exec java -Dlog4j2.configurationFile=/config/maru/log4j.xml -jar /opt/consensys/maru/maru.jar --network=linea-mainnet --config=/config.toml "$@"
    restart: unless-stopped
+    depends_on:
+      linea-mainnet-geth:
+        condition: service_healthy
+        restart: true
    networks:
      - chains
    volumes:
@@ -140,7 +150,7 @@ services:
    labels:
      - prometheus-scrape.enabled=true
      - prometheus-scrape.port=9090
-      - prometheus-scrape.path=/metrics
+      - prometheus-scrape.path=/debug/metrics/prometheus

 volumes:
  linea-mainnet-geth-pruned-pebble-path:
--- a/linea/geth/linea-sepolia-geth-archive-leveldb-hash.yml
+++ b/linea/geth/linea-sepolia-geth-archive-leveldb-hash.yml
@@ -140,7 +140,7 @@ services:
    labels:
      - prometheus-scrape.enabled=true
      - prometheus-scrape.port=9090
-      - prometheus-scrape.path=/metrics
+      - prometheus-scrape.path=/debug/metrics/prometheus

 volumes:
  linea-sepolia-geth-archive-leveldb-hash:
--- a/linea/geth/linea-sepolia-geth-pruned-pebble-path.yml
+++ b/linea/geth/linea-sepolia-geth-pruned-pebble-path.yml
@@ -140,7 +140,7 @@ services:
    labels:
      - prometheus-scrape.enabled=true
      - prometheus-scrape.port=9090
-      - prometheus-scrape.path=/metrics
+      - prometheus-scrape.path=/debug/metrics/prometheus

 volumes:
  linea-sepolia-geth-pruned-pebble-path:
--- a/linea/maru.Dockerfile
+++ b/linea/maru.Dockerfile
@@ -2,22 +2,4 @@ ARG MARU_IMAGE=consensys/maru
 ARG MARU_VERSION=bcfdb4
 FROM ${MARU_IMAGE}:${MARU_VERSION}

-# Re-declare so LABEL can see the build-arg (FROM clears prior ARGs).
-# Upstream consensys/maru leaves org.label-schema.version/vcs-ref empty;
-# without this, locally-built rpc-*-node images only expose Ubuntu's
-# org.opencontainers.image.version=24.04 — useless for outdated detection.
-ARG MARU_VERSION
-ARG MARU_IMAGE
-LABEL org.opencontainers.image.title="maru" \
-      org.opencontainers.image.description="Consensus Client for Linea" \
-      org.opencontainers.image.source="https://github.com/Consensys/maru" \
-      org.opencontainers.image.version="${MARU_VERSION}" \
-      org.opencontainers.image.revision="${MARU_VERSION}" \
-      org.label-schema.name="maru" \
-      org.label-schema.version="${MARU_VERSION}" \
-      org.label-schema.vcs-ref="${MARU_VERSION}" \
-      org.label-schema.vcs-url="https://github.com/ConsenSys/maru" \
-      vibe.maru.from_image="${MARU_IMAGE}" \
-      vibe.maru.from_tag="${MARU_VERSION}"
-
-RUN apt-get update && apt-get install -y gettext && rm -rf /var/lib/apt/lists/*
+RUN apt-get update && apt-get install -y gettext && rm -rf /var/lib/apt/lists/*
--- a/linea/scripts/engine-healthcheck.sh
+++ b/linea/scripts/engine-healthcheck.sh
@@ -0,0 +1,12 @@
+#!/bin/sh
+set -e
+apk add --no-cache openssl wget >/dev/null 2>&1 || true
+SECRET=$(tr -d '\n' </jwtsecret | sed 's/^0x//')
+H=$(printf '{"alg":"HS256","typ":"JWT"}' | openssl base64 -e -A | tr '+/' '-_' | tr -d '=')
+P=$(printf '{"iat":%s}' "$(date +%s)" | openssl base64 -e -A | tr '+/' '-_' | tr -d '=')
+SIG=$(printf '%s' "$H.$P" | openssl dgst -sha256 -mac HMAC -macopt hexkey:"$SECRET" -binary | openssl base64 -e -A | tr '+/' '-_' | tr -d '=')
+wget -q -O /dev/null \
+  --header="Content-Type: application/json" \
+  --header="Authorization: Bearer $H.$P.$SIG" \
+  --post-data='{"jsonrpc":"2.0","method":"engine_exchangeCapabilities","params":[],"id":1}' \
+  http://127.0.0.1:8551
--- a/metis-andromeda/l2geth/metis-andromeda-mainnet-l2geth-archive-leveldb-hash.yml
+++ b/metis-andromeda/l2geth/metis-andromeda-mainnet-l2geth-archive-leveldb-hash.yml
@@ -121,7 +121,7 @@ services:
      - traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash.service=metis-andromeda-mainnet-l2geth-archive-leveldb-hash
      - ${NO_SSL:-traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.rule=Host(`$DOMAIN`) && (Path(`/metis-andromeda-mainnet-archive`) || Path(`/metis-andromeda-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.rule=(Path(`/metis-andromeda-mainnet-archive`) || Path(`/metis-andromeda-mainnet-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.metis-andromeda-mainnet-l2geth-archive-leveldb-hash-ws.middlewares=metis-andromeda-mainnet-l2geth-archive-leveldb-hash-stripprefix, ipallowlist
--- a/metis-andromeda/l2geth/metis-andromeda-sepolia-l2geth-archive-leveldb-hash.yml
+++ b/metis-andromeda/l2geth/metis-andromeda-sepolia-l2geth-archive-leveldb-hash.yml
@@ -121,7 +121,7 @@ services:
      - traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash.service=metis-andromeda-sepolia-l2geth-archive-leveldb-hash
      - ${NO_SSL:-traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.entrypoints=websecure}
      - ${NO_SSL:-traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.tls.certresolver=myresolver}
-      # case-insensitive Upgrade match required
+      # case-insensitive Upgrade: python websocket-client sends "WebSocket" (capital W)
      - ${NO_SSL:-traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.rule=Host(`$DOMAIN`) && (Path(`/metis-andromeda-sepolia-archive`) || Path(`/metis-andromeda-sepolia-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - ${NO_SSL:+traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.rule=(Path(`/metis-andromeda-sepolia-archive`) || Path(`/metis-andromeda-sepolia-archive/`)) && HeadersRegexp(`Upgrade`, `(?i)websocket`)}
      - traefik.http.routers.metis-andromeda-sepolia-l2geth-archive-leveldb-hash-ws.middlewares=metis-andromeda-sepolia-l2geth-archive-leveldb-hash-stripprefix, ipallowlist
--- a/morph/l2geth/morph-mainnet-l2geth-archive-leveldb-hash-mpt.yml
+++ b/morph/l2geth/morph-mainnet-l2geth-archive-leveldb-hash-mpt.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  morph-mainnet-archive:
-    image: ${MORPH_L2GETH_IMAGE:-ghcr.io/morph-l2/go-ethereum}:${MORPH_MAINNET_L2GETH_VERSION:-2.2.3}
+    image: ${MORPH_L2GETH_IMAGE:-ghcr.io/morph-l2/go-ethereum}:${MORPH_MAINNET_L2GETH_VERSION:-2.2.4}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
--- a/op/erigon/bob-mainnet-op-erigon-archive-trace.yml
+++ b/op/erigon/bob-mainnet-op-erigon-archive-trace.yml
@@ -108,7 +108,7 @@ services:
    shm_size: 2gb

