Create the node home

Run this after Install secretd and before init-enclave. Run the commands as the unit User=.

Do not re-init a home that already exists. Upgrade a seeded node leaves config.toml and genesis.json in place.

Init

secretd init writes config/config.toml, config/app.toml, and a placeholder config/genesis.json. It creates config/node_key.json and config/priv_validator_key.json. Keep priv_validator_key.json. You need it before init-enclave. Do not generate a second consensus key after the quote.

secretd init <MONIKER> --chain-id secret-4

If genesis.json already exists, init refuses unless you pass --overwrite. Do not pass --overwrite. --overwrite replaces genesis.json with a new placeholder. An existing priv_validator_key.json stays. The placeholder stays until Sync runs restore.sh.

After init, replace p2p.seeds. For chain-id secret-4, the installed binary writes three peers on scrt-seed-01.scrtlabs.com, scrt-seed-02.scrtlabs.com, and scrt-seed-03.scrtlabs.com. Replace that line with the seven peers below. A home that already ran init keeps the old config.toml until you edit that line.

seeds = "[email protected]:26656,[email protected]:26656,[email protected]:26656,[email protected]:26656,[email protected]:26656,[email protected]:26656,[email protected]:26656"

That line is p2p.seeds. A seed is dialed for addresses and then dropped. Leave p2p.persistent_peers empty.

init also sets:

Leave p2p.persistent_peers as "", db_backend as goleveldb, p2p.laddr as tcp://0.0.0.0:26656, and rpc.laddr as tcp://127.0.0.1:26657. Keep RPC on loopback until you follow RPC and LCD.

Persistent peers

persistent_peers = ""

Leave persistent_peers empty until you have peers to add.

Genesis

secretd init leaves a placeholder ~/.secretd/config/genesis.json. The chain genesis is about 1.36 GiB and ships inside the pruned snapshot tarball on https://mainnet-secret-snapshot.secret3.dev.

Do not replace that file by hand. Do not pull genesis from the RPC.

After Register the node, run restore.sh from Sync. It downloads the snapshot and copies genesis.json and addrbook.json into config/ while keeping your node keys and config.toml. Quick Setup runs the same restore at the end.

app.toml

secretd init already wrote app.toml. Edit that file before start. Do not run secretd start to create it. The 1.27.2 binary writes minimum-gas-prices = "0.0125uscrt". Set it to 0.1uscrt before you start the node:

minimum-gas-prices = "0.1uscrt"

In that same root table, set iavl-disable-fastnode = true. The fresh value is false, which turns the IAVL fastnode index on. The first start then builds that index. Keep the key above the first [section]. The same line under [wasm] is ignored.

Confirm a fresh file also shows:

A new home uses pruning = "default" (last 362880 states, delete every 10) and min-retain-blocks = 0. Set pruning = "nothing" on Archive node before the heights you need are committed. Do not leave minimum-gas-prices empty. Startup halts if it is empty; at 0.0125uscrt the node starts with the package default until you change it.

api.address is tcp://localhost:1317 and grpc.address is localhost:9090. Do not publish 1317 or 9090 yet. A fresh file sets enabled-unsafe-cors = true. Turn that off in RPC and LCD before the API is reachable.

Ports and paths

Create a custom SCRT_SGX_STORAGE directory yourself before init-enclave. The command does not create a missing custom path. The package creates /opt/secret/.sgx_secrets.

Next: Register the node. priv_validator_key.json must already be on disk.