Files
computer-playbook/roles/web-app-zammad/meta/variants.yml
kevinveenbirkenbachandClaude Opus 5.5 e0a05051b0 fix(web-app-zammad): size Elasticsearch disk watermarks to the disk and cap them in CI and dev
The bundled Elasticsearch ran with its default watermarks. On a large
disk the high watermark's max_headroom demands 150 GB free, so a 1.8 TB
development host with about 56 to 112 GB free assigned no shard,
zammad-init never finished and the compose-up handler timed out after
1800 seconds (#850).

meta/services.yml declares the watermarks on the search service under
search.watermark: 85 / 90 / 95 % of the disk with max_headroom caps of
200 / 150 / 100 GB, which are Elasticsearch's own defaults, so a
production inventory keeps today's behaviour. Every entry in
meta/variants.yml lowers only the caps to 10 / 5 / 2 GB. Variants reach
development and CI inventories, and a production inventory only when
inventory provision is called with --app-variants;
utils/cache/applications.py
deep-merges them onto the base config, so low, high and flood_stage stay
on the base values. compose.yml.j2 passes all six settings to the
container through ZAMMAD_SEARCH_WATERMARK.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
2026-10-17 16:26:00 +02:00

165 lines
4.2 KiB
YAML

---
# Matrix-deploy variant overrides for web-app-zammad.
# See docs/contributing/artefact/files/role/variants.md for the file format.
# V1: oidc + ldap + everything that can be true, is true
- services:
container_backup:
enabled: true
css:
enabled: true
shared: true
dashboard:
enabled: true
shared: true
email:
enabled: true
shared: true
ldap:
enabled: true
shared: true
logout:
enabled: true
shared: true
matomo:
enabled: true
shared: true
memcached:
shared: true
sso:
enabled: true
shared: true
postgres:
shared: true
prometheus:
enabled: true
shared: true
redis:
shared: true
search:
watermark:
max_headroom:
low: 10gb
high: 5gb
flood_stage: 2gb
litellm:
enabled: false
tor:
enabled: true
openwebui:
enabled: false
shared: false
hermes:
enabled: false
shared: false
openclaw:
enabled: false
shared: false
- services:
container_backup:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
css:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
dashboard:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
email:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
ldap:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
logout:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matomo:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
memcached:
shared: false # nocheck: variants-static-override backup shared stays literally true
sso:
enabled: true
shared: true
postgres:
shared: false # nocheck: variants-static-override backup shared stays literally true
prometheus:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
redis:
shared: false # nocheck: variants-static-override backup shared stays literally true
search:
watermark:
max_headroom:
low: 10gb
high: 5gb
flood_stage: 2gb
litellm:
enabled: false
tor:
enabled: true
openwebui:
enabled: true
shared: true
hermes:
enabled: true
shared: true
openclaw:
enabled: true
shared: true
- services:
container_backup:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
css:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
dashboard:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
email:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
ldap:
enabled: true
shared: true
litellm:
enabled: true
logout:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
matomo:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
memcached:
shared: true
sso:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
postgres:
shared: true
prometheus:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
redis:
shared: true
search:
watermark:
max_headroom:
low: 10gb
high: 5gb
flood_stage: 2gb
tor:
enabled: true
openwebui:
enabled: false
shared: false
hermes:
enabled: false
shared: false
openclaw:
enabled: false
shared: false