  bob-mainnet-op-erigon-node:
-    image: ${BOB_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${BOB_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${BOB_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${BOB_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 16071:16071
      - 16071:16071/udp
--- a/op/erigon/hashkeychain-mainnet-op-erigon-archive-trace.yml
+++ b/op/erigon/hashkeychain-mainnet-op-erigon-archive-trace.yml
@@ -143,7 +143,7 @@ services:
    logging: *logging-defaults

  hashkeychain-mainnet-op-erigon-node:
-    image: ${HASHKEYCHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${HASHKEYCHAIN_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${HASHKEYCHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${HASHKEYCHAIN_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 16378:16378
      - 16378:16378/udp
--- a/op/erigon/ink-mainnet-op-erigon-archive-trace.yml
+++ b/op/erigon/ink-mainnet-op-erigon-archive-trace.yml
@@ -106,7 +106,7 @@ services:
    shm_size: 2gb

  ink-mainnet-op-erigon-node:
-    image: ${INK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${INK_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${INK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${INK_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 16990:16990
      - 16990:16990/udp
--- a/op/erigon/ink-sepolia-op-erigon-archive-trace.yml
+++ b/op/erigon/ink-sepolia-op-erigon-archive-trace.yml
@@ -106,7 +106,7 @@ services:
    shm_size: 2gb

  ink-sepolia-op-erigon-node:
-    image: ${INK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${INK_SEPOLIA_NODE_VERSION:-v1.19.1}
+    image: ${INK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${INK_SEPOLIA_NODE_VERSION:-v1.19.2}
    ports:
      - 19826:19826
      - 19826:19826/udp
--- a/op/erigon/lisk-mainnet-op-erigon-archive-trace.yml
+++ b/op/erigon/lisk-mainnet-op-erigon-archive-trace.yml
@@ -109,7 +109,7 @@ services:
    shm_size: 2gb

  lisk-mainnet-op-erigon-node:
-    image: ${LISK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${LISK_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${LISK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${LISK_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 19831:19831
      - 19831:19831/udp
--- a/op/erigon/mode-mainnet-op-erigon-archive-trace.yml
+++ b/op/erigon/mode-mainnet-op-erigon-archive-trace.yml
@@ -107,7 +107,7 @@ services:
    shm_size: 2gb

  mode-mainnet-op-erigon-node:
-    image: ${MODE_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${MODE_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${MODE_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${MODE_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 17509:17509
      - 17509:17509/udp
--- a/op/erigon/mode-sepolia-op-erigon-archive-trace.yml
+++ b/op/erigon/mode-sepolia-op-erigon-archive-trace.yml
@@ -105,7 +105,7 @@ services:
    shm_size: 2gb

  mode-sepolia-op-erigon-node:
-    image: ${MODE_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${MODE_SEPOLIA_NODE_VERSION:-v1.19.1}
+    image: ${MODE_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${MODE_SEPOLIA_NODE_VERSION:-v1.19.2}
    ports:
      - 18212:18212
      - 18212:18212/udp
--- a/op/erigon/op-mainnet-op-erigon-archive-trace.yml
+++ b/op/erigon/op-mainnet-op-erigon-archive-trace.yml
@@ -109,7 +109,7 @@ services:
    shm_size: 2gb

  op-mainnet-op-erigon-node:
-    image: ${OP_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${OP_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${OP_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${OP_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 17509:17509
      - 17509:17509/udp
--- a/op/erigon/op-sepolia-op-erigon-archive-trace.yml
+++ b/op/erigon/op-sepolia-op-erigon-archive-trace.yml
@@ -106,7 +106,7 @@ services:
    shm_size: 2gb

  op-sepolia-op-erigon-node:
-    image: ${OP_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${OP_SEPOLIA_NODE_VERSION:-v1.19.1}
+    image: ${OP_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${OP_SEPOLIA_NODE_VERSION:-v1.19.2}
    ports:
      - 15373:15373
      - 15373:15373/udp
--- a/op/erigon/soneium-mainnet-op-erigon-archive-trace.yml
+++ b/op/erigon/soneium-mainnet-op-erigon-archive-trace.yml
@@ -106,7 +106,7 @@ services:
    shm_size: 2gb

  soneium-mainnet-op-erigon-node:
-    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 18689:18689
      - 18689:18689/udp
--- a/op/erigon/soneium-minato-sepolia-op-erigon-archive-trace.yml
+++ b/op/erigon/soneium-minato-sepolia-op-erigon-archive-trace.yml
@@ -106,7 +106,7 @@ services:
    shm_size: 2gb

  soneium-minato-sepolia-op-erigon-node:
-    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MINATO_SEPOLIA_NODE_VERSION:-v1.19.1}
+    image: ${SONEIUM_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SONEIUM_MINATO_SEPOLIA_NODE_VERSION:-v1.19.2}
    ports:
      - 17283:17283
      - 17283:17283/udp
--- a/op/erigon/swell-mainnet-op-erigon-archive-trace.yml
+++ b/op/erigon/swell-mainnet-op-erigon-archive-trace.yml
@@ -106,7 +106,7 @@ services:
    shm_size: 2gb

