infra-nimbus/ansible/group_vars/nimbus-geth-mainnet.yml

---
# This will be is used instead of Infura for Eth2 Mainnet Nimbus nodes.

# Syncing can use a lot of mamory
swap_file_size_mb: 4096

# Geth node
geth_service_name: 'nimbus-mainnet'
geth_network_name: 'mainnet'
geth_sync_mode: 'snap'
geth_log_level_name: info
geth_websocket_enabled: true
# Geth auth & JWT token
geth_account_pass:      '{{lookup("vault", "geth",       field="password",  stage="all")}}'
geth_authrpc_jwtsecret: '{{lookup("vault", "engine-api", field="jwt-token", stage="all")}}'
# Memory settings
geth_cont_mem_ratio: 0.7

# Geth metrics
geth_expo_service_name: '{{ geth_service_name }}'
geth_expo_source_cont_name: '{{ geth_cont_name }}'
geth_expo_source_data_path: '{{ geth_cont_vol }}/data'

# Ports
geth_port: 30303
geth_rpc_addr: '0.0.0.0'
geth_rpc_port: 8545
geth_authrpc_addr: '0.0.0.0'
geth_authrpc_port: 8551
geth_websocket_addr: '0.0.0.0'
geth_websocket_port: 8546
geth_expo_cont_port: 9200
geth_metrics_port: 6060

# Migrated to NFTables from IPTables.
# https://github.com/status-im/infra-misc/issues/301
bootstrap__firewall_nftables: true

# Open Ports
open_ports_list:
  geth-node:
  - { port: '{{ geth_port }}',           comment: 'Geth LibP2P',    protocol: 'tcp'                         }
  - { port: '{{ geth_port }}',           comment: 'Geth Discovery', protocol: 'udp'                         }
  - { port: '{{ geth_metrics_port }}',   comment: 'Geth Metrics',   ipset: 'hq.metrics',     iifname: 'wg0' }
  - { port: '{{ geth_expo_cont_port }}', comment: 'Geth Exporter',  ipset: 'hq.metrics',     iifname: 'wg0' }
  - { port: '{{ geth_rpc_port }}',       comment: 'Geth RPC',       ipset: 'nimbus.mainnet', iifname: 'wg0' }
  - { port: '{{ geth_authrpc_port }}',   comment: 'Geth API',       ipset: 'nimbus.mainnet', iifname: 'wg0' }
  - { port: '{{ geth_websocket_port }}', comment: 'Geth Websocket', ipset: 'nimbus.mainnet', iifname: 'wg0' }
  smart-metrics:
  - { port: '{{ smart_metrics_listen_port }}', comment: 'SMART Metrics', ipset: 'hq.metrics', iifname: 'wg0' }