--- # Usage: # # mkdir rpc && cd rpc # # git init # git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git # git fetch origin vibe # git checkout origin/vibe # # docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret # # env # ... # IP=$(curl ipinfo.io/ip) # DOMAIN=${IP}.traefik.me # COMPOSE_FILE=base.yml:rpc.yml:op/reth/lisk-mainnet-op-reth-archive-trace.yml # # docker compose up -d # # curl -X POST https://${IP}.traefik.me/lisk-mainnet-op-reth \ # -H "Content-Type: application/json" \ # --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}' x-logging-defaults: &logging-defaults driver: json-file options: max-size: 10m max-file: '3' services: lisk-mainnet-op-reth: image: ${LISK_RETH_IMAGE:-ghcr.io/paradigmxyz/op-reth}:${LISK_MAINNET_RETH_VERSION:-v1.4.1} sysctls: # TCP Performance net.ipv4.tcp_slow_start_after_idle: 0 # Disable slow start after idle net.ipv4.tcp_no_metrics_save: 1 # Disable metrics cache net.ipv4.tcp_rmem: 4096 87380 16777216 # Increase TCP read buffers net.ipv4.tcp_wmem: 4096 87380 16777216 # Increase TCP write buffers net.core.somaxconn: 32768 # Higher connection queue # Memory/Connection Management # net.core.netdev_max_backlog: 50000 # Increase network buffer net.ipv4.tcp_max_syn_backlog: 30000 # More SYN requests net.ipv4.tcp_max_tw_buckets: 2000000 # Allow more TIME_WAIT sockets ulimits: nofile: 1048576 # Max open files (for RPC/WS connections) memlock: -1 # Disable memory locking limits (for in-memory DBs like MDBX) user: root ports: - 10598:10598 - 10598:10598/udp expose: - 8545 - 9001 - 8551 entrypoint: [op-reth, node] command: - --bootnodes=enode://87a32fd13bd596b2ffca97020e31aef4ddcc1bbd4b95bb633d16c1329f654f34049ed240a36b449fda5e5225d70fe40bc667f53c304b71f8e68fc9d448690b51@3.231.138.188:30301,enode://ca21ea8f176adb2e229ce2d700830c844af0ea941a1d8152a9513b966fe525e809c3a6c73a2c18a12b74ed6ec4380edf91662778fe0b79f6a591236e49e176f9@184.72.129.189:30301,enode://acf4507a211ba7c1e52cdf4eef62cdc3c32e7c9c47998954f7ba024026f9a6b2150cd3f0b734d9c78e507ab70d59ba61dfe5c45e1078c7ad0775fb251d7735a2@3.220.145.177:30301,enode://8a5a5006159bf079d06a04e5eceab2a1ce6e0f721875b2a9c96905336219dbe14203d38f70f3754686a6324f786c2f9852d8c0dd3adac2d080f4db35efc678c5@3.231.11.52:30301,enode://cdadbe835308ad3557f9a1de8db411da1a260a98f8421d62da90e71da66e55e98aaa8e90aa7ce01b408a54e4bd2253d701218081ded3dbe5efbbc7b41d7cef79@54.198.153.150:30301 - --chain=/config/genesis.json - --datadir=/root/.local/share/reth - --engine.cross-block-cache-size=${LISK_MAINNET_RETH_STATE_CACHE:-4096} - --max-inbound-peers=50 - --max-outbound-peers=50 - --metrics=0.0.0.0:9001 - --nat=extip:${IP} - --port=10598 - --rollup.sequencer-http=https://rpc.api.lisk.com - --rpc-cache.max-blocks=10000 - --rpc-cache.max-concurrent-db-requests=2048 - --rpc.gascap=600000000 - --rpc.max-blocks-per-filter=0 - --rpc.max-connections=50000 - --rpc.max-logs-per-response=0 - --http - --http.addr=0.0.0.0 - --http.api=admin,debug,eth,net,trace,txpool,web3,rpc,reth,ots,flashbots,mev - --http.corsdomain=* - --http.port=8545 - --ws - --ws.addr=0.0.0.0 - --ws.api=admin,debug,eth,net,trace,txpool,web3,rpc,reth,ots,flashbots,mev - --ws.origins=* - --ws.port=8545 - --authrpc.addr=0.0.0.0 - --authrpc.jwtsecret=/jwtsecret restart: unless-stopped stop_grace_period: 