  swell-mainnet-op-erigon-node:
-    image: ${SWELL_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SWELL_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${SWELL_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${SWELL_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 15810:15810
      - 15810:15810/udp
--- a/op/erigon/unichain-mainnet-op-erigon-archive-trace.yml
+++ b/op/erigon/unichain-mainnet-op-erigon-archive-trace.yml
@@ -106,7 +106,7 @@ services:
    shm_size: 2gb

  unichain-mainnet-op-erigon-node:
-    image: ${UNICHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${UNICHAIN_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${UNICHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${UNICHAIN_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 16415:16415
      - 16415:16415/udp
--- a/op/erigon/unichain-sepolia-op-erigon-archive-trace.yml
+++ b/op/erigon/unichain-sepolia-op-erigon-archive-trace.yml
@@ -106,7 +106,7 @@ services:
    shm_size: 2gb

  unichain-sepolia-op-erigon-node:
-    image: ${UNICHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${UNICHAIN_SEPOLIA_NODE_VERSION:-v1.19.1}
+    image: ${UNICHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${UNICHAIN_SEPOLIA_NODE_VERSION:-v1.19.2}
    ports:
      - 18196:18196
      - 18196:18196/udp
--- a/op/erigon/worldchain-mainnet-op-erigon-archive-trace.yml
+++ b/op/erigon/worldchain-mainnet-op-erigon-archive-trace.yml
@@ -106,7 +106,7 @@ services:
    shm_size: 2gb

  worldchain-mainnet-op-erigon-node:
-    image: ${WORLDCHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${WORLDCHAIN_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${WORLDCHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${WORLDCHAIN_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 16629:16629
      - 16629:16629/udp
--- a/op/erigon/worldchain-sepolia-op-erigon-archive-trace.yml
+++ b/op/erigon/worldchain-sepolia-op-erigon-archive-trace.yml
@@ -106,7 +106,7 @@ services:
    shm_size: 2gb

  worldchain-sepolia-op-erigon-node:
-    image: ${WORLDCHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${WORLDCHAIN_SEPOLIA_NODE_VERSION:-v1.19.1}
+    image: ${WORLDCHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${WORLDCHAIN_SEPOLIA_NODE_VERSION:-v1.19.2}
    ports:
      - 16046:16046
      - 16046:16046/udp
--- a/op/erigon/zora-mainnet-op-erigon-archive-trace.yml
+++ b/op/erigon/zora-mainnet-op-erigon-archive-trace.yml
@@ -107,7 +107,7 @@ services:
    shm_size: 2gb

  zora-mainnet-op-erigon-node:
-    image: ${ZORA_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${ZORA_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${ZORA_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${ZORA_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 19360:19360
      - 19360:19360/udp
--- a/op/erigon/zora-sepolia-op-erigon-archive-trace.yml
+++ b/op/erigon/zora-sepolia-op-erigon-archive-trace.yml
@@ -107,7 +107,7 @@ services:
    shm_size: 2gb

  zora-sepolia-op-erigon-node:
-    image: ${ZORA_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${ZORA_SEPOLIA_NODE_VERSION:-v1.19.1}
+    image: ${ZORA_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${ZORA_SEPOLIA_NODE_VERSION:-v1.19.2}
    ports:
      - 18839:18839
      - 18839:18839/udp
--- a/op/geth/bob-mainnet-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/bob-mainnet-op-geth-archive-leveldb-hash.yml
@@ -109,7 +109,7 @@ services:
      - traefik.http.routers.bob-mainnet-op-geth-archive-leveldb-hash.middlewares=bob-mainnet-op-geth-archive-leveldb-hash-stripprefix, ipallowlist

  bob-mainnet-archive-node:
-    image: ${BOB_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${BOB_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${BOB_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${BOB_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 19046:19046
      - 19046:19046/udp
--- a/op/geth/bob-mainnet-op-geth-archive-pebble-hash.yml
+++ b/op/geth/bob-mainnet-op-geth-archive-pebble-hash.yml
@@ -109,7 +109,7 @@ services:
      - traefik.http.routers.bob-mainnet-op-geth-archive-pebble-hash.middlewares=bob-mainnet-op-geth-archive-pebble-hash-stripprefix, ipallowlist

  bob-mainnet-archive-node:
-    image: ${BOB_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${BOB_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${BOB_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${BOB_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 17223:17223
      - 17223:17223/udp
--- a/op/geth/bob-mainnet-op-geth-pruned-pebble-hash.yml
+++ b/op/geth/bob-mainnet-op-geth-pruned-pebble-hash.yml
@@ -109,7 +109,7 @@ services:
      - traefik.http.routers.bob-mainnet-op-geth-pruned-pebble-hash.middlewares=bob-mainnet-op-geth-pruned-pebble-hash-stripprefix, ipallowlist

  bob-mainnet-node:
-    image: ${BOB_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${BOB_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${BOB_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${BOB_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 16363:16363
      - 16363:16363/udp
--- a/op/geth/bob-mainnet-op-geth-pruned-pebble-path.yml
+++ b/op/geth/bob-mainnet-op-geth-pruned-pebble-path.yml
@@ -109,7 +109,7 @@ services:
      - traefik.http.routers.bob-mainnet-op-geth-pruned-pebble-path.middlewares=bob-mainnet-op-geth-pruned-pebble-path-stripprefix, ipallowlist

  bob-mainnet-node:
-    image: ${BOB_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${BOB_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${BOB_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${BOB_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 18347:18347
      - 18347:18347/udp
--- a/op/geth/bob-sepolia-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/bob-sepolia-op-geth-archive-leveldb-hash.yml
@@ -104,7 +104,7 @@ services:
      - traefik.http.routers.bob-sepolia-op-geth-archive-leveldb-hash.middlewares=bob-sepolia-op-geth-archive-leveldb-hash-stripprefix, ipallowlist

  bob-sepolia-archive-node:
-    image: ${BOB_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${BOB_SEPOLIA_NODE_VERSION:-v1.19.1}
+    image: ${BOB_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${BOB_SEPOLIA_NODE_VERSION:-v1.19.2}
    ports:
      - 15225:15225
      - 15225:15225/udp
--- a/op/geth/bob-sepolia-op-geth-archive-pebble-hash.yml
+++ b/op/geth/bob-sepolia-op-geth-archive-pebble-hash.yml
@@ -104,7 +104,7 @@ services:
      - traefik.http.routers.bob-sepolia-op-geth-archive-pebble-hash.middlewares=bob-sepolia-op-geth-archive-pebble-hash-stripprefix, ipallowlist

