sd/synth.download
2
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

initial resource limits, just guessed, might cause some issues later

Browse source
This commit is contained in:
zenfyr 2026-01-11 15:38:46 +07:00
commit 012b5ca858
Signed by: melontini
SSH key fingerprint: SHA256:TtcIcnTnoAB5mqHofsaOxIgiMzfVBxej1AXT7DQdrTE
33 changed files with 91 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
beeper/etc/containers/systemd/aode/aode-relay.container
View file

@ -11,6 +11,9 @@ Volume=/var/containers/aode/data:/db:Z
# Security
NoNewPrivileges=true
DropCapability=ALL
# Resources
Memory=1g
PodmanArgs=--memory-reservation=512m --cpu-shares=1024
[Service]
Restart=always

3
beeper/etc/containers/systemd/ask-js/ask-js.container
View file

@ -13,6 +13,9 @@ Volume=/var/containers/ask-js/config:/app/config:ro,Z
# Security
NoNewPrivileges=true
DropCapability=ALL
# Resources
Memory=1g
PodmanArgs=--memory-reservation=512m --cpus=0.4 --cpu-shares=512
[Service]
Restart=always

3
beeper/etc/containers/systemd/caddy/caddy.container
View file

@ -14,6 +14,9 @@ Volume=/var/www:/var/www:z
NoNewPrivileges=true
DropCapability=ALL
AddCapability=NET_ADMIN NET_BIND_SERVICE
# Resources
Memory=1g
PodmanArgs=--memory-reservation=512m --cpu-shares=1024
[Service]
Restart=always

3
beeper/etc/containers/systemd/copyparty/copyparty.container
View file

@ -17,6 +17,9 @@ HealthStartPeriod=1m
Notify=healthy
# Security
NoNewPrivileges=true
# Resources
Memory=1g
PodmanArgs=--memory-reservation=512m --cpus=0.4 --cpu-shares=512
[Service]
Restart=always

3
beeper/etc/containers/systemd/ejabberd/ejabberd.container
View file

@ -23,6 +23,9 @@ Volume=/var/containers/ejabberd/database:/opt/ejabberd/database:Z
Volume=/etc/certs:/etc/letsencrypt/live:ro,z
# Security
NoNewPrivileges=true
# Resources
Memory=1g
PodmanArgs=--memory-reservation=512m --cpus=0.4 --cpu-shares=1024
[Service]
Restart=always

3
beeper/etc/containers/systemd/forgejo/forgejo.container
View file

@ -15,6 +15,9 @@ Timezone=local
Volume=/var/containers/forgejo/data:/data:Z
# Security
NoNewPrivileges=true
# Resources
Memory=2g
PodmanArgs=--memory-reservation=512m --cpus=0.4 --cpu-shares=1024
[Service]
Restart=always

3
beeper/etc/containers/systemd/freshrss/freshrss.container
View file

@ -14,6 +14,9 @@ Volume=/var/containers/freshrss/data:/var/www/FreshRSS/data:Z
Volume=/var/containers/freshrss/extensions:/var/www/FreshRSS/extensions:Z
# Security
NoNewPrivileges=true
# Resources
Memory=512m
PodmanArgs=--memory-reservation=256m --cpus=0.2 --cpu-shares=128
[Service]
Restart=always

3
beeper/etc/containers/systemd/i2pd/i2pd.container
View file

@ -10,6 +10,9 @@ Volume=/var/containers/i2pd/data:/home/i2pd/data:Z,U
# Security
NoNewPrivileges=true
DropCapability=ALL
# Resources
Memory=256m
PodmanArgs=--memory-reservation=128m --cpus=0.2 --cpu-shares=128
[Service]
Restart=always

3
beeper/etc/containers/systemd/iceshrimp/iceshrimp.container
View file

@ -14,6 +14,9 @@ Volume=/var/containers/iceshrimp/data/media:/data/media:Z
Volume=/var/containers/iceshrimp/config:/app/config:ro,Z
# Security
NoNewPrivileges=true
# Resources
Memory=2g
PodmanArgs=--memory-reservation=512m --cpu-shares=1024
[Service]
Restart=always

3
beeper/etc/containers/systemd/knot/knot.container
View file

@ -12,6 +12,9 @@ Volume=/var/containers/knot/repositories:/home/git/repositories:Z
Volume=/var/containers/knot/data:/app:Z
# Security
NoNewPrivileges=true
# Resources
Memory=512m
PodmanArgs=--memory-reservation=256m --cpus=0.4 --cpu-shares=256
[Service]
Restart=always

