mikl/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

tuwunel v1.9.3 (DB migrated, verified); teable mem_limit 2g; nick-timer systemd service + caddy vhost; heather swap 4g, drop chromium, add diag tools; server.nix: drop pinchtab, add nodejs

Browse source
This commit is contained in:
heather 2026-09-25 22:57:23 +00:00
commit 4cfd8d3ac3
5 changed files with 65 additions and 29 deletions
Download patch file Download diff file Expand all files Collapse all files

8
hosts/heather/arion-compose.nix
View file

@ -172,7 +172,7 @@ in
# /var/lib/tuwunel-secrets/tuwunel.toml (root:docker 0640, bind-mount ro)
# Cinny config: /var/lib/tuwunel-secrets/cinny-config.json (bind-mount ro).
tuwunel = {
service.image = "ghcr.io/matrix-construct/tuwunel:v1.7.1";
service.image = "ghcr.io/matrix-construct/tuwunel:v1.9.3";
service.container_name = "tuwunel";
service.restart = "unless-stopped";
service.volumes = [
@ -231,6 +231,12 @@ in
service.image = "teableio/teable@sha256:04c0c041c79564de7c06fc005d5560f9553161557a776caf1ed36c9c38ea8600";
service.container_name = "teable";
service.restart = "unless-stopped";
# Teable previously had no cgroup limit and helped trigger the host-wide
# OOM on 2026-09-24. Keep its startup/runtime spike from taking down
# SSH, Caddy, and the rest of the server.
# Arion 0.2.2 does not expose mem_limit as a typed option; use its
# raw output escape hatch so docker-compose gets the cgroup limit.
out.service.mem_limit = "2g";
service.ports = [ "127.0.0.1:2345:3000" ];
service.volumes = [
"teable-data:/app/.local-storage"