Kevin Veen-Birkenbach 6a8e0f38d8 fix(web-svc-collabora): add required Docker capabilities and resource limits for Collabora Jails ...

- Added security_opt (seccomp=unconfined, apparmor=unconfined) and cap_add (MKNOD, SYS_CHROOT, SETUID, SETGID, FOWNER)
  to allow Collabora's sandbox (coolmount/systemplate) to mount and chroot properly
- Increased resource limits (2 CPUs, 2 GB RAM, 2048 PIDs) to prevent document timeout and OOM issues
- Resolves 'coolmount: Operation not permitted' and systemplate performance warnings

Refs: https://chatgpt.com/share/68ed03cd-1afc-800f-904e-d1c1cb133914

2025-10-13 15:52:50 +02:00

..

docker-compose.yml.j2

fix(web-svc-collabora): add required Docker capabilities and resource limits for Collabora Jails

2025-10-13 15:52:50 +02:00

env.j2

…

nginx.conf.j2

Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task.

2025-09-30 17:22:28 +02:00