besu.yml

x-logging: &logging
  logging:
    driver: json-file
    options:
      max-size: 100m
      max-file: "3"
      tag: '{{.ImageName}}|{{.Name}}|{{.ImageFullID}}|{{.FullID}}'

services:
  execution:
    restart: "unless-stopped"
    stop_grace_period: 5m
    build:
      context: ./besu
      dockerfile: ${BESU_DOCKERFILE}
      args:
        - BUILD_TARGET=${BESU_SRC_BUILD_TARGET:-'$(git describe --tags $(git rev-list --tags --max-count=1))'}
        - SRC_REPO=${BESU_SRC_REPO:-https://github.com/hyperledger/besu}
        - DOCKER_TAG=${BESU_DOCKER_TAG:-latest}
        - DOCKER_REPO=${BESU_DOCKER_REPO:-hyperledger/besu}
    image: besu:local
    pull_policy: never
    user: besu
    environment:
      - JAVA_OPTS=${BESU_HEAP:--Xmx5g}
      - JWT_SECRET=${JWT_SECRET:-}
      - EL_EXTRAS=${EL_EXTRAS:-}
      - ARCHIVE_NODE=${ARCHIVE_NODE:-}
      - NETWORK=${NETWORK}
    volumes:
      - besu-eth1-data:/var/lib/besu
      - /etc/localtime:/etc/localtime:ro
      - jwtsecret:/var/lib/besu/ee-secret
    ports:
      - ${HOST_IP:-}:${EL_P2P_PORT:-30303}:${EL_P2P_PORT:-30303}/tcp
      - ${HOST_IP:-}:${EL_P2P_PORT:-30303}:${EL_P2P_PORT:-30303}/udp
    networks:
      default:
        aliases:
          - eth1
          - ${NETWORK}-execution # This allows multiple Eth Docker stacks all connected to the same central traefik
    <<: *logging
    entrypoint:
      - docker-entrypoint.sh
      - /opt/besu/bin/besu
      - --data-path
      - /var/lib/besu
      - --p2p-port
      - ${EL_P2P_PORT:-30303}
      - --rpc-http-enabled
      - --rpc-http-host
      - 0.0.0.0
      - --rpc-http-port
      - ${EL_RPC_PORT:-8545}
      - --rpc-http-cors-origins=*
      - --rpc-http-max-active-connections=65536
      - --rpc-max-logs-range=65536
      - --rpc-ws-enabled
      - --rpc-ws-host
      - 0.0.0.0
      - --rpc-ws-port
      - ${EL_WS_PORT:-8546}
      - --max-peers
      - ${EL_MAX_PEER_COUNT:-25}
      - --host-allowlist=*
      - --engine-host-allowlist=*
      - --engine-jwt-secret=/var/lib/besu/ee-secret/jwtsecret
      - --engine-rpc-port=${EE_PORT:-8551}
      - --logging
      - ${LOG_LEVEL}
      - --metrics-enabled
      - --metrics-host
      - 0.0.0.0
      - --metrics-port
      - "6060"
      - --nat-method=DOCKER
    labels:
      - metrics.scrape=true
      - metrics.path=/metrics
      - metrics.port=6060
      - metrics.instance=execution

  set-prune-marker:
    profiles: ["tools"]
    image: alpine:3
    user: "10001:10001"
    restart: "no"
    volumes:
      - besu-eth1-data:/var/lib/besu
    entrypoint: ["/bin/sh","-c"]
    command: /bin/sh

volumes:
  besu-eth1-data:
  jwtsecret:

networks:
  default:
    enable_ipv6: ${IPV6:-false}