Add memory limits

Author: macropin

d-sshd.service

@@ -10,7 +10,14 @@ RestartSec=10
 ExecStartPre=/usr/bin/touch /mnt/data/%p/environment
 ExecStartPre=-/usr/bin/docker kill %p
 ExecStartPre=-/usr/bin/docker rm %p
-ExecStart=/usr/bin/docker run --rm --env-file=/mnt/data/%p/environment -v /mnt/data/%p/etc:/etc/ssh:rw -v /mnt/data/secrets/authorized_keys.%p:/root/.ssh/authorized_keys:ro -v /mnt/data:/mnt/data:rw -p ${SSH_PORT}:22 --name %p quay.io/macropin/sshd
+ExecStart=/usr/bin/docker run --rm \
+  -m 128M --memory-swap 128M \
+  --env-file=/mnt/data/%p/environment \
+  -v /mnt/data/%p/etc:/etc/ssh:rw \
+  -v /mnt/data/secrets/authorized_keys.%p:/root/.ssh/authorized_keys:ro \
+  -v /mnt/data:/mnt/data:rw \
+  -p ${SSH_PORT}:22 \
+  --name %p quay.io/macropin/sshd
 ExecStop=/usr/bin/docker stop -t 2 %p
 
 [Install]

mailserver.service

@@ -15,7 +15,17 @@ ExecStartPre=/usr/bin/chown 0:12 /mnt/data/%p/var/spool/mail
 ExecStartPre=/usr/bin/chmod 775 /mnt/data/%p/var/spool/mail
 ExecStartPre=-/usr/bin/docker kill %p
 ExecStartPre=-/usr/bin/docker rm %p
-ExecStart=/usr/bin/docker run --rm --env-file=/mnt/data/%p/environment -p 25:25 -p 465:465 -p 587:587 -p 993:993 -p 995:995 --name %p --link mariadb:mariadb -v /mnt/data/%p/var/vmail:/var/vmail -v /mnt/data/%p/var/spool/mail:/var/spool/mail -v /mnt/data/secrets/rapidssl.crt:/etc/pki/tls/certs/ca.crt -v /mnt/data/secrets/${MAILNAME}.crt:/etc/pki/tls/certs/${MAILNAME}.crt -v /mnt/data/secrets/${MAILNAME}.key:/etc/pki/tls/private/${MAILNAME}.key panubo/mailserver
+ExecStart=/usr/bin/docker run --rm \
+  -m 768M --memory-swap 768M \
+  --env-file=/mnt/data/%p/environment \
+  -p 25:25 -p 465:465 -p 587:587 -p 993:993 -p 995:995 \
+  --name %p --link mariadb:mariadb \
+  -v /mnt/data/%p/var/vmail:/var/vmail \
+  -v /mnt/data/%p/var/spool/mail:/var/spool/mail \
+  -v /mnt/data/secrets/rapidssl.crt:/etc/pki/tls/certs/ca.crt \
+  -v /mnt/data/secrets/${MAILNAME}.crt:/etc/pki/tls/certs/${MAILNAME}.crt \
+  -v /mnt/data/secrets/${MAILNAME}.key:/etc/pki/tls/private/${MAILNAME}.key \
+  panubo/mailserver
 ExecStop=/usr/bin/docker stop -t 10 %p
 
 [Install]

mariadb.service

@@ -11,7 +11,12 @@ ExecStartPre=/usr/bin/touch /mnt/data/%p/environment
 ExecStartPre=/usr/bin/chown 999:999 /mnt/data/%p/mysql
 ExecStartPre=-/usr/bin/docker kill %p
 ExecStartPre=-/usr/bin/docker rm %p
-ExecStart=/usr/bin/docker run --rm --name %p --env-file=/mnt/data/%p/environment -v /mnt/data/%p/mysql:/var/lib/mysql mariadb:10.0
+ExecStart=/usr/bin/docker run --rm \
+  -m 128M --memory-swap 128M \
+  --name %p \
+  --env-file=/mnt/data/%p/environment \
+  -v /mnt/data/%p/mysql:/var/lib/mysql \
+  mariadb:10.0
 ExecStop=/usr/bin/docker stop -t 2 %p
 
 [Install]

roundcube.service

@@ -9,7 +9,15 @@ Restart=on-failure
 RestartSec=10
 ExecStartPre=-/usr/bin/docker kill %p
 ExecStartPre=-/usr/bin/docker rm %p
-ExecStart=/usr/bin/docker run --rm --env-file=/mnt/data/%p/environment -v /mnt/data/secrets/${SERVER_NAME}.key:/etc/ssl/private/${SERVER_NAME}.key:ro -v /mnt/data/secrets/${SERVER_NAME}.crt:/etc/ssl/certs/${SERVER_NAME}.crt:ro -v /mnt/data/secrets/ca.crt:/etc/ssl/certs/ca.crt:ro -p 80:80 -p 443:443 --name %p --link mariadb --link mailserver macropin/roundcube
+ExecStart=/usr/bin/docker run --rm \
+  -m 128M --memory-swap 128M \
+  --env-file=/mnt/data/%p/environment \
+  -v /mnt/data/secrets/${SERVER_NAME}.key:/etc/ssl/private/${SERVER_NAME}.key:ro \
+  -v /mnt/data/secrets/${SERVER_NAME}.crt:/etc/ssl/certs/${SERVER_NAME}.crt:ro \
+  -v /mnt/data/secrets/ca.crt:/etc/ssl/certs/ca.crt:ro \
+  -p 80:80 -p 443:443 \
+  --name %p --link mariadb --link mailserver \
+  macropin/roundcube
 ExecStop=/usr/bin/docker stop -t 2 %p
 
 [Install]