lighthouse.yml

x-logging: &logging
  logging:
    driver: json-file
    options:
      max-size: 100m
      max-file: "3"
      tag: '{{.ImageName}}|{{.Name}}|{{.ImageFullID}}|{{.FullID}}'


x-build: &lh-build
  context: ./lighthouse
  dockerfile: ${LH_DOCKERFILE}
  args:
    - BUILD_TARGET=${LH_SRC_BUILD_TARGET:-stable}
    - SRC_REPO=${LH_SRC_REPO:-https://github.com/sigp/lighthouse}
    - DOCKER_TAG=${LH_DOCKER_TAG:-latest-modern}
    - DOCKER_REPO=${LH_DOCKER_REPO:-sigp/lighthouse}

services:
  lighthouse-builder:
    restart: "no"
    build:
      <<: *lh-build
    image: lighthouse:local
    pull_policy: never
    entrypoint: ["true"]

  consensus:
    restart: "unless-stopped"
    image: lighthouse:local
    pull_policy: never
    user: lhconsensus
    stop_grace_period: 1m
    depends_on:
      lighthouse-builder:
        condition: service_completed_successfully
    volumes:
      - lhconsensus-data:/var/lib/lighthouse
      - /etc/localtime:/etc/localtime:ro
      - jwtsecret:/var/lib/lighthouse/beacon/ee-secret
    environment:
      - CHECKPOINT_SYNC_URL=${CHECKPOINT_SYNC_URL}
      - JWT_SECRET=${JWT_SECRET}
      - MEV_BOOST=${MEV_BOOST}
      - MEV_NODE=${MEV_NODE}
      - BEACON_STATS_API=${BEACON_STATS_API}
      - BEACON_STATS_MACHINE=${BEACON_STATS_MACHINE}
      - CL_EXTRAS=${CL_EXTRAS:-}
      - NODE_TYPE=${CL_NODE_TYPE:-pruned}
      - EL_NODE=${EL_NODE}
      - IPV6=${IPV6:-false}
      - CL_P2P_PORT=${CL_P2P_PORT:-9000}
      - CL_QUIC_PORT=${CL_QUIC_PORT:-9001}
      - NETWORK=${NETWORK}
      - COMPOSE_FILE=${COMPOSE_FILE}
    ports:
      - ${HOST_IP:-}:${CL_P2P_PORT:-9000}:${CL_P2P_PORT:-9000}/tcp
      - ${HOST_IP:-}:${CL_P2P_PORT:-9000}:${CL_P2P_PORT:-9000}/udp
      - ${HOST_IP:-}:${CL_QUIC_PORT:-9001}:${CL_QUIC_PORT:-9001}/udp
    networks:
      default:
        aliases:
          - eth2
          # This allows multiple Eth Docker stacks all connected to the same bridge network
          - ${CL_ALIAS:-default-consensus}
    <<: *logging
    entrypoint:
      - docker-entrypoint.sh
      - lighthouse
      - bn
      - --disable-upnp
      - --datadir
      - /var/lib/lighthouse
      - --gui
      - --http-address
      - 0.0.0.0
      - --http-port
      - ${CL_REST_PORT:-5052}
      - --http-allow-origin=*
      - --listen-address
      - 0.0.0.0
      - --port
      - ${CL_P2P_PORT:-9000}
      - --quic-port
      - ${CL_QUIC_PORT:-9001}
      - ${CL_MAX_PEER_COUNT:+--target-peers}
      - ${CL_MAX_PEER_COUNT:+${CL_MAX_PEER_COUNT}}
      - --debug-level=${LOG_LEVEL}
      - --metrics
      - --metrics-address
      - 0.0.0.0
      - --metrics-port
      - "8008"
      - --suggested-fee-recipient
      - ${FEE_RECIPIENT}
    labels:
      - metrics.scrape=true
      - metrics.path=/metrics
      - metrics.port=8008
      - metrics.instance=consensus
      - metrics.network=${NETWORK}