3
beeper/etc/containers/systemd/mailserver/mailserver.container
View file

@ -26,6 +26,9 @@ HealthStartPeriod=1m
Notify=healthy
# Security
NoNewPrivileges=true
# Resources
Memory=512m
PodmanArgs=--memory-reservation=256m --cpus=0.4 --cpu-shares=256
[Service]
Restart=always

2
beeper/etc/containers/systemd/mastodon/mastodon-dfdb.container
View file

@ -19,6 +19,8 @@ HealthStartPeriod=10s
Notify=healthy
# Security
NoNewPrivileges=true
# Resources
Ulimit=memlock=-1
[Service]
Restart=always

3
beeper/etc/containers/systemd/mastodon/mastodon-ingress.container
View file

@ -12,6 +12,9 @@ Network=mastodon.network
Network=postgresql.network
# Security
NoNewPrivileges=true
# Resources
Memory=512m
PodmanArgs=--memory-reservation=128m --cpus=0.1 --cpu-shares=512
[Service]
Restart=always

2
beeper/etc/containers/systemd/mastodon/mastodon-sidekiq.container
View file

@ -19,6 +19,8 @@ HealthStartPeriod=1m
Notify=healthy
# Security
NoNewPrivileges=true
# Resources
PodmanArgs=--cpu-shares=2048
[Service]
Restart=always

2
beeper/etc/containers/systemd/mastodon/mastodon-web.container
View file

@ -22,6 +22,8 @@ HealthStartPeriod=1m
Notify=healthy
# Security
NoNewPrivileges=true
# Resources
PodmanArgs=--cpu-shares=2048
[Service]
Restart=always

3
beeper/etc/containers/systemd/mollysocket/mollysocket.container
View file

@ -13,6 +13,9 @@ Volume=/var/containers/mollysocket/data:/data:Z
WorkingDir=/data
# Security
NoNewPrivileges=true
# Resources
Memory=256m
PodmanArgs=--memory-reservation=128m --cpus=0.2 --cpu-shares=128
[Service]
Restart=always

3
beeper/etc/containers/systemd/pds/pds.container
View file

@ -11,6 +11,9 @@ Volume=/var/containers/pds/data:/pds:Z
# Security
NoNewPrivileges=true
DropCapability=ALL
# Resources
Memory=1g
PodmanArgs=--memory-reservation=512m --cpu-shares=1024
[Service]
Restart=always

2
beeper/etc/containers/systemd/postgresql/postgresql.container
View file

@ -16,6 +16,8 @@ HealthStartPeriod=30s
Notify=healthy
# Security
NoNewPrivileges=true
# Resources
ShmSize=1G
[Service]
Restart=always

3
beeper/etc/containers/systemd/redlib/redlib.container
View file

@ -15,6 +15,9 @@ HealthStartPeriod=30s
Notify=healthy
# Security
NoNewPrivileges=true
# Resources
Memory=1g
PodmanArgs=--memory-reservation=512m --cpus=0.4 --cpu-shares=512
[Service]
Restart=always

3
beeper/etc/containers/systemd/safetwitch/safetwitch-backend.container
View file

@ -10,6 +10,9 @@ Environment=URL=https://b.twitch.synth.download
PublishPort=127.0.0.1:43072:7000
# Security
NoNewPrivileges=true
# Resources
Memory=1g
PodmanArgs=--memory-reservation=512m --cpus=1 --cpu-shares=512
[Service]
Restart=always

3
beeper/etc/containers/systemd/safetwitch/safetwitch-frontend.container
View file

@ -15,6 +15,9 @@ Environment=SAFETWITCH_FALLBACK_LOCALE=en
PublishPort=127.0.0.1:24682:8280
# Security
NoNewPrivileges=true
# Resources
Memory=256mb
PodmanArgs=--memory-reservation=128mb --cpus=0.2 --cpu-shares=256
[Service]
Restart=always

4
beeper/etc/containers/systemd/searxng/searxng-dfdb.container
View file

@ -17,6 +17,10 @@ Network=searxng.network
Volume=/var/containers/searxng/dragonfly:/data:Z
# Security
NoNewPrivileges=true
# Resources
Memory=256mb
Ulimit=memlock=-1
PodmanArgs=--memory-reservation=128mb --cpus=0.2 --cpu-shares=512
[Service]
Restart=always

