Skip to content
Open
Changes from 5 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 8 additions & 8 deletions docs/get-started/how-to/run-a-node/beta-v4-migration.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -158,8 +158,8 @@ fast-sync-min-peers=1
# Engine API (CRITICAL for Maru connection)
engine-host-allowlist=["*"]
engine-rpc-port=8550
engine-jwt-disabled=true
engine-rpc-enabled=true # No JWT required for development/testing
engine-jwt-enabled=true
engine-jwt-file="/jwt/jwtsecret"

# JSON-RPC
rpc-http-enabled=true
Expand Down Expand Up @@ -1056,7 +1056,7 @@ bootnodes = []
refresh-interval = "3s"

[payload-validator]
engine-api-endpoint = { endpoint = "http://linea-besu:8550" } # Match Besu port!
engine-api-endpoint = { endpoint = "http://linea-besu:8550", jwt-secret-path = "/jwt/jwtsecret" }
eth-api-endpoint = { endpoint = "http://linea-besu:8545" }

[observability]
Expand Down Expand Up @@ -1208,37 +1208,37 @@ docker logs linea-maru | grep "Currently connected peers"
# Should show: peers=[16Uiu2HAmR33t8RZiAHovuH9iH2UuUrajrbfyYowiYDAQo3D5Y9wg]
```

## JWT Authentication
## JWT Authentication (Optional)

For production environments, you should enable JWT authentication:

### Generate JWT secret

```bash
openssl rand -hex 32 > ~/linea-node/jwt/jwt.hex
openssl rand -hex 32 > ~/linea-node/jwt/jwtsecret
```

### Update Besu config

```toml
# Replace engine-jwt-disabled=true with:
engine-jwt-enabled=true
engine-jwt-file="/opt/besu/jwt.hex"
engine-jwt-file="/jwt/jwtsecret"
```

### Update Maru config

```toml
[payload-validator]
engine-api-endpoint = { endpoint = "http://linea-besu:8550", jwt-secret-path = "/jwt.hex" }
engine-api-endpoint = { endpoint = "http://linea-besu:8550", jwt-secret-path = "/jwt/jwtsecret" }
```

### Update Docker volumes

```yaml
# Add to both Besu and Maru:
volumes:
- ./jwt/jwt.hex:/jwt.hex:ro
- ./jwt:/jwt:ro
```

## Private key management
Expand Down