  validator:
    restart: "unless-stopped"
    image: lighthouse:local
    pull_policy: never
    user: lhvalidator
    depends_on:
      consensus:
        condition: service_started
      lighthouse-builder:
        condition: service_completed_successfully
    volumes:
      - lhvalidator-data:/var/lib/lighthouse
      - /etc/localtime:/etc/localtime:ro
    environment:
      - MEV_BOOST=${MEV_BOOST}
      - MEV_BUILD_FACTOR=${MEV_BUILD_FACTOR}
      - BEACON_STATS_API=${BEACON_STATS_API}
      - BEACON_STATS_MACHINE=${BEACON_STATS_MACHINE}
      - DOPPELGANGER=${DOPPELGANGER}
      - VC_EXTRAS=${VC_EXTRAS:-}
      - GRAFFITI=${GRAFFITI:-}
      - DEFAULT_GRAFFITI=${DEFAULT_GRAFFITI:-false}
      - NETWORK=${NETWORK}
      - ENABLE_DIST_ATTESTATION_AGGR=${ENABLE_DIST_ATTESTATION_AGGR:-false}
    networks:
      default:
        aliases:
          - ${VC_ALIAS:-vc}
    <<: *logging
    entrypoint:
      - docker-entrypoint-vc.sh
      - lighthouse
      - vc
      - --datadir
      - /var/lib/lighthouse
      - --beacon-nodes
      - ${CL_NODE:-http://consensus:5052}
      - --broadcast
      - attestations,sync-committee,blocks,subscriptions
      - --debug-level=${LOG_LEVEL}
      - --metrics
      - --metrics-address
      - 0.0.0.0
      - --metrics-port
      - "8009"
      - --http
      - --http-port
      - ${KEY_API_PORT:-7500}
      - --http-address
      - 0.0.0.0
      - --http-allow-origin=*
      - --unencrypted-http-transport
      - --suggested-fee-recipient
      - ${FEE_RECIPIENT}
    labels:
      - traefik.enable=true
      - traefik.http.routers.${VC_HOST:-vc}.service=${VC_HOST:-vc}
      - traefik.http.routers.${VC_HOST:-vc}.entrypoints=websecure
      - traefik.http.routers.${VC_HOST:-vc}.rule=Host(`${VC_HOST:-vc}.${DOMAIN}`)
      - traefik.http.routers.${VC_HOST:-vc}.tls.certresolver=letsencrypt
      - traefik.http.services.${VC_HOST:-vc}.loadbalancer.server.port=${KEY_API_PORT:-7500}
      - metrics.scrape=true
      - metrics.path=/metrics
      - metrics.port=8009
      - metrics.instance=validator
      - metrics.network=${NETWORK}

  validator-exit:
    profiles: ["tools"]
    restart: "no"
    image: lighthouse:local
    pull_policy: never
    # Keys have 440 permissions. Root copies and chowns them,
    # then switches to user lhvalidator
    user: root
    depends_on:
      consensus:
        condition: service_started
      lighthouse-builder:
        condition: service_completed_successfully
    volumes:
      - lhvalidator-data:/var/lib/lighthouse
      - ./.eth/validator_keys:/validator_keys
      - /etc/localtime:/etc/localtime:ro
    entrypoint:
      - validator-exit.sh
      - lighthouse
      - account
      - validator
      - exit
      - --beacon-node
      - http://consensus:5052
      - --datadir
      - /var/lib/lighthouse
      - --network
      - ${NETWORK}
      - --debug-level=${LOG_LEVEL}
      - --keystore

  validator-keys:
    profiles: ["tools"]
    restart: "no"
    build:
      context: ./vc-utils
    image: vc-utils:local
    pull_policy: never
    # The API token has 640 permissions. Root copies it,
    # then switches to the local user's UID or if not provided,
    # 1000. The UID has to be able to write .eth/validator_keys
    # for the "keys delete" command.
    user: root
    depends_on:
      - validator
    volumes:
      - lhvalidator-data:/var/lib/lighthouse
      - ./.eth/validator_keys:/validator_keys
      - ./.eth/exit_messages:/exit_messages
      - /etc/localtime:/etc/localtime:ro
    environment:
      - KEYSTORE_PASSWORD=${KEYSTORE_PASSWORD:-}
      - KEY_API_PORT=${KEY_API_PORT:-7500}
      - WEB3SIGNER=${WEB3SIGNER:-false}
      - W3S_NODE=${W3S_NODE}
      - CL_NODE=${CL_NODE}
    entrypoint:
      - keymanager.sh
      - /var/lib/lighthouse/validators/api-token.txt
      - ${VC_ALIAS:-vc}

  set-cl-prune-marker:
    profiles: ["tools"]
    image: alpine:3
    user: "10002:10002"
    restart: "no"
    volumes:
      - lhconsensus-data:/var/lib/lighthouse
    entrypoint: ["/bin/sh", "-c"]
    command: /bin/sh

volumes:
  lhconsensus-data:
  lhvalidator-data:
  jwtsecret:

networks:
  default:
    enable_ipv6: ${IPV6:-false}