  bob-sepolia-archive-node:
-    image: ${BOB_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${BOB_SEPOLIA_NODE_VERSION:-v1.19.1}
+    image: ${BOB_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${BOB_SEPOLIA_NODE_VERSION:-v1.19.2}
    ports:
      - 17678:17678
      - 17678:17678/udp
--- a/op/geth/bob-sepolia-op-geth-pruned-pebble-hash.yml
+++ b/op/geth/bob-sepolia-op-geth-pruned-pebble-hash.yml
@@ -104,7 +104,7 @@ services:
      - traefik.http.routers.bob-sepolia-op-geth-pruned-pebble-hash.middlewares=bob-sepolia-op-geth-pruned-pebble-hash-stripprefix, ipallowlist

  bob-sepolia-node:
-    image: ${BOB_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${BOB_SEPOLIA_NODE_VERSION:-v1.19.1}
+    image: ${BOB_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${BOB_SEPOLIA_NODE_VERSION:-v1.19.2}
    ports:
      - 17885:17885
      - 17885:17885/udp
--- a/op/geth/bob-sepolia-op-geth-pruned-pebble-path.yml
+++ b/op/geth/bob-sepolia-op-geth-pruned-pebble-path.yml
@@ -104,7 +104,7 @@ services:
      - traefik.http.routers.bob-sepolia-op-geth-pruned-pebble-path.middlewares=bob-sepolia-op-geth-pruned-pebble-path-stripprefix, ipallowlist

  bob-sepolia-node:
-    image: ${BOB_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${BOB_SEPOLIA_NODE_VERSION:-v1.19.1}
+    image: ${BOB_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${BOB_SEPOLIA_NODE_VERSION:-v1.19.2}
    ports:
      - 18979:18979
      - 18979:18979/udp
--- a/op/geth/doma-mainnet-op-geth-pruned-pebble-path.yml
+++ b/op/geth/doma-mainnet-op-geth-pruned-pebble-path.yml
@@ -138,7 +138,7 @@ services:
    logging: *logging-defaults

  doma-mainnet-node:
-    image: ${DOMA_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${DOMA_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${DOMA_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${DOMA_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 15977:15977
      - 15977:15977/udp
--- a/op/geth/hashkeychain-mainnet-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/hashkeychain-mainnet-op-geth-archive-leveldb-hash.yml
@@ -144,7 +144,7 @@ services:
    logging: *logging-defaults

  hashkeychain-mainnet-archive-node:
-    image: ${HASHKEYCHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${HASHKEYCHAIN_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${HASHKEYCHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${HASHKEYCHAIN_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 19113:19113
      - 19113:19113/udp
--- a/op/geth/hashkeychain-mainnet-op-geth-pruned-pebble-path.yml
+++ b/op/geth/hashkeychain-mainnet-op-geth-pruned-pebble-path.yml
@@ -144,7 +144,7 @@ services:
    logging: *logging-defaults

  hashkeychain-mainnet-node:
-    image: ${HASHKEYCHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${HASHKEYCHAIN_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${HASHKEYCHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${HASHKEYCHAIN_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 17188:17188
      - 17188:17188/udp
--- a/op/geth/hashkeychain-testnet-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/hashkeychain-testnet-op-geth-archive-leveldb-hash.yml
@@ -144,7 +144,7 @@ services:
    logging: *logging-defaults

  hashkeychain-testnet-archive-node:
-    image: ${HASHKEYCHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${HASHKEYCHAIN_TESTNET_NODE_VERSION:-v1.19.1}
+    image: ${HASHKEYCHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${HASHKEYCHAIN_TESTNET_NODE_VERSION:-v1.19.2}
    ports:
      - 15789:15789
      - 15789:15789/udp
--- a/op/geth/hashkeychain-testnet-op-geth-pruned-pebble-hash.yml
+++ b/op/geth/hashkeychain-testnet-op-geth-pruned-pebble-hash.yml
@@ -144,7 +144,7 @@ services:
    logging: *logging-defaults

  hashkeychain-testnet-node:
-    image: ${HASHKEYCHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${HASHKEYCHAIN_TESTNET_NODE_VERSION:-v1.19.1}
+    image: ${HASHKEYCHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${HASHKEYCHAIN_TESTNET_NODE_VERSION:-v1.19.2}
    ports:
      - 17091:17091
      - 17091:17091/udp
--- a/op/geth/hashkeychain-testnet-op-geth-pruned-pebble-path.yml
+++ b/op/geth/hashkeychain-testnet-op-geth-pruned-pebble-path.yml
@@ -144,7 +144,7 @@ services:
    logging: *logging-defaults

  hashkeychain-testnet-node:
-    image: ${HASHKEYCHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${HASHKEYCHAIN_TESTNET_NODE_VERSION:-v1.19.1}
+    image: ${HASHKEYCHAIN_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${HASHKEYCHAIN_TESTNET_NODE_VERSION:-v1.19.2}
    ports:
      - 16009:16009
      - 16009:16009/udp
--- a/op/geth/hemi-mainnet-op-geth-pruned-leveldb-hash.yml
+++ b/op/geth/hemi-mainnet-op-geth-pruned-leveldb-hash.yml
@@ -30,7 +30,7 @@ x-logging-defaults: &logging-defaults

