archy/apps/bitcoin-core/manifest.yml

app:
  id: bitcoin-core
  name: Bitcoin Core
  version: 28.4.0
  description: Reference Bitcoin Core node with dynamic prune/full-mode startup based on host disk.

  container_name: bitcoin-core

  container:
    image: 146.59.87.168:3000/lfg2025/bitcoin:28.4
    pull_policy: if-not-present
    network: archy-net
    entrypoint: ["sh", "-lc"]
    custom_args:
      # Sync-speed flags: -par=0 uses every core (was capped at 2 by
      # --cpus=2, now removed for bitcoin/electrumx). -dbcache sized to
      # the IBD sweet spot — 4GB on full nodes, 1GB on pruned. Container
      # --memory=8g (config.rs::get_memory_limit) leaves headroom for
      # mempool + connections.
      - >-
        if [ "${DISK_GB:-0}" -lt 1000 ]; then
          exec bitcoind -server=1 -prune=550 -rpcallowip=0.0.0.0/0 -rpcbind=0.0.0.0:8332 -listen=1 -bind=0.0.0.0:8333 -dbcache=1024 -par=0 -maxconnections=125 -rpcuser="${BITCOIN_RPC_USER}" -rpcpassword="${BITCOIN_RPC_PASS}";
        else
          exec bitcoind -server=1 -txindex=1 -rpcallowip=0.0.0.0/0 -rpcbind=0.0.0.0:8332 -listen=1 -bind=0.0.0.0:8333 -dbcache=4096 -par=0 -maxconnections=125 -rpcuser="${BITCOIN_RPC_USER}" -rpcpassword="${BITCOIN_RPC_PASS}";
        fi
    derived_env:
      - key: DISK_GB
        template: "{{DISK_GB}}"
    secret_env:
      - key: BITCOIN_RPC_PASS
        secret_file: bitcoin-rpc-password
    data_uid: "100101:100101"

  dependencies:
    - storage: 500Gi

  resources:
    cpu_limit: 0
    memory_limit: 4Gi
    disk_limit: 500Gi

  security:
    capabilities: [CHOWN, FOWNER, SETUID, SETGID, DAC_OVERRIDE]
    readonly_root: false
    network_policy: isolated

  ports:
    - host: 8332
      container: 8332
      protocol: tcp
    - host: 8333
      container: 8333
      protocol: tcp

  volumes:
    - type: bind
      source: /var/lib/archipelago/bitcoin
      target: /home/bitcoin/.bitcoin
      options: [rw]

  environment:
    - BITCOIN_RPC_USER=archipelago

  health_check:
    type: tcp
    endpoint: localhost:8332
    interval: 30s
    timeout: 5s
    retries: 3

  bitcoin_integration:
    rpc_access: admin
    sync_required: true
    testnet_support: false
    pruning_support: true