teku-vc-only.yml

x-logging: &logging
  logging:
    driver: json-file
    options:
      max-size: 100m
      max-file: "3"
      tag: '{{.ImageName}}|{{.Name}}|{{.ImageFullID}}|{{.FullID}}'

x-build: &teku-build
  context: ./teku
  dockerfile: ${TEKU_DOCKERFILE}
  args:
    - BUILD_TARGET=${TEKU_SRC_BUILD_TARGET:-'$(git describe --tags $(git rev-list --tags --max-count=1))'}
    - SRC_REPO=${TEKU_SRC_REPO:-https://github.com/ConsenSys/teku}
    - DOCKER_TAG=${TEKU_DOCKER_TAG:-latest}
    - DOCKER_REPO=${TEKU_DOCKER_REPO:-consensys/teku}

services:
  validator:
    restart: "unless-stopped"
    build:
      <<: *teku-build
    image: teku:local
    pull_policy: never
    user: teku
    volumes:
      - teku-data:/var/lib/teku
      - /etc/localtime:/etc/localtime:ro
    environment:
      - JAVA_OPTS=${TEKU_HEAP:--Xmx2g}
      - MEV_BOOST=${MEV_BOOST}
      - VC_EXTRAS=${VC_EXTRAS:-}
      - DOPPELGANGER=${DOPPELGANGER:-}
      - GRAFFITI=${GRAFFITI:-}
      - DEFAULT_GRAFFITI=${DEFAULT_GRAFFITI:-false}
      - WEB3SIGNER=${WEB3SIGNER:-false}
      - NETWORK=${NETWORK}
      - ENABLE_DIST_ATTESTATION_AGGR=${ENABLE_DIST_ATTESTATION_AGGR:-false}
    networks:
      default:
        aliases:
          - vc
    <<: *logging
    entrypoint:
      - docker-entrypoint-vc.sh
      - /opt/teku/bin/teku
      - validator-client
      - --beacon-node-api-endpoints=${CL_NODE:-http://consensus:5052}
      - --data-path=/var/lib/teku
      - --log-destination=CONSOLE
      - --validator-keys=/var/lib/teku/validator-keys:/var/lib/teku/validator-passwords
      - --validator-api-enabled=true
      - --validator-api-interface=0.0.0.0
      - --validator-api-port=${KEY_API_PORT:-7500}
      - --validator-api-host-allowlist=*
      - --validator-api-cors-origins=*
      - --validator-api-keystore-file=/var/lib/teku/teku-keyapi.keystore
      - --validator-api-keystore-password-file=/var/lib/teku/teku-keyapi.password
      - --validators-proposer-default-fee-recipient=${FEE_RECIPIENT}
      - --validators-keystore-locking-enabled=false
      - --metrics-enabled=true
      - --metrics-port=8009
      - --metrics-interface=0.0.0.0
      - --metrics-host-allowlist=*
    labels:
      - metrics.scrape=true
      - metrics.path=/metrics
      - metrics.port=8009
      - metrics.instance=validator
      - metrics.network=${NETWORK}

  validator-exit:
    profiles: ["tools"]
    restart: "no"
    build:
      <<: *teku-build
    image: teku:local
    pull_policy: never
    user: teku
    volumes:
      - teku-data:/var/lib/teku
      - /etc/localtime:/etc/localtime:ro
    entrypoint:
      - /opt/teku/bin/teku
      - voluntary-exit
      - --beacon-node-api-endpoint=${CL_NODE:-http://consensus:5052}
      - --validator-keys=/var/lib/teku/validator-keys:/var/lib/teku/validator-passwords
      - --validator-keys=/var/lib/teku/validator/key-manager/local:/var/lib/teku/validator/key-manager/local-passwords

  validator-keys:
    profiles: ["tools"]
    restart: "no"
    build:
      context: ./vc-utils
    image: vc-utils:local
    pull_policy: never
    user: root
    volumes:
      - teku-data:/var/lib/teku
      - ./.eth/validator_keys:/validator_keys
      - ./.eth/exit_messages:/exit_messages
      - /etc/localtime:/etc/localtime:ro
    environment:
      - TLS="true"
      - KEYSTORE_PASSWORD=${KEYSTORE_PASSWORD:-}
      - KEY_API_PORT=${KEY_API_PORT:-7500}
      - WEB3SIGNER=${WEB3SIGNER:-false}
      - CL_NODE=${CL_NODE}
    depends_on:
      - validator
    entrypoint:
      - keymanager.sh
      - /var/lib/teku/validator/key-manager/validator-api-bearer
      - vc

volumes:
  teku-data:

networks:
  default:
    enable_ipv6: ${IPV6:-false}