wSFcQyxBu1/opnform
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

mem_limit per service (RAM-guardrail derden-box, infra#84)

Browse source 
OpnForm draait vanaf fase 3b (#76/#84) op de derden-box; per service een
memory-limit zodat een lek of piek nooit de hele box meetrekt. Idle-gebruik
gemeten 2026-09-13 (totaal ~500 MiB); limits ruim erboven.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
claude-macmini 2026-09-13 16:00:06 +02:00
parent e8f5155046
commit 555996278f
1 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
docker-compose.yml
View file

@ -1,4 +1,4 @@
# OpnForm — forms.doc-gen.eu (CX33) # OpnForm — forms.doc-gen.eu (derden-box sinds infra#84; daarvóór CX33/docgen)
# ===================================================================== # =====================================================================
# Deploy-model: Coolify **docker-compose** (git-based), GEEN route B. # Deploy-model: Coolify **docker-compose** (git-based), GEEN route B.
# - Geen registry-image, geen Forgejo Actions/CI, geen host-watcher. # - Geen registry-image, geen Forgejo Actions/CI, geen host-watcher.
@ -17,6 +17,7 @@ services:
api: &api api: &api
image: jhumanj/opnform-api:1.13.2 image: jhumanj/opnform-api:1.13.2
restart: unless-stopped restart: unless-stopped
mem_limit: 512m # RAM-guardrail derden-box (infra#84); idle ~80 MiB
volumes: volumes:
- opnform_storage:/usr/share/nginx/html/storage:rw - opnform_storage:/usr/share/nginx/html/storage:rw
environment: &api-env environment: &api-env
@ -109,6 +110,7 @@ services:
ui: ui:
image: jhumanj/opnform-client:1.13.2 image: jhumanj/opnform-client:1.13.2
restart: unless-stopped restart: unless-stopped
mem_limit: 384m # RAM-guardrail derden-box (infra#84); idle ~225 MiB
environment: environment:
NUXT_PUBLIC_APP_URL: ${SERVICE_URL_INGRESS} NUXT_PUBLIC_APP_URL: ${SERVICE_URL_INGRESS}
NUXT_PUBLIC_API_BASE: ${SERVICE_URL_INGRESS}/api NUXT_PUBLIC_API_BASE: ${SERVICE_URL_INGRESS}/api
@ -133,6 +135,7 @@ services:
redis: redis:
image: redis:7.4.11 image: redis:7.4.11
restart: unless-stopped restart: unless-stopped
mem_limit: 128m # RAM-guardrail derden-box (infra#84); idle ~20 MiB
volumes: volumes:
- redis-data:/data - redis-data:/data
healthcheck: healthcheck:
@ -145,6 +148,7 @@ services:
db: db:
image: postgres:16.15 image: postgres:16.15
restart: unless-stopped restart: unless-stopped
mem_limit: 384m # RAM-guardrail derden-box (infra#84); idle ~70 MiB
environment: environment:
POSTGRES_DB: ${DB_DATABASE:-opnform} POSTGRES_DB: ${DB_DATABASE:-opnform}
POSTGRES_USER: ${DB_USERNAME:-opnform} POSTGRES_USER: ${DB_USERNAME:-opnform}
@ -161,6 +165,7 @@ services:
ingress: ingress:
image: nginx:1.30.4 image: nginx:1.30.4
restart: unless-stopped restart: unless-stopped
mem_limit: 64m # RAM-guardrail derden-box (infra#84); idle ~15 MiB
environment: environment:
# Coolify: expose service 'ingress' op container-poort 80 achter het # Coolify: expose service 'ingress' op container-poort 80 achter het
# toegewezen domein (Traefik + Let's Encrypt). Het echte domein zet je # toegewezen domein (Traefik + Let's Encrypt). Het echte domein zet je