From c0ab15c34fe1890e6eb1c7ed719d6074a8b18382 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jakub=20Soko=C5=82owski?= Date: Mon, 21 Feb 2022 17:26:33 +0100 Subject: [PATCH] mainnet.openeth: deploy OpenEthereum node to the host MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit We need some variety and redundancy in how we sync Eth1: https://github.com/status-im/infra-nimbus/issues/80 Signed-off-by: Jakub SokoĊ‚owski --- ansible/group_vars/nimbus-openeth-mainnet.yml | 37 +++++++++++++++++++ ansible/openeth.yml | 18 +++++++++ ansible/requirements.yml | 5 +++ 3 files changed, 60 insertions(+) create mode 100644 ansible/group_vars/nimbus-openeth-mainnet.yml create mode 100644 ansible/openeth.yml diff --git a/ansible/group_vars/nimbus-openeth-mainnet.yml b/ansible/group_vars/nimbus-openeth-mainnet.yml new file mode 100644 index 0000000..11d5403 --- /dev/null +++ b/ansible/group_vars/nimbus-openeth-mainnet.yml @@ -0,0 +1,37 @@ +--- +# OpenEthereum +openethereum_service_name: 'nimbus-openeth' +openethereum_chain: 'foundation' +openethereum_mode: 'active' +openethereum_pruning: 'auto' +openethereum_identity: 'Status Nimbus Sync Node' +# Allow connections from our VPN +openethereum_websocket_origins: ['all'] +# Memory settings +openethereum_cache_size_ratio: 0.6 +openethereum_cont_mem_ratio: 0.8 +# APIs +openethereum_rpc_apis: [web3, eth, pubsub, net, parity, parity_pubsub, traces] + +# Ports and Addresses +openethereum_p2p_port: 30303 +openethereum_rpc_port: 8545 +openethereum_rpc_addr: '0.0.0.0' +openethereum_websocket_port: 8546 +openethereum_websocket_addr: '0.0.0.0' +openethereum_metrics_port: 3000 + +# Open Ports +open_ports_default_comment: 'OpenEthereum' +open_ports_default_chain: 'VPN' +open_ports_list: + - { port: '{{ openethereum_p2p_port }}', chain: 'SERVICES' } + - { port: '{{ openethereum_metrics_port }}', ipset: 'metrics.hq' } + - { port: '{{ openethereum_rpc_port }}', ipset: 'nimbus.pyrmont' } + - { port: '{{ openethereum_rpc_port }}', ipset: 'nimbus.prater' } + - { port: '{{ openethereum_rpc_port }}', ipset: 'nimbus.eth1' } + - { port: '{{ openethereum_rpc_port }}', ipset: 'rocket.prod' } + - { port: '{{ openethereum_websocket_port }}', ipset: 'nimbus.pyrmont' } + - { port: '{{ openethereum_websocket_port }}', ipset: 'nimbus.prater' } + - { port: '{{ openethereum_websocket_port }}', ipset: 'nimbus.eth1' } + - { port: '{{ openethereum_websocket_port }}', ipset: 'rocket.prod' } diff --git a/ansible/openeth.yml b/ansible/openeth.yml new file mode 100644 index 0000000..cd19e6a --- /dev/null +++ b/ansible/openeth.yml @@ -0,0 +1,18 @@ +--- +- name: Verify Ansible versions + hosts: all + tags: always + become: false + run_once: true + gather_facts: false + tasks: + - local_action: command ./versioncheck.py + changed_when: false + +- name: Configure OpenEthereum nodes + become: true + hosts: + - nimbus-openeth-mainnet + roles: + - { role: open-ports, tags: open-ports } + - { role: infra-role-openethereum, tags: openethereum } diff --git a/ansible/requirements.yml b/ansible/requirements.yml index 2189606..94cf4c0 100644 --- a/ansible/requirements.yml +++ b/ansible/requirements.yml @@ -113,3 +113,8 @@ src: git@github.com:status-im/infra-role-geth-exporter.git version: 30e6a08e9b2badffbd32472fff640aefef26fd37 scm: git + +- name: infra-role-openethereum + src: git@github.com:status-im/infra-role-openethereum.git + version: ddcac93d54dbb04fe6a971e7c1d1817cfe7b2b10 + scm: git