 services:
  hemi-mainnet:
-    image: ${HEMI_GETH_IMAGE:-ghcr.io/hemilabs/op-geth}:${HEMI_MAINNET_GETH_VERSION:-05d4d8f@sha256:92d14f0b4b89947352d57743ce9e7f2d9c9e495f0bb861a24d21c49d391c7abf}
+    image: ${HEMI_GETH_IMAGE:-ghcr.io/hemilabs/op-geth}:${HEMI_MAINNET_GETH_VERSION:-7cfc394@sha256:26189e56be781c44b4db8cba8b02fb76651f68b7221f204e3f8a3b6933e7a4ee}
    sysctls:
      # TCP Performance
      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
@@ -83,7 +83,7 @@ services:
      - --rpc.gascap=600000000
      - --rpc.txfeecap=0
      - --state.scheme=hash
-      - --syncmode=full
+      - --syncmode=snap
      - --tbc.leveldbhome=/data/tbc/data
      - --tbc.network=mainnet
      - --http
--- a/op/geth/hemi-sepolia-op-geth-pruned-leveldb-hash.yml
+++ b/op/geth/hemi-sepolia-op-geth-pruned-leveldb-hash.yml
@@ -0,0 +1,250 @@
+---
+x-logging-defaults: &logging-defaults
+  driver: json-file
+  options:
+    max-size: "512m"
+    max-file: "2"
+
+# Usage:
+#
+# mkdir rpc && cd rpc
+#
+# git init
+# git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git
+# git fetch origin vibe
+# git checkout origin/vibe
+#
+# docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret
+#
+# env
+# ...
+# IP=$(curl ipinfo.io/ip)
+# DOMAIN=${IP}.traefik.me
+# COMPOSE_FILE=base.yml:rpc.yml:op/geth/hemi-sepolia-op-geth-pruned-leveldb-hash.yml
+#
+# docker compose up -d
+#
+# curl -X POST https://${IP}.traefik.me/hemi-sepolia \
+#   -H "Content-Type: application/json" \
+#   --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}'
+
+services:
+  hemi-sepolia:
+    image: ${HEMI_GETH_IMAGE:-ghcr.io/hemilabs/op-geth}:${HEMI_SEPOLIA_GETH_VERSION:-7cfc394@sha256:26189e56be781c44b4db8cba8b02fb76651f68b7221f204e3f8a3b6933e7a4ee}
+    sysctls:
+      # TCP Performance
+      net.ipv4.tcp_slow_start_after_idle: 0       # Disable slow start after idle
+      net.ipv4.tcp_no_metrics_save: 1             # Disable metrics cache
+      net.ipv4.tcp_rmem: 4096 87380 16777216      # Increase TCP read buffers
+      net.ipv4.tcp_wmem: 4096 87380 16777216      # Increase TCP write buffers
+      net.core.somaxconn: 32768                   # Higher connection queue
+      # Memory/Connection Management
+      # net.core.netdev_max_backlog: 50000          # Increase network buffer
+      net.ipv4.tcp_max_syn_backlog: 30000         # More SYN requests
+      net.ipv4.tcp_max_tw_buckets: 2000000        # Allow more TIME_WAIT sockets
+    ulimits:
+      nofile: 1048576    # Max open files (for RPC/WS connections)
+    user: root
+    ports:
+      - 13754:13754
+      - 13754:13754/udp
+    expose:
+      - 8545
+      - 6060
+      - 8551
+    environment:
+      - GETH_OVERRIDE_CANCUN=1715865630
+      - GETH_OVERRIDE_CANYON=1715865630
+      - GETH_OVERRIDE_ECOTONE=1715865630
+      - GETH_OVERRIDE_FJORD=1748963425
+      - GETH_OVERRIDE_GRANITE=1748963425
+      - GETH_OVERRIDE_HOLOCENE=1748963425
+      - GETH_OVERRIDE_HVM0=1733930401
+      - GETH_OVERRIDE_ISTHMUS=1748963425
+      - GETH_ROLLUP_DISABLETXPOOLGOSSIP=true
+      - GETH_ROLLUP_SEQUENCERHTTP=https://testnet.rpc.hemi.network/rpc
+      - OP_GETH_L2_READINESS_RPC=http://localhost:8545
+    entrypoint: /bin/sh -c '[ -f /config/genesis.json ] && geth --db.engine=leveldb --gcmode=full --datadir /data init --state.scheme=hash /config/genesis.json; exec geth "$@"' --
+    command:
+      - --bootnodes=enode://545da2b44f197091c0ca9283c9c1dd5ffc8562a3cd4a37709a7cd83ca725ecacdb4571dacd916a1455e9dd9f2260e5bc5dddf9fd40ba4601a71b401adbaeec21@34.147.95.117:30303
+      - --datadir=/data
+      - --db.engine=leveldb
+      - --gcmode=full
+      - --hvm.genesisheader=00c05732cdc3e0d654efe86351f0cbfc6c79325e9f9fa7886a39b552f5c4d90700000000dae4079485e26f1f77425b84a13760038a352d07a0fef92b5188bd04c2999162afca58679121011962b9d0a5
+      - --hvm.genesisheight=3522419
+      - --hvm.headerdatadir=/data/tbc/headers
+      - --maxpeers=50
+      - --metrics
+      - --metrics.addr=0.0.0.0
+      - --metrics.port=6060
+      - --nat=extip:${IP}
+      - --networkid=743111
+      - --port=13754
+      - --rpc.gascap=600000000
+      - --rpc.txfeecap=0
+      - --state.scheme=hash
+      - --syncmode=snap
+      - --tbc.leveldbhome=/data/tbc/data
+      - --tbc.network=testnet3
+      - --http
+      - --http.addr=0.0.0.0
+      - --http.api=eth,net,web3,debug,admin,txpool,engine
+      - --http.port=8545
+      - --http.vhosts=*
+      - --ws
+      - --ws.addr=0.0.0.0
+      - --ws.api=eth,net,web3,debug,admin,txpool,engine
+      - --ws.origins=*
+      - --ws.port=8545
+      - --authrpc.addr=0.0.0.0
+      - --authrpc.jwtsecret=/jwtsecret
+      - --authrpc.vhosts=*
+    restart: unless-stopped
+    stop_grace_period: 5m
+    networks:
+      - chains
+    volumes:
+      - ${HEMI_SEPOLIA_OP_GETH_PRUNED_LEVELDB_HASH_DATA:-hemi-sepolia-op-geth-pruned-leveldb-hash}:/data
+      - ./op/hemi/sepolia:/config
+      - .jwtsecret:/jwtsecret:ro
+      - /slowdisk:/slowdisk
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=6060
+      - prometheus-scrape.path=/debug/metrics/prometheus
+      - traefik.enable=true
+      - traefik.http.middlewares.hemi-sepolia-op-geth-pruned-leveldb-hash-stripprefix.stripprefix.prefixes=/hemi-sepolia
+      - traefik.http.services.hemi-sepolia-op-geth-pruned-leveldb-hash.loadbalancer.server.port=8545
+      - ${NO_SSL:-traefik.http.routers.hemi-sepolia-op-geth-pruned-leveldb-hash.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.hemi-sepolia-op-geth-pruned-leveldb-hash.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.hemi-sepolia-op-geth-pruned-leveldb-hash.rule=Host(`$DOMAIN`) && (Path(`/hemi-sepolia`) || Path(`/hemi-sepolia/`))}
