diff --git a/configs/sysctl-backend.conf b/configs/sysctl-backend.conf new file mode 100644 index 00000000..50ca3f42 --- /dev/null +++ b/configs/sysctl-backend.conf @@ -0,0 +1,7 @@ +net.ipv6.conf.all.disable_ipv6 = 1 + +# Increase system file descriptor limit +fs.file-max = 65535 + +# Increase system IP port limits +net.ipv4.ip_local_port_range = 2000 65000 diff --git a/configs/sysctl-frontend.conf b/configs/sysctl-frontend.conf new file mode 100644 index 00000000..8c07035a --- /dev/null +++ b/configs/sysctl-frontend.conf @@ -0,0 +1,8 @@ +net.ipv4.ip_forward = 1 +net.ipv6.conf.all.disable_ipv6 = 1 + +# Increase system file descriptor limit +fs.file-max = 65535 + +# Increase system IP port limits +net.ipv4.ip_local_port_range = 2000 65000 diff --git a/fickit-backend.yml b/fickit-backend.yml index 45eb8b74..07102980 100644 --- a/fickit-backend.yml +++ b/fickit-backend.yml @@ -15,9 +15,10 @@ onboot: image: linuxkit/modprobe:v0.6 command: ["/bin/sh", "-c", "modprobe e1000e"] -# - name: sysctl -# image: linuxkit/sysctl:v0.6 -# command: ["/usr/bin/sysctl", "-w", "net.ipv6.conf.all.disable_ipv6=1"] + - name: sysctl + image: linuxkit/sysctl:v0.6 + binds: + - /etc/sysctl.d/01-fic.conf:/etc/sysctl.d/01-fic.conf:ro # Filesystem - name: swap @@ -242,6 +243,10 @@ services: uts: new files: + - path: etc/sysctl.d/01-fic.conf + source: configs/sysctl-backend.conf + mode: "0444" + - path: root/synchro.sh source: configs/synchro.sh mode: "0755" diff --git a/fickit-frontend.yml b/fickit-frontend.yml index 80910d6d..19e8fa50 100644 --- a/fickit-frontend.yml +++ b/fickit-frontend.yml @@ -15,8 +15,10 @@ onboot: image: linuxkit/modprobe:v0.6 command: ["/bin/sh", "-c", "modprobe r8169;"] -# - name: sysctl -# image: linuxkit/sysctl:v0.6 + - name: sysctl + image: linuxkit/sysctl:v0.6 + binds: + - /etc/sysctl.d/01-fic.conf:/etc/sysctl.d/01-fic.conf:ro # Filesystem - name: swap @@ -204,6 +206,10 @@ services: files: + - path: etc/sysctl.d/01-fic.conf + source: configs/sysctl-frontend.conf + mode: "0444" + - path: etc/nginx/ssl/dhparams-4096.pem source: configs/dhparams-4096.pem mode: "0444"