Lukas
b631c1c546
Graceful shutdown ensures in-flight operations complete before process exits: - Lifespan shutdown handler drains pending tasks with 25s timeout - Scheduler stops accepting new jobs immediately - HTTP session, external logging, scheduler lock, DB conn closed cleanly - 25s Python timeout leaves 5s margin before Docker's 30s SIGKILL Files changed: - backend/app/main.py: enhanced _lifespan shutdown with task drain - Docker/Dockerfile.backend: documented signal handling in header - Docker/docker-compose.yml: added stop_grace_period: 30s - Docker/compose.prod.yml: added stop_grace_period: 30s - Docs/Deployment.md: new Graceful Shutdown section with sequence table - Docs/TROUBLESHOOTING.md: new Graceful Shutdown Issues section Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
97 lines
2.8 KiB
YAML
97 lines
2.8 KiB
YAML
version: '3.8'
|
|
services:
|
|
fail2ban:
|
|
image: lscr.io/linuxserver/fail2ban:latest
|
|
container_name: fail2ban
|
|
cap_add:
|
|
- NET_ADMIN
|
|
- NET_RAW
|
|
network_mode: host
|
|
environment:
|
|
- PUID=1011
|
|
- PGID=1001
|
|
- TZ=Etc/UTC
|
|
- VERBOSITY=-vv #optional
|
|
|
|
volumes:
|
|
- /server/server_fail2ban/config:/config
|
|
- /server/server_fail2ban/fail2ban-run:/var/run/fail2ban
|
|
- /var/log:/var/log
|
|
- /server/server_nextcloud/config/nextcloud.log:/remotelogs/nextcloud/nextcloud.log:ro #optional
|
|
- /server/server_nginx/data/logs:/remotelogs/nginx:ro #optional
|
|
- /server/server_gitea/log/gitea.log:/remotelogs/gitea/gitea.log:ro #optional
|
|
|
|
|
|
#- /path/to/homeassistant/log:/remotelogs/homeassistant:ro #optional
|
|
#- /path/to/unificontroller/log:/remotelogs/unificontroller:ro #optional
|
|
#- /path/to/vaultwarden/log:/remotelogs/vaultwarden:ro #optional
|
|
restart: unless-stopped
|
|
deploy:
|
|
limits:
|
|
cpus: '0.5'
|
|
memory: 128M
|
|
reservations:
|
|
cpus: '0.1'
|
|
memory: 64M
|
|
|
|
backend:
|
|
image: git.lpl-mind.de/lukas.pupkalipinski/bangui/backend:latest
|
|
container_name: bangui-backend
|
|
restart: unless-stopped
|
|
stop_grace_period: 30s
|
|
depends_on:
|
|
fail2ban:
|
|
condition: service_started
|
|
environment:
|
|
- PUID=1011
|
|
- PGID=1001
|
|
- BANGUI_DATABASE_PATH=/data/bangui.db
|
|
- BANGUI_FAIL2BAN_SOCKET=/var/run/fail2ban/fail2ban.sock
|
|
- BANGUI_FAIL2BAN_CONFIG_DIR=/config/fail2ban
|
|
- BANGUI_LOG_LEVEL=info
|
|
# ⚠️ BANGUI_WORKERS MUST be 1 — the session cache is process-local
|
|
# Multiple workers would cause random logouts and duplicate background jobs
|
|
- BANGUI_SESSION_SECRET=${BANGUI_SESSION_SECRET:?Set BANGUI_SESSION_SECRET}
|
|
- BANGUI_TIMEZONE=${BANGUI_TIMEZONE:-UTC}
|
|
volumes:
|
|
- /server/server_fail2ban/bangui-data:/data
|
|
- /server/server_fail2ban/fail2ban-run:/var/run/fail2ban:ro
|
|
- /server/server_fail2ban/config:/config:rw
|
|
expose:
|
|
- "8000"
|
|
networks:
|
|
- bangui-net
|
|
deploy:
|
|
limits:
|
|
cpus: '2'
|
|
memory: 512M
|
|
reservations:
|
|
cpus: '1'
|
|
memory: 256M
|
|
|
|
# ── Frontend (nginx serving built SPA + API proxy) ──────────
|
|
frontend:
|
|
image: git.lpl-mind.de/lