refactor(web-app-wazuh): map the nofile limits over services.yml

The manager and indexer nofile limits now live next to their other resource settings in services.yml and the compose template reads them from there, as requested in review. The values are unchanged.

roles/web-app-wazuh/meta/services.yml

@@ -76,6 +76,7 @@ manager:
   mem_reservation: 512m
   mem_limit: 2g
   pids_limit: 1024
+  nofile: 655360
   backup:
     no_stop_required: false
   ports:
@@ -105,6 +106,7 @@ indexer:
   mem_reservation: 1g
   mem_limit: 2g
   pids_limit: 2048
+  nofile: 65536
   backup:
     no_stop_required: false
   ports:

roles/web-app-wazuh/templates/compose.yml.j2

@@ -25,8 +25,8 @@
     hostname: "{{ WAZUH_MANAGER_CONTAINER }}"
     ulimits:
       nofile:
-        soft: 655360
-        hard: 655360
+        soft: {{ lookup('config', application_id, 'services.manager.nofile') }}
+        hard: {{ lookup('config', application_id, 'services.manager.nofile') }}
     {{ lookup('container_volumes', service_name) | indent(4) }}
     {{ lookup('container_networks') | indent(4) }}
     {{ lookup('container_depends_on', application_id, extra=certs_generator_dependency) | indent(4) }}
@@ -45,8 +45,8 @@
       - "OPENSEARCH_JAVA_OPTS=-Xms{{ WAZUH_INDEXER_HEAP }} -Xmx{{ WAZUH_INDEXER_HEAP }}"
     ulimits:
       nofile:
-        soft: 65536
-        hard: 65536
+        soft: {{ lookup('config', application_id, 'services.indexer.nofile') }}
+        hard: {{ lookup('config', application_id, 'services.indexer.nofile') }}
     {{ lookup('container_volumes', service_name) | indent(4) }}
     {{ lookup('container_networks') | indent(4) }}
     {{ lookup('container_depends_on', application_id, extra=certs_generator_dependency) | indent(4) }}