mutiny-net/spark-config.yaml at master · MutinyWallet/mutiny-net · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
# Spark Operator config for MutinyNet (custom signet).
# Env-substituted by spark-entrypoint.sh (envsubst): ${RPCPASSWORD}.
# Schema follows upstream so/operator config (see mutinynet-spark e2e/upstream).
dkg:
  min_available_keys: 1 # Two operator deployment

bitcoind:
  signet:
    network: signet
    host: bitcoind-services:38332
    rpcuser: bitcoin
    rpcpassword: ${RPCPASSWORD}
    zmqpubrawblock: tcp://bitcoind-services:28332

token:
  disconnect_lrc20_node: true

grpc:
  server_connection_timeout: 5s
  server_keepalive_time: 300s
  server_keepalive_timeout: 20s
  server_unary_handler_timeout: 60s
  client_timeout: 20s

lrc20:
  signet:
    disablerpcs: true
    disablel1: true
    network: signet
    host: 127.0.0.1:18530
    withdrawbondsats: 10000
    withdrawrelativeblocklocktime: 1000
    grpcpagesize: 200
    grpcpoolsize: 10

service_authz:
  # 3 = enforce. Internal (SO-to-SO) methods are accepted only from peers whose
  # source address starts with "10.", so docker-compose.yml puts the Compose
  # network on a 10.x subnet. Requests forwarded by nginx arrive from 127.0.0.1
  # and are denied. Set 2 (warn) to log instead of deny while debugging.
  mode: 3
  ip_allowlist: []

xff_client_ip_position: 0

# Only "enabled" is read from this block. Capacities come from the ratelimit
# knobs under knobs.static_values below.
rate_limiter:
  enabled: true

# Anonymous callers must not see internals.
return_detailed_errors: false
return_detailed_panic_errors: false

tracing:
  enabled: false
  otel_collector_endpoint: ""
  otel_collector_cert_path: ""
  global_sampling_rate: 0
  span_sampling_config:
    per_span_sampling_rates: {}
    allow_list: []
    block_list: []

knobs:
  static_values:
    spark.database.pool.min_conns: 4
    spark.so.max_unused_deposit_addresses: 512
    spark.so.enable_instant_static_deposit@REGTEST: 100
    spark.so.max_pending_instant_static_deposit_amount: 1000000
    spark.so.deposit_tree.require_prepare_binding: 0
    spark.so.grpc.server.stream_heartbeat.enabled: 100
    spark.so.shutdown_hodl_invoices: 0
    spark.so.lightning.receive_sender_allowlist.enabled: 0
    spark.so.mpc_transfer.enabled: 0
    spark.so.use_batched_ancestor_chain: 100
    spark.so.initiate_preimage_swap_v4.enabled: 1
    spark.so.lightning.enforce_htlc_refund_timelock_floor: 1
    spark.so.use_consensus_initiate_counter_transfer: 1
    spark.so.use_consensus_initiate_swap_primary_transfer: 1
    spark.so.enable_partner_jwt: 1
    spark.so.tokens.allowances_enabled: 1
    spark.so.tokens.enable_justice_transactions: 1
    spark.so.tokens.l1_exit_withdrawals_enabled: 1
    spark.so.tokens.token_transaction_v3_enabled: 100
    spark.so.flow_execution.stuck_threshold_seconds: 300
    spark.so.flow_execution.coordinator_stall_threshold_seconds: 600
    # --- Rate limits, per operator. Requests per window. ---
    # Key format: spark.so.ratelimit.limit@<scope>[:ip|:pubkey]#<1s|1m|10m|1h|24h>
    # where <scope> is "global", "/pkg.Service/" or "/pkg.Service/Method".
    # Unset scopes are unlimited. The peer operator and the SSP have fixed
    # Compose addresses (docker-compose.yml) and are excluded.
    "spark.so.ratelimit.limit@global#1s": 500
    "spark.so.ratelimit.limit@global:ip#1s": 50
    "spark.so.ratelimit.limit@global:ip#1m": 1500
    "spark.so.ratelimit.limit@/spark_authn.SparkAuthnService/:ip#1s": 5
    "spark.so.ratelimit.limit@/spark_authn.SparkAuthnService/:ip#1m": 60
    "spark.so.ratelimit.exclude_ips@10.213.87.200": 1
    "spark.so.ratelimit.exclude_ips@10.213.87.201": 1
    "spark.so.ratelimit.exclude_ips@10.213.87.210": 1
    # --- Concurrency caps: in-flight unary and stream requests. ---
    "spark.so.grpc.server.concurrency_limit.limit@global": 256
    "spark.so.grpc.server.concurrency_limit.limit@global_stream": 256
    "spark.so.grpc.server.concurrency_limit.exclude_ips@10.213.87.200": 1
    "spark.so.grpc.server.concurrency_limit.exclude_ips@10.213.87.201": 1
    "spark.so.grpc.server.concurrency_limit.exclude_ips@10.213.87.210": 1