From 70ea5bd6919e38104fda4a7951aa0715ebf2cc1d Mon Sep 17 00:00:00 2001 From: Prageeth Panicker Date: Fri, 9 Oct 2026 08:18:07 +0000 Subject: [PATCH] refactor(web-app-wazuh): map the nofile limits over services.yml The manager and indexer nofile limits now live next to their other resource settings in services.yml and the compose template reads them from there, as requested in review. The values are unchanged. --- roles/web-app-wazuh/meta/services.yml | 2 ++ roles/web-app-wazuh/templates/compose.yml.j2 | 8 ++++---- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/roles/web-app-wazuh/meta/services.yml b/roles/web-app-wazuh/meta/services.yml index 10714e7859..99d5bb9312 100644 --- a/roles/web-app-wazuh/meta/services.yml +++ b/roles/web-app-wazuh/meta/services.yml @@ -76,6 +76,7 @@ manager: mem_reservation: 512m mem_limit: 2g pids_limit: 1024 + nofile: 655360 backup: no_stop_required: false ports: @@ -105,6 +106,7 @@ indexer: mem_reservation: 1g mem_limit: 2g pids_limit: 2048 + nofile: 65536 backup: no_stop_required: false ports: diff --git a/roles/web-app-wazuh/templates/compose.yml.j2 b/roles/web-app-wazuh/templates/compose.yml.j2 index 785df6a0bc..9651216426 100644 --- a/roles/web-app-wazuh/templates/compose.yml.j2 +++ b/roles/web-app-wazuh/templates/compose.yml.j2 @@ -25,8 +25,8 @@ hostname: "{{ WAZUH_MANAGER_CONTAINER }}" ulimits: nofile: - soft: 655360 - hard: 655360 + soft: {{ lookup('config', application_id, 'services.manager.nofile') }} + hard: {{ lookup('config', application_id, 'services.manager.nofile') }} {{ lookup('container_volumes', service_name) | indent(4) }} {{ lookup('container_networks') | indent(4) }} {{ lookup('container_depends_on', application_id, extra=certs_generator_dependency) | indent(4) }} @@ -45,8 +45,8 @@ - "OPENSEARCH_JAVA_OPTS=-Xms{{ WAZUH_INDEXER_HEAP }} -Xmx{{ WAZUH_INDEXER_HEAP }}" ulimits: nofile: - soft: 65536 - hard: 65536 + soft: {{ lookup('config', application_id, 'services.indexer.nofile') }} + hard: {{ lookup('config', application_id, 'services.indexer.nofile') }} {{ lookup('container_volumes', service_name) | indent(4) }} {{ lookup('container_networks') | indent(4) }} {{ lookup('container_depends_on', application_id, extra=certs_generator_dependency) | indent(4) }}