From d1a3c094d7d9ebe5f23710d2500462db4f11a8cf Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Mon, 15 Jun 2026 22:01:03 +0100 Subject: [PATCH] Apply memory limits to rails taks runners --- cookbooks/dev/recipes/default.rb | 2 ++ cookbooks/web/recipes/rails.rb | 2 ++ 2 files changed, 4 insertions(+) diff --git a/cookbooks/dev/recipes/default.rb b/cookbooks/dev/recipes/default.rb index 4ff54a1df..15c1aad9e 100644 --- a/cookbooks/dev/recipes/default.rb +++ b/cookbooks/dev/recipes/default.rb @@ -329,6 +329,8 @@ if node[:postgresql][:clusters][rails_cluster.to_sym] working_directory "/srv/%i.apis.dev.openstreetmap.org/rails" exec_start "#{node[:ruby][:bundle]} exec rails jobs:work" restart "on-failure" + memory_high "2G" + memory_max "3G" nice 10 sandbox :enable_network => true restrict_address_families "AF_UNIX" diff --git a/cookbooks/web/recipes/rails.rb b/cookbooks/web/recipes/rails.rb index fa334a8be..2d94d4316 100644 --- a/cookbooks/web/recipes/rails.rb +++ b/cookbooks/web/recipes/rails.rb @@ -192,6 +192,8 @@ systemd_service "rails-jobs@" do working_directory rails_directory exec_start "#{node[:ruby][:bundle]} exec rails jobs:work" restart "on-failure" + memory_high "2G" + memory_max "3G" nice 10 sandbox :enable_network => true memory_deny_write_execute false -- 2.47.3