5m networks: - chains volumes: - ${LISK_MAINNET_OP_RETH_ARCHIVE_TRACE_DATA:-lisk-mainnet-op-reth-archive-trace}:/root/.local/share/reth - ./op/lisk/mainnet:/config - .jwtsecret:/jwtsecret:ro - /slowdisk:/slowdisk logging: *logging-defaults labels: - prometheus-scrape.enabled=true - prometheus-scrape.port=9001 - prometheus-scrape.path=/metrics - traefik.enable=true - traefik.http.middlewares.lisk-mainnet-op-reth-archive-trace-stripprefix.stripprefix.prefixes=/lisk-mainnet-op-reth - traefik.http.services.lisk-mainnet-op-reth-archive-trace.loadbalancer.server.port=8545 - ${NO_SSL:-traefik.http.routers.lisk-mainnet-op-reth-archive-trace.entrypoints=websecure} - ${NO_SSL:-traefik.http.routers.lisk-mainnet-op-reth-archive-trace.tls.certresolver=myresolver} - ${NO_SSL:-traefik.http.routers.lisk-mainnet-op-reth-archive-trace.rule=Host(`$DOMAIN`) && (Path(`/lisk-mainnet-op-reth`) || Path(`/lisk-mainnet-op-reth/`))} - ${NO_SSL:+traefik.http.routers.lisk-mainnet-op-reth-archive-trace.rule=Path(`/lisk-mainnet-op-reth`) || Path(`/lisk-mainnet-op-reth/`)} - traefik.http.routers.lisk-mainnet-op-reth-archive-trace.middlewares=lisk-mainnet-op-reth-archive-trace-stripprefix, ipallowlist shm_size: 2gb lisk-mainnet-op-reth-node: image: ${LISK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${LISK_MAINNET_NODE_VERSION:-v1.13.2} ports: - 15598:15598 - 15598:15598/udp environment: - OP_NODE_L1_BEACON=${ETHEREUM_MAINNET_BEACON_REST} - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_MAINNET_BEACON_ARCHIVER} - OP_NODE_L1_ETH_RPC=${ETHEREUM_MAINNET_EXECUTION_RPC} - OP_NODE_L1_RPC_KIND=${ETHEREUM_MAINNET_EXECUTION_KIND:-basic} - OP_NODE_L1_TRUST_RPC=${ETHEREUM_MAINNET_EXECUTION_TRUST:-false} - OP_NODE_L2_ENGINE_AUTH=/jwtsecret - OP_NODE_L2_ENGINE_RPC=http://lisk-mainnet-op-reth:8551 - OP_NODE_L2_SKIP_SYNC_START_CHECK=true - OP_NODE_LOG_LEVEL=info - OP_NODE_METRICS_ADDR=0.0.0.0 - OP_NODE_METRICS_ENABLED=true - OP_NODE_METRICS_PORT=7300 - OP_NODE_METRIC_ENABLED=true - OP_NODE_NETWORK=lisk-mainnet - OP_NODE_P2P_ADVERTISE_IP=${IP} - OP_NODE_P2P_BOOTNODES=enr:-Iu4QBCIUw0OhAq5ErARIYBLIr6xPb83OqeFRqlUJGlJ9kWpNECaumPArYWsEFdM_cEKm26JJT_EA52f4dlavBldldgBgmlkgnY0gmlwhCPqq5CJc2VjcDI1NmsxoQLBE74gZyIHkwBEnkI4K7nR4SM2Lytj2VTLqJaj5nQevoN0Y3CCIyuDdWRwgiMs - OP_NODE_P2P_LISTEN_IP=0.0.0.0 - OP_NODE_P2P_LISTEN_TCP_PORT=15598 - OP_NODE_P2P_LISTEN_UDP_PORT=15598 - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true - OP_NODE_RPC_ADDR=0.0.0.0 - OP_NODE_RPC_PORT=8545 - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log - OP_NODE_SYNCMODE=execution-layer - OP_NODE_VERIFIER_L1_CONFS=0 entrypoint: [op-node] restart: unless-stopped depends_on: - lisk-mainnet-op-reth networks: - chains volumes: - ./op/lisk/mainnet:/config - .jwtsecret:/jwtsecret:ro logging: *logging-defaults labels: - prometheus-scrape.enabled=true - prometheus-scrape.port=7300 - prometheus-scrape.path=/metrics volumes: lisk-mainnet-op-reth-archive-trace: x-upstreams: - id: $${ID} labels: provider: $${PROVIDER} connection: generic: rpc: url: $${RPC_URL} ws: frameSize: 20Mb msgSize: 50Mb url: $${WS_URL} chain: lisk method-groups: enabled: - debug - filter - trace methods: disabled: - name: eth_maxPriorityFeePerGas enabled: - name: txpool_content # TODO: should be disabled for rollup nodes ...