Skip to content

Fix: Remove hardcoded engine-auth secrets and secure operator deployment paths#1171

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
magqqgq wants to merge 4 commits into
base:main
Choose a base branch
from
+11 −8
Open

Fix: Remove hardcoded engine-auth secrets and secure operator deployment paths #1171

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
c9d9d57
Fix: Remove hardcoded engine-auth secrets and secure operator deploym…
magqqgq Aug 21, 2026
b2cb8ff
Update .env.sepolia
magqqgq Aug 21, 2026
41f3937
Update .env.mainnet
magqqgq Aug 21, 2026
47f5b1f
Update .gitignore
magqqgq Aug 21, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .env.mainnet
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -21,7 +21,7 @@ BASE_NODE_L1_TRUST_RPC="false"
# --------------------
BASE_NODE_L2_ENGINE_RPC=ws://execution:8551
BASE_NODE_L2_ENGINE_AUTH=/tmp/engine-auth-jwt
BASE_NODE_L2_ENGINE_AUTH_RAW=688f5d737bad920bdfb2fc2f488d6b6209eebda1dae949a8de91398d932c517a
BASE_NODE_L2_ENGINE_AUTH_RAW=REPLACE_WITH_A_64_CHARACTER_HEX_SECRET

# P2P CONFIGURATION
# -----------------
Expand Down
2 changes: 1 addition & 1 deletion .env.sepolia
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -21,7 +21,7 @@ BASE_NODE_L1_TRUST_RPC="false"
# --------------------
BASE_NODE_L2_ENGINE_RPC=http://execution:8551
BASE_NODE_L2_ENGINE_AUTH=/tmp/engine-auth-jwt
BASE_NODE_L2_ENGINE_AUTH_RAW=688f5d737bad920bdfb2fc2f488d6b6209eebda1dae949a8de91398d932c517a
BASE_NODE_L2_ENGINE_AUTH_RAW=REPLACE_WITH_A_64_CHARACTER_HEX_SECRET

# P2P CONFIGURATION
# -----------------
Expand Down
3 changes: 3 additions & 0 deletions .gitignore
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -2,3 +2,6 @@
/reth-data/
/dependency_updater/dependency_updater
.DS_Store
# Local operator configuration files may contain credentials.
.env
.env.*
12 changes: 6 additions & 6 deletions README.md
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -13,10 +13,10 @@ Base is a secure, low-cost, developer-friendly Ethereum L2 built on Optimism's [
## Quick Start

1. Ensure you have an Ethereum L1 full node RPC and beacon endpoint available.
2. Choose your network:
- For mainnet: use `.env.mainnet`
- For testnet: use `.env.sepolia`
3. Configure your L1 endpoints in the appropriate `.env` file:
2. Copy the configuration file for your network to a local, ignored file:
- For mainnet: `cp .env.mainnet .env.local.mainnet`
- For testnet: `cp .env.sepolia .env.local.sepolia`
3. Configure your L1 endpoints and `BASE_NODE_L2_ENGINE_AUTH_RAW` in the copied `.env` file:
```bash
BASE_NODE_L1_ETH_RPC=<your-preferred-l1-rpc>
BASE_NODE_L1_BEACON=<your-preferred-l1-beacon>
Expand All@@ -25,10 +25,10 @@ Base is a secure, low-cost, developer-friendly Ethereum L2 built on Optimism's [

```bash
# For mainnet (default):
docker compose up --build
NETWORK_ENV=.env.local.mainnet docker compose up --build

# For testnet:
NETWORK_ENV=.env.sepolia docker compose up --build
NETWORK_ENV=.env.local.sepolia docker compose up --build
```

## Supported Clients
Expand Down