Files
proxmox/docs/04-configuration/CONFIGURATION_TEMPLATES.md
defiQUG dbd517b279 Sync workspace: config, docs, scripts, CI, operator rules, and submodule pointers.
- Update dbis_core, cross-chain-pmm-lps, explorer-monorepo, metamask-integration, pr-workspace/chains
- Omit embedded publish git dirs and empty placeholders from index

Made-with: Cursor
2026-04-12 06:12:20 -07:00

3.4 KiB

Configuration Templates

Modern note: Some examples in this template library intentionally preserve older migration-era IPs and VMIDs for reference. Treat them as placeholders, not authoritative live values. For current RPC endpoints and node placement, confirm against docs/04-configuration/RPC_ENDPOINTS_MASTER.md, docs/04-configuration/ALL_VMIDS_ENDPOINTS.md, and config/ip-addresses.conf.

Last Updated: 2026-01-31
Document Version: 1.0
Status: Active Documentation


Overview

Ready-to-use configuration templates with placeholders. Replace <PLACEHOLDER> with actual values for your environment.


1. ER605 / Edge Router (Conceptual)

# Replace <PLACEHOLDER> with actual values
network:
  wan1:
    ip: <WAN1_IP>
    gateway: <WAN1_GATEWAY>
    netmask: 255.255.255.240
  wan2:
    ip: <WAN2_IP>
    gateway: <WAN2_GATEWAY>
  lan:
    subnet: 192.168.11.0/24
    gateway: 192.168.11.1
nat:
  port_forward:
    - public_ip: 76.53.10.36
      public_ports: [80, 443]
      internal_ip: 192.168.11.167
      internal_ports: [80, 443]

See: ER605_ROUTER_CONFIGURATION.md, 11-references/NETWORK_CONFIGURATION_MASTER.md.


2. Proxmox Network (per host)

# vmbr0: VLAN-aware bridge
# Replace <HOST_IP> with 192.168.11.10 (ml110), .11 (r630-01), .12 (r630-02), etc.
auto vmbr0
iface vmbr0 inet static
    address <HOST_IP>/24
    gateway 192.168.11.1
    bridge-ports eno1
    bridge-stp off
    bridge-fd 0
    bridge-vlan-aware yes
    bridge-vids 11 110 111 112 120 130 132 133 134 160 200-203

See: 02-architecture/NETWORK_ARCHITECTURE.md.


3. Cloudflare Tunnel (config.yml snippet)

# Replace <TUNNEL_ID>, <SERVICE_URL>, <ORIGIN_CERT_PATH> with actual values
tunnel: <TUNNEL_ID>
credentials-file: /etc/cloudflared/credentials.json

ingress:
  - hostname: rpc-http-pub.d-bis.org
    service: http://192.168.11.252:8545
  - hostname: explorer.d-bis.org
    service: http://<SERVICE_URL>
  - service: http_status:404

See: cloudflare/CLOUDFLARE_TUNNEL_CONFIGURATION_GUIDE.md, 05-network/CLOUDFLARE_ROUTING_MASTER.md.


4. Besu Node (config.toml snippet)

# Replace <VMID>, <NODE_KEY>, <STATIC_NODES_PATH> with actual values
data-path = "/var/lib/besu"
genesis-file = "/etc/besu/genesis.json"

network-id = 138
p2p-host = "0.0.0.0"
p2p-port = 30303

rpc-http-enabled = true
rpc-http-host = "0.0.0.0"
rpc-http-port = 8545
rpc-ws-enabled = true
rpc-ws-port = 8546

# Permissioning (if used)
permissions-nodes-config-file-enabled = true
permissions-nodes-config-file = "<STATIC_NODES_PATH>"

See: 06-besu/BESU_NODES_FILE_REFERENCE.md, 06-besu/BESU_ALLOWLIST_RUNBOOK.md.