msfjarvis/server-config
1
Fork 0
mirror of https://github.com/msfjarvis/server-config synced 2025-08-14 19:57:00 +05:30
Code Issues Projects Releases Packages Wiki Activity Actions

systemd: Cap resource usage for all services

Browse source 
Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
This commit is contained in:
Harsh Shandilya 2019-09-10 20:59:04 +05:30
parent 4e44394ee6
commit 9a506ec776
No known key found for this signature in database
GPG key ID: C2E74282C2133D62
7 changed files with 28 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
systemd_units/caddy.service
View file

@ -24,6 +24,10 @@ ReadWriteDirectories=/etc/ssl/caddy
CapabilityBoundingSet=CAP_NET_BIND_SERVICE CapabilityBoundingSet=CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_BIND_SERVICE AmbientCapabilities=CAP_NET_BIND_SERVICE
NoNewPrivileges=true NoNewPrivileges=true
CPUWeight=10
CPUQuota=10%
IOWeight=20
MemorySwapMax=0
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

4
systemd_units/gitea.service
View file

@ -17,6 +17,10 @@ Restart=always
Environment=USER=git HOME=/home/git GITEA_WORK_DIR=/var/lib/gitea Environment=USER=git HOME=/home/git GITEA_WORK_DIR=/var/lib/gitea
#CapabilityBoundingSet=CAP_NET_BIND_SERVICE #CapabilityBoundingSet=CAP_NET_BIND_SERVICE
#AmbientCapabilities=CAP_NET_BIND_SERVICE #AmbientCapabilities=CAP_NET_BIND_SERVICE
CPUWeight=20
CPUQuota=25%
IOWeight=20
MemorySwapMax=0
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

4
systemd_units/mirror-bot-2.service
View file

@ -16,6 +16,10 @@ TimeoutStopSec=5s
PrivateTmp=true PrivateTmp=true
PrivateDevices=true PrivateDevices=true
ProtectSystem=full ProtectSystem=full
CPUWeight=10
CPUQuota=10%
IOWeight=20
MemorySwapMax=0
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

4
systemd_units/mirror-bot.service
View file

@ -16,6 +16,10 @@ TimeoutStopSec=5s
PrivateTmp=true PrivateTmp=true
PrivateDevices=true PrivateDevices=true
ProtectSystem=full ProtectSystem=full
CPUWeight=10
CPUQuota=10%
IOWeight=20
MemorySwapMax=0
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

4
systemd_units/uno-bot.service
View file

@ -15,6 +15,10 @@ TimeoutStopSec=5s
PrivateTmp=true PrivateTmp=true
PrivateDevices=false PrivateDevices=false
ProtectSystem=full ProtectSystem=full
CPUWeight=10
CPUQuota=10%
IOWeight=20
MemorySwapMax=0
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

4
systemd_units/walls-bot-2.service
View file

@ -15,6 +15,10 @@ TimeoutStopSec=5s
PrivateTmp=true PrivateTmp=true
PrivateDevices=false PrivateDevices=false
ProtectSystem=full ProtectSystem=full
CPUWeight=10
CPUQuota=10%
IOWeight=20
MemorySwapMax=0
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

4
systemd_units/walls-bot.service
View file

@ -15,6 +15,10 @@ TimeoutStopSec=5s
PrivateTmp=true PrivateTmp=true
PrivateDevices=false PrivateDevices=false
ProtectSystem=full ProtectSystem=full
CPUWeight=10
CPUQuota=10%
IOWeight=20
MemorySwapMax=0
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target