+      - ${NO_SSL:+traefik.http.routers.hemi-sepolia-op-geth-pruned-leveldb-hash.rule=Path(`/hemi-sepolia`) || Path(`/hemi-sepolia/`)}
+      - traefik.http.routers.hemi-sepolia-op-geth-pruned-leveldb-hash.middlewares=hemi-sepolia-op-geth-pruned-leveldb-hash-stripprefix, ipallowlist
+
+  hemi-sepolia-node:
+    image: ${HEMI_NODE_IMAGE:-ghcr.io/hemilabs/op-node}:${HEMI_SEPOLIA_NODE_VERSION:-7c70d2d@sha256:7db35d5798615e572d80823a3238a8111b14a90aade876a34b6a2936b17cbd87}
+    ports:
+      - 18754:18754
+      - 18754:18754/udp
+    environment:
+      - OP_NODE_BSS_WS=http://hemi-sepolia-relay:8081/v1/ws
+      - OP_NODE_L1_BEACON=${ETHEREUM_SEPOLIA_BEACON_REST}
+      - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_SEPOLIA_BEACON_ARCHIVER}
+      - OP_NODE_L1_ETH_RPC=${HEMI_SEPOLIA_L1_EXECUTION_RPC:-${ETHEREUM_SEPOLIA_EXECUTION_RPC}}
+      - OP_NODE_L1_RPC_KIND=${ETHEREUM_SEPOLIA_EXECUTION_KIND:-standard}
+      - OP_NODE_L1_TRUST_RPC=${ETHEREUM_SEPOLIA_EXECUTION_TRUST:-false}
+      - OP_NODE_L2_ENGINE_AUTH=/jwtsecret
+      - OP_NODE_L2_ENGINE_RPC=http://hemi-sepolia:8551
+      - OP_NODE_L2_ENGINE_RPC_TIMEOUT=120s
+      - OP_NODE_L2_SKIP_SYNC_START_CHECK=false
+      - OP_NODE_LOG_LEVEL=info
+      - OP_NODE_METRICS_ADDR=0.0.0.0
+      - OP_NODE_METRICS_ENABLED=true
+      - OP_NODE_METRICS_PORT=7300
+      - OP_NODE_OVERRIDE_CANYON=1715865630
+      - OP_NODE_OVERRIDE_DELTA=1715865630
+      - OP_NODE_OVERRIDE_ECOTONE=1715865630
+      - OP_NODE_OVERRIDE_FJORD=1748963425
+      - OP_NODE_OVERRIDE_GRANITE=1748963425
+      - OP_NODE_OVERRIDE_HOLOCENE=1748963425
+      - OP_NODE_OVERRIDE_ISTHMUS=1748963425
+      - OP_NODE_OVERRIDE_PECTRABLOBSCHEDULE=1742486400
+      - OP_NODE_P2P_ADVERTISE_IP=${IP}
+      - OP_NODE_P2P_LISTEN_IP=0.0.0.0
+      - OP_NODE_P2P_LISTEN_TCP_PORT=18754
+      - OP_NODE_P2P_LISTEN_UDP_PORT=18754
+      - OP_NODE_P2P_STATIC=/ip4/34.147.95.117/tcp/9003/p2p/16Uiu2HAmFtpk79F9M1TdC2cnq8c1pJy59yrb5AWeM1qH6d13Fbi2,/ip4/34.90.95.68/tcp/9003/p2p/16Uiu2HAmEDnT7hSbpD5x7TEyywofqtMw6CBCn1Yasn8Ut8CefBi3,/ip4/34.34.97.92/tcp/9003/p2p/16Uiu2HAm9SXFzfB1Mx5aJ6j9QKSs44jA4MNiDVBbGF2JPWs4h8eU
+      - OP_NODE_ROLLUP_CONFIG=/config/rollup.json
+      - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true
+      - OP_NODE_RPC_ADDR=0.0.0.0
+      - OP_NODE_RPC_PORT=9545
+      - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log
+      - OP_NODE_SYNCMODE=execution-layer
+      - OP_NODE_VERIFIER_L1_CONFS=0
+    entrypoint: [op-node]
+    restart: unless-stopped
+    depends_on:
+      hemi-sepolia:
+        condition: service_started
+        restart: true
+      hemi-sepolia-relay:
+        condition: service_started
+    networks:
+      - chains
+    volumes:
+      - ./op/hemi/sepolia:/config
+      - .jwtsecret:/jwtsecret:ro
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=true
+      - prometheus-scrape.port=7300
+      - prometheus-scrape.path=/metrics
+      - traefik.enable=true
+      - traefik.http.middlewares.hemi-sepolia-op-geth-pruned-leveldb-hash-node-stripprefix.stripprefix.prefixes=/hemi-sepolia/node
+      - traefik.http.services.hemi-sepolia-op-geth-pruned-leveldb-hash-node.loadbalancer.server.port=9545
+      - ${NO_SSL:-traefik.http.routers.hemi-sepolia-op-geth-pruned-leveldb-hash-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.hemi-sepolia-op-geth-pruned-leveldb-hash-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.hemi-sepolia-op-geth-pruned-leveldb-hash-node.rule=Host(`$DOMAIN`) && PathPrefix(`/hemi-sepolia/node`)}
+      - ${NO_SSL:+traefik.http.routers.hemi-sepolia-op-geth-pruned-leveldb-hash-node.rule=PathPrefix(`/hemi-sepolia/node`)}
+      - traefik.http.routers.hemi-sepolia-op-geth-pruned-leveldb-hash-node.middlewares=hemi-sepolia-op-geth-pruned-leveldb-hash-node-stripprefix, ipallowlist
+
+  hemi-sepolia-relay:
+    image: ${HEMI_BSS_IMAGE:-hemilabs/bssd}:${HEMI_SEPOLIA_BSS_VERSION:-1.6.3}
+    ports:
+      - 23754:23754
+      - 23754:23754/udp
+    expose:
+      - 8081
+    environment:
+      - BSS_ADDRESS=:8081
+    restart: unless-stopped
+    networks:
+      - chains
+    volumes:
+      - ./op/hemi/sepolia:/config
+    logging: *logging-defaults
+    labels:
+      - prometheus-scrape.enabled=false
+
+volumes:
+  hemi-sepolia-op-geth-pruned-leveldb-hash:
+
+x-upstreams:
+  - id: $${ID}
+    labels:
+      provider: $${PROVIDER}
+    connection:
+      generic:
+        rpc:
+          url: $${RPC_URL}
+        ws:
+          frameSize: 20Mb
+          msgSize: 50Mb
+          url: $${WS_URL}
+    chain: hemi-testnet
+    method-groups:
+      enabled:
+        - debug
+        - filter
+    methods:
+      disabled:
+      enabled:
+        - name: txpool_content # TODO: should be disabled for rollup nodes
+        # standard geth only
+        - name: debug_getRawBlock
+        - name: debug_getRawTransaction
+        - name: debug_getRawReceipts
+        - name: debug_getRawHeader
+        - name: debug_getBadBlocks
+        # non standard geth only slightly dangerous
+        - name: debug_intermediateRoots
+        - name: debug_dumpBlock
+        # standard geth and erigon
+        - name: debug_accountRange
+        - name: debug_getModifiedAccountsByNumber
+        - name: debug_getModifiedAccountsByHash
+        # non standard geth and erigon
+        - name: eth_getRawTransactionByHash
+        - name: eth_getRawTransactionByBlockHashAndIndex
+...
--- a/op/geth/ink-mainnet-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/ink-mainnet-op-geth-archive-leveldb-hash.yml
@@ -107,7 +107,7 @@ services:
      - traefik.http.routers.ink-mainnet-op-geth-archive-leveldb-hash.middlewares=ink-mainnet-op-geth-archive-leveldb-hash-stripprefix, ipallowlist

