--- x-logging-defaults: &logging-defaults driver: json-file options: max-size: "10m" max-file: "3" # Usage: # # mkdir rpc && cd rpc # # git init # git remote add origin https://github.com/StakeSquid/ethereum-rpc-docker.git # git fetch origin vibe # git checkout origin/vibe # # docker run --rm alpine sh -c "printf '0x'; head -c32 /dev/urandom | xxd -p -c 64" > .jwtsecret # # env # ... # IP=$(curl ipinfo.io/ip) # DOMAIN=${IP}.traefik.me # COMPOSE_FILE=base.yml:rpc.yml:op/erigon/lisk-mainnet-op-erigon-archive-trace.yml # # docker compose up -d # # curl -X POST https://${IP}.traefik.me/lisk-mainnet-op-erigon \ # -H "Content-Type: application/json" \ # --data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}' services: lisk-mainnet-op-erigon: image: ${LISK_ERIGON_IMAGE:-testinprod/op-erigon}:${LISK_MAINNET_ERIGON_VERSION:-v2.61.3-0.9.5} sysctls: # TCP Performance net.ipv4.tcp_slow_start_after_idle: 0 # Disable slow start after idle net.ipv4.tcp_no_metrics_save: 1 # Disable metrics cache net.ipv4.tcp_rmem: 4096 87380 16777216 # Increase TCP read buffers net.ipv4.tcp_wmem: 4096 87380 16777216 # Increase TCP write buffers net.core.somaxconn: 32768 # Higher connection queue # Memory/Connection Management # net.core.netdev_max_backlog: 50000 # Increase network buffer net.ipv4.tcp_max_syn_backlog: 30000 # More SYN requests net.ipv4.tcp_max_tw_buckets: 2000000 # Allow more TIME_WAIT sockets ulimits: nofile: 1048576 # Max open files (for RPC/WS connections) memlock: -1 # Disable memory locking limits (for in-memory DBs like MDBX) user: root ports: - 14831:14831 - 14831:14831/udp - 34831:34831 - 34831:34831/udp - 39831:39831 - 39831:39831/udp expose: - 8545 - 6060 - 8551 entrypoint: /bin/sh -c '[ ! -d /root/.local/share/erigon/chaindata/mdbx.dat ] && erigon init --datadir /root/.local/share/erigon /config/genesis.json; exec erigon "$@"' -- command: - --bootnodes=enode://87a32fd13bd596b2ffca97020e31aef4ddcc1bbd4b95bb633d16c1329f654f34049ed240a36b449fda5e5225d70fe40bc667f53c304b71f8e68fc9d448690b51@3.231.138.188:30301,enode://ca21ea8f176adb2e229ce2d700830c844af0ea941a1d8152a9513b966fe525e809c3a6c73a2c18a12b74ed6ec4380edf91662778fe0b79f6a591236e49e176f9@184.72.129.189:30301,enode://acf4507a211ba7c1e52cdf4eef62cdc3c32e7c9c47998954f7ba024026f9a6b2150cd3f0b734d9c78e507ab70d59ba61dfe5c45e1078c7ad0775fb251d7735a2@3.220.145.177:30301,enode://8a5a5006159bf079d06a04e5eceab2a1ce6e0f721875b2a9c96905336219dbe14203d38f70f3754686a6324f786c2f9852d8c0dd3adac2d080f4db35efc678c5@3.231.11.52:30301,enode://cdadbe835308ad3557f9a1de8db411da1a260a98f8421d62da90e71da66e55e98aaa8e90aa7ce01b408a54e4bd2253d701218081ded3dbe5efbbc7b41d7cef79@54.198.153.150:30301 - --bootnodes=enode://87a32fd13bd596b2ffca97020e31aef4ddcc1bbd4b95bb633d16c1329f654f34049ed240a36b449fda5e5225d70fe40bc667f53c304b71f8e68fc9d448690b51@3.231.138.188:30301,enode://ca21ea8f176adb2e229ce2d700830c844af0ea941a1d8152a9513b966fe525e809c3a6c73a2c18a12b74ed6ec4380edf91662778fe0b79f6a591236e49e176f9@184.72.129.189:30301,enode://acf4507a211ba7c1e52cdf4eef62cdc3c32e7c9c47998954f7ba024026f9a6b2150cd3f0b734d9c78e507ab70d59ba61dfe5c45e1078c7ad0775fb251d7735a2@3.220.145.177:30301,enode://8a5a5006159bf079d06a04e5eceab2a1ce6e0f721875b2a9c96905336219dbe14203d38f70f3754686a6324f786c2f9852d8c0dd3adac2d080f4db35efc678c5@3.231.11.52:30301,enode://cdadbe835308ad3557f9a1de8db411da1a260a98f8421d62da90e71da66e55e98aaa8e90aa7ce01b408a54e4bd2253d701218081ded3dbe5efbbc7b41d7cef79@54.198.153.150:30301 - --datadir=/root/.local/share/erigon - --maxpeers=50 - --metrics - --metrics.addr=0.0.0.0 - --metrics.port=6060 - --nat=extip:${IP} - --networkid=1135 - --p2p.allowed-ports=34831 - --p2p.allowed-ports=39831 - --port=14831 - --rollup.sequencerhttp=https://rpc.api.lisk.com - --rpc.gascap=6000000000 - --rpc.returndata.limit=1500000 - --http - --http.addr=0.0.0.0 - --http.api=eth,erigon,web3,net,debug,trace,txpool,admin,engine - --http.port=8545 - --http.vhosts=* - --ws - --ws.port=8545 - --authrpc.addr=0.0.0.0 - --authrpc.jwtsecret=/jwtsecret - --authrpc.vhosts=* restart: unless-stopped stop_grace_period: 5m networks: - chains volumes: - ${LISK_MAINNET_OP_ERIGON_ARCHIVE_TRACE_DATA:-lisk-mainnet-op-erigon-archive-trace}:/root/.local/share/erigon - ./op/lisk/mainnet:/config - .jwtsecret:/jwtsecret:ro - /slowdisk:/slowdisk logging: *logging-defaults labels: - prometheus-scrape.enabled=true - prometheus-scrape.port=6060 - prometheus-scrape.path=/debug/metrics/prometheus - traefik.enable=true - traefik.http.middlewares.lisk-mainnet-op-erigon-archive-trace-stripprefix.stripprefix.prefixes=/lisk-mainnet-op-erigon - traefik.http.services.lisk-mainnet-op-erigon-archive-trace.loadbalancer.server.port=8545 - ${NO_SSL:-traefik.http.routers.lisk-mainnet-op-erigon-archive-trace.entrypoints=websecure} - ${NO_SSL:-traefik.http.routers.lisk-mainnet-op-erigon-archive-trace.tls.certresolver=myresolver} - ${NO_SSL:-traefik.http.routers.lisk-mainnet-op-erigon-archive-trace.rule=Host(`$DOMAIN`) && (Path(`/lisk-mainnet-op-erigon`) || Path(`/lisk-mainnet-op-erigon/`))} - ${NO_SSL:+traefik.http.routers.lisk-mainnet-op-erigon-archive-trace.rule=Path(`/lisk-mainnet-op-erigon`) || Path(`/lisk-mainnet-op-erigon/`)} - traefik.http.routers.lisk-mainnet-op-erigon-archive-trace.middlewares=lisk-mainnet-op-erigon-archive-trace-stripprefix, ipallowlist shm_size: 2gb lisk-mainnet-op-erigon-node: image: ${LISK_NODE_IMAGE:-us-docker.pkg.dev/oplabs-tools-artifacts/images/op-node}:${LISK_MAINNET_NODE_VERSION:-v1.14.3} ports: - 19831:19831 - 19831:19831/udp environment: - OP_NODE_L1_BEACON=${ETHEREUM_MAINNET_BEACON_REST} - OP_NODE_L1_BEACON_ARCHIVER=${ETHEREUM_MAINNET_BEACON_ARCHIVER} - OP_NODE_L1_ETH_RPC=${ETHEREUM_MAINNET_EXECUTION_RPC} - OP_NODE_L1_RPC_KIND=${ETHEREUM_MAINNET_EXECUTION_KIND:-basic} - OP_NODE_L1_TRUST_RPC=${ETHEREUM_MAINNET_EXECUTION_TRUST:-false} - OP_NODE_L2_ENGINE_AUTH=/jwtsecret - OP_NODE_L2_ENGINE_KIND=erigon - OP_NODE_L2_ENGINE_RPC=http://lisk-mainnet-op-erigon:8551 - OP_NODE_L2_SKIP_SYNC_START_CHECK=true - OP_NODE_LOG_LEVEL=info - OP_NODE_METRICS_ADDR=0.0.0.0 - OP_NODE_METRICS_ENABLED=true - OP_NODE_METRICS_PORT=7300 - OP_NODE_METRIC_ENABLED=true - OP_NODE_NETWORK=lisk-mainnet - OP_NODE_P2P_ADVERTISE_IP=${IP} - OP_NODE_P2P_BOOTNODES=enr:-Iu4QBCIUw0OhAq5ErARIYBLIr6xPb83OqeFRqlUJGlJ9kWpNECaumPArYWsEFdM_cEKm26JJT_EA52f4dlavBldldgBgmlkgnY0gmlwhCPqq5CJc2VjcDI1NmsxoQLBE74gZyIHkwBEnkI4K7nR4SM2Lytj2VTLqJaj5nQevoN0Y3CCIyuDdWRwgiMs - OP_NODE_P2P_LISTEN_IP=0.0.0.0 - OP_NODE_P2P_LISTEN_TCP_PORT=19831 - OP_NODE_P2P_LISTEN_UDP_PORT=19831 - OP_NODE_ROLLUP_LOAD_PROTOCOL_VERSIONS=true - OP_NODE_RPC_ADDR=0.0.0.0 - OP_NODE_RPC_PORT=8545 - OP_NODE_SNAPSHOT_LOG=/tmp/op-node-snapshot-log - OP_NODE_SYNCMODE=execution-layer - OP_NODE_VERIFIER_L1_CONFS=0 entrypoint: [op-node] restart: unless-stopped depends_on: - lisk-mainnet-op-erigon networks: - chains volumes: - ./op/lisk/mainnet:/config - .jwtsecret:/jwtsecret:ro logging: *logging-defaults labels: - prometheus-scrape.enabled=true - prometheus-scrape.port=7300 - prometheus-scrape.path=/metrics - traefik.enable=true - traefik.http.middlewares.lisk-mainnet-op-erigon-archive-trace-node-stripprefix.stripprefix.prefixes=/lisk-mainnet-op-erigon/node - traefik.http.services.lisk-mainnet-op-erigon-archive-trace-node.loadbalancer.server.port=8547 - ${NO_SSL:-traefik.http.routers.lisk-mainnet-op-erigon-archive-trace-node.entrypoints=websecure} - ${NO_SSL:-traefik.http.routers.lisk-mainnet-op-erigon-archive-trace-node.tls.certresolver=myresolver} - ${NO_SSL:-traefik.http.routers.lisk-mainnet-op-erigon-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/lisk-mainnet-op-erigon/node`)} - ${NO_SSL:+traefik.http.routers.lisk-mainnet-op-erigon-archive-trace-node.rule=PathPrefix(`/lisk-mainnet-op-erigon/node`)} - traefik.http.routers.lisk-mainnet-op-erigon-archive-trace-node.middlewares=lisk-mainnet-op-erigon-archive-trace-node-stripprefix, ipallowlist volumes: lisk-mainnet-op-erigon-archive-trace: x-upstreams: - id: $${ID} labels: provider: $${PROVIDER} connection: generic: rpc: url: $${RPC_URL} ws: frameSize: 20Mb msgSize: 50Mb url: $${WS_URL} chain: lisk method-groups: enabled: - debug - filter - trace methods: disabled: enabled: - name: txpool_content # TODO: should be disabled for rollup nodes # standard geth and erigon - name: debug_accountRange - name: debug_getModifiedAccountsByNumber - name: debug_getModifiedAccountsByHash # non standard geth and erigon - name: eth_getRawTransactionByHash - name: eth_getRawTransactionByBlockHashAndIndex # non standard erigon only - name: eth_getBlockReceipts - name: eth_protocolVersion - name: eth_callMany - name: eth_callBundle - name: debug_accountAt - name: debug_traceCallMany - name: erigon_getHeaderByHash - name: erigon_getBlockReceiptsByBlockHash - name: erigon_getHeaderByNumber - name: erigon_getLogsByHash - name: erigon_forks - name: erigon_getBlockByTimestamp - name: erigon_BlockNumber - name: erigon_getLatestLogs ...