3
beeper/etc/containers/systemd/searxng/searxng.container
View file

@ -13,6 +13,9 @@ Volume=/var/containers/searxng/config:/etc/searxng:ro,Z
Volume=/var/containers/searxng/cache:/var/cache/searxng
# Security
NoNewPrivileges=true
# Resources
Memory=1g
PodmanArgs=--memory-reservation=512m --cpus=1 --cpu-shares=512
[Service]
Restart=always

2
beeper/etc/containers/systemd/sharkey/sharkey-activity.container
View file

@ -20,6 +20,8 @@ Volume=/var/containers/sharkey/activity:/sharkey/.config:z
Volume=/var/containers/sharkey/default.yml:/sharkey/.config/default.yml:ro,z
# Security
NoNewPrivileges=true
# Resources
PodmanArgs=--cpu-shares=2048
[Service]
Restart=always

2
beeper/etc/containers/systemd/sharkey/sharkey-api.container
View file

@ -19,6 +19,8 @@ Volume=/var/containers/sharkey/api:/sharkey/.config:z
Volume=/var/containers/sharkey/default.yml:/sharkey/.config/default.yml:ro,z
# Security
NoNewPrivileges=true
# Resources
PodmanArgs=--cpu-shares=2048
[Service]
Restart=always

2
beeper/etc/containers/systemd/sharkey/sharkey-dfdb.container
View file

@ -19,6 +19,8 @@ HealthStartPeriod=10s
Notify=healthy
# Security
NoNewPrivileges=true
# Resources
Ulimit=memlock=-1
[Service]
Restart=always

2
beeper/etc/containers/systemd/sharkey/sharkey-worker.container
View file

@ -17,6 +17,8 @@ Volume=/var/containers/sharkey/worker:/sharkey/.config:z
Volume=/var/containers/sharkey/default.yml:/sharkey/.config/default.yml:ro,z
# Security
NoNewPrivileges=true
# Resources
PodmanArgs=--cpu-shares=2048
[Service]
Restart=always

3
beeper/etc/containers/systemd/spindle/spindle.container
View file

@ -11,6 +11,9 @@ Volume=/var/containers/spindle/data:/app:Z
Volume=/var/run/dind/docker.sock:/var/run/docker.sock:z
# Security
NoNewPrivileges=true
# Resources
Memory=512m
PodmanArgs=--memory-reservation=256m --cpus=0.4 --cpu-shares=256
[Service]
Restart=always

3
beeper/etc/containers/systemd/tor/tor.container
View file

@ -11,6 +11,9 @@ Volume=/var/containers/tor/data:/var/lib/tor:Z
# Security
NoNewPrivileges=true
DropCapability=ALL
# Resources
Memory=256m
PodmanArgs=--memory-reservation=128m --cpus=0.2 --cpu-shares=128
[Service]
Restart=always

3
beeper/etc/containers/systemd/vaultwarden/vaultwarden.container
View file

@ -9,6 +9,9 @@ PublishPort=127.0.0.1:60838:80
Volume=/var/containers/vaultwarden/data:/data:Z
# Security
NoNewPrivileges=true
# Resources
Memory=256m
PodmanArgs=--memory-reservation=128m --cpus=0.2 --cpu-shares=128
[Service]
Restart=always

2
beeper/etc/containers/systemd/xpost/xpost-zenfyr.container
View file

@ -7,6 +7,8 @@ EnvironmentFile=/etc/containers/systemd/xpost/zenfyr.env
Volume=/var/containers/zenfyr-xpost/data:/app/data:Z,U
# Security
NoNewPrivileges=true
# Resources
PodmanArgs=--cpus=0.4 --cpu-shares=128
[Service]
Restart=always

3
beeper/etc/containers/systemd/yggdrasil/yggdrasil.container
View file

@ -11,6 +11,9 @@ Volume=/var/containers/yggdrasil/config:/etc/yggdrasil:ro,Z
# Security
NoNewPrivileges=true
DropCapability=ALL
# Resources
Memory=128m
PodmanArgs=--memory-reservation=128m --cpus=0.2 --cpu-shares=128
[Service]
Restart=always

3
beeper/etc/containers/systemd/zitadel/zitadel.container
View file

@ -13,6 +13,9 @@ PublishPort=127.0.0.1:19241:8080
Exec=start-from-init --masterkeyFromEnv --tlsMode external
# Security
NoNewPrivileges=true
# Resources
Memory=512m
PodmanArgs=--memory-reservation=256m --cpus=0.4 --cpu-shares=256
[Service]
Restart=always