  ink-mainnet-archive-node:
-    image: ${INK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${INK_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${INK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${INK_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 15713:15713
      - 15713:15713/udp
--- a/op/geth/ink-mainnet-op-geth-pruned-pebble-path.yml
+++ b/op/geth/ink-mainnet-op-geth-pruned-pebble-path.yml
@@ -107,7 +107,7 @@ services:
      - traefik.http.routers.ink-mainnet-op-geth-pruned-pebble-path.middlewares=ink-mainnet-op-geth-pruned-pebble-path-stripprefix, ipallowlist

  ink-mainnet-node:
-    image: ${INK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${INK_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${INK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${INK_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 16271:16271
      - 16271:16271/udp
--- a/op/geth/ink-sepolia-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/ink-sepolia-op-geth-archive-leveldb-hash.yml
@@ -107,7 +107,7 @@ services:
      - traefik.http.routers.ink-sepolia-op-geth-archive-leveldb-hash.middlewares=ink-sepolia-op-geth-archive-leveldb-hash-stripprefix, ipallowlist

  ink-sepolia-archive-node:
-    image: ${INK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${INK_SEPOLIA_NODE_VERSION:-v1.19.1}
+    image: ${INK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${INK_SEPOLIA_NODE_VERSION:-v1.19.2}
    ports:
      - 16659:16659
      - 16659:16659/udp
--- a/op/geth/ink-sepolia-op-geth-pruned-pebble-path.yml
+++ b/op/geth/ink-sepolia-op-geth-pruned-pebble-path.yml
@@ -107,7 +107,7 @@ services:
      - traefik.http.routers.ink-sepolia-op-geth-pruned-pebble-path.middlewares=ink-sepolia-op-geth-pruned-pebble-path-stripprefix, ipallowlist

  ink-sepolia-node:
-    image: ${INK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${INK_SEPOLIA_NODE_VERSION:-v1.19.1}
+    image: ${INK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${INK_SEPOLIA_NODE_VERSION:-v1.19.2}
    ports:
      - 16869:16869
      - 16869:16869/udp
--- a/op/geth/katana-testnet-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/katana-testnet-op-geth-archive-leveldb-hash.yml
@@ -105,7 +105,7 @@ services:
      - traefik.http.routers.katana-testnet-op-geth-archive-leveldb-hash.middlewares=katana-testnet-op-geth-archive-leveldb-hash-stripprefix, ipallowlist

  katana-testnet-archive-node:
-    image: ${KATANA_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${KATANA_TESTNET_NODE_VERSION:-v1.19.1}
+    image: ${KATANA_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${KATANA_TESTNET_NODE_VERSION:-v1.19.2}
    ports:
      - 19922:19922
      - 19922:19922/udp
--- a/op/geth/katana-testnet-op-geth-pruned-pebble-path.yml
+++ b/op/geth/katana-testnet-op-geth-pruned-pebble-path.yml
@@ -105,7 +105,7 @@ services:
      - traefik.http.routers.katana-testnet-op-geth-pruned-pebble-path.middlewares=katana-testnet-op-geth-pruned-pebble-path-stripprefix, ipallowlist

  katana-testnet-node:
-    image: ${KATANA_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${KATANA_TESTNET_NODE_VERSION:-v1.19.1}
+    image: ${KATANA_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${KATANA_TESTNET_NODE_VERSION:-v1.19.2}
    ports:
      - 19484:19484
      - 19484:19484/udp
--- a/op/geth/lisk-mainnet-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/lisk-mainnet-op-geth-archive-leveldb-hash.yml
@@ -110,7 +110,7 @@ services:
      - traefik.http.routers.lisk-mainnet-op-geth-archive-leveldb-hash.middlewares=lisk-mainnet-op-geth-archive-leveldb-hash-stripprefix, ipallowlist

  lisk-mainnet-archive-node:
-    image: ${LISK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${LISK_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${LISK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${LISK_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 16157:16157
      - 16157:16157/udp
--- a/op/geth/mode-mainnet-op-geth-archive-leveldb-hash.yml
+++ b/op/geth/mode-mainnet-op-geth-archive-leveldb-hash.yml
@@ -108,7 +108,7 @@ services:
      - traefik.http.routers.mode-mainnet-op-geth-archive-leveldb-hash.middlewares=mode-mainnet-op-geth-archive-leveldb-hash-stripprefix, ipallowlist

  mode-mainnet-archive-node:
-    image: ${MODE_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${MODE_MAINNET_NODE_VERSION:-v1.19.1}
+    image: ${MODE_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${MODE_MAINNET_NODE_VERSION:-v1.19.2}
    ports:
      - 15430:15430
      - 15430:15430/udp
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Claude Agent	d964ff6c75	edge map: +177.54.154.0/24 Singapore (AS396356 Latitude.sh) Register dRPC edge prefix 177.54.154.0/24 so the request-split receiver can classify Singapore (asia-southeast) traffic from the Latitude.sh gateway.	2026-07-09 12:48:14 +00:00
rob	8cc850160d	utils: canonical dRPC edge IP prefix -> region map (splits pipeline seed) 7 edge locations from us-16 + de-14 captures: Chicago/Ashburn/LA/Frankfurt/ Falkenstein(=eu-west2)/London/Tokyo/Singapore. /24 granularity mandatory (adjacent /24s differ by city). eu-west3 reserved for the GCP edge. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-09 12:41:05 +00:00
rob	53162f7ee0	drpc: mount ./dshackle_logs:/logs for the dshackle accessLog Gateway request-splits pilot (earnings misattribution fix): the accessLog stub in main_configs pointed at /logs which was never mounted. Host-side dir lets the splits tailer aggregate per-caller response counts. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-09 12:15:55 +00:00
rob	8baf603b48	Add hemi sepolia (testnet, chain 743111): op-geth pruned variant hemi-testnet US-Central market $6/day with 2 providers. BTC side = testnet3 (own hVM genesis @3522419), L1 = ethereum sepolia, snap sync, genesis+rollup checked in per hemi-node testnet dir, fork overrides in env/op/hemi/sepolia/. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-09 09:35:25 +00:00
rob	b54bfa84ef	slowdisk fit check: 90d growth headroom (statics grow; /slowdisk is often the root partition) Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-09 07:22:13 +00:00
rob	a0b47b3631	restore-volumes: fail loudly when static offload cannot fit on /slowdisk A silent fallback to primary-disk extraction violates the caller's NVMe capacity math now that the planner treats slowdisk as a separate pool. When SLOWDISK=True and the manifest's static sizes (accurate, replacing the whole-archive x2 estimate that false-refuses large restores) do not fit above the floor, error out with the explicit remedy: re-run with --no-slowdisk as the conscious override. Operator directive 2026-07-09. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-09 07:20:52 +00:00
rob	331a9c27a8	Lift reth static-file symlink guard: op-reth v2.3.2 verified through symlink Live test on rpc-uk-4 (unichain-mainnet pruned, 166G static_files moved to /slowdisk + symlinked): reth healed consistency, initialized the StaticFileProducer, and resumed committing canonical blocks - full read/write through the symlink. The guard's premise (old reth refusing symlinked static_files) no longer holds; pre-v2 reths fail loudly at start, fallback is --no-slowdisk. Restores/clones of reth nodes to SLOWDISK=True hosts now offload statics automatically (NVMe is the scarce resource). Note: reth also has --datadir.static-files for a flag-based layout later. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-09 07:10:23 +00:00
Claude Agent	d77ee75752	deploy: regenerate compose from vibe-node main 17caf065f38f	2026-07-09 02:04:21 +00:00
rob	5137dcbfba	hemi mainnet: op-geth 05d4d8f -> 7cfc394 (2026-07-08 build) Candidate fix for the receipts RLP decode failure that blocks snap sync past block 4,178,637 (2026-04-12): peers dropped with 'invalid message (code 10) receipt 1: rlp: ListEnd not positioned at EOL' on the previous newest published image. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-09 01:41:19 +00:00
Claude Agent	88dbbd1ef2	morph: bump l2geth 2.2.3 → 2.2.4 (ghcr.io/morph-l2/go-ethereum) Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-09 01:40:20 +00:00
Claude Agent	9ca7ddd52d	deploy: regenerate compose from vibe-node main 5ac8fffb7d6c	2026-07-09 00:34:34 +00:00
Claude Agent	090116d8c4	deploy: regenerate compose from vibe-node main 3fd0cf61f237	2026-07-08 13:17:12 +00:00
rob	c07dc9f720	show-status: footer listing fenced nodes (maintenance windows) Fenced nodes are dropped from COMPOSE_FILE so show-status silently omitted them - a fenced-but-running node looked 'gone'. rpc-update now writes /root/rpc/.fenced (node \| until \| reason \| owner per active window); print it as a footer. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-08 13:06:15 +00:00
Claude Agent	7c2ef13238	op/lisk: bump op-node v1.19.1 → v1.19.2 on mainnet Karst hardfork activates 2026-07-08T16:00:01 UTC; op-reth v2.3.3 already supports getPayloadV5.	2026-07-08 12:26:38 +00:00
rob	1ebabee93d	volume-utils: per-volume-kind restorable floor (_config tars are legitimately tiny) The 1MB near-empty guard (added for purged-volume zstd stubs) rejected every legitimate _config volume archive (cronos: 68KB), so any node whose registry entry includes a _config volume reported Restorable: 0 despite healthy multi-GB data backups (cronos had three; 14 registry entries carry _config volumes). _config archives now pass at >=4KB; data volumes keep the 1MB floor. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-08 12:01:44 +00:00
Claude Agent	cf26455d3a	deploy: regenerate compose from vibe-node main 07b0472e0d1a	2026-07-08 11:49:07 +00:00
sebastian	ad93d73f12	Merge pull request 'cosmos gaiad: document Polkachu FULL snapshot bootstrap procedure' (#36 ) from issue-982 into main Reviewed-on: #36	2026-07-08 11:46:24 +00:00
rob	9aa98718b6	hemi mainnet: syncmode full -> snap hemi cannot full-sync across old BTC reorg points: EVM blocks referencing orphaned Bitcoin Attributes ancestors are unexecutable once no peer retains the stale BTC block (us-16 wedged at 3353463 on reorged-out block 00000000000000000001dcb3...b971). hemi's official l2-config.toml ships SyncMode=snap. Registry: 150 entries gain node names (regen enrichment). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-08 11:44:52 +00:00
sebastian	c8f89a43d3	Merge pull request 'linea-mainnet: add engine-API healthcheck script' (#37 ) from issue-1049 into main Reviewed-on: #37	2026-07-08 11:43:37 +00:00
Claude Agent	04b9a5356d	linea: add engine API healthcheck script for geth mainnet Shell probe signs a JWT from /jwtsecret and calls engine_exchangeCapabilities on :8551 so compose can gate Maru startup on EL engine readiness.	2026-07-08 03:24:13 +00:00
Claude Agent	73173299c9	cosmos gaiad: document Polkachu FULL snapshot bootstrap procedure Fresh wasm-chain bootstrap needs a Polkachu full snapshot (includes wasm/), the snapshots URL pattern, and CL_VERSION matching the live chain version.	2026-07-07 14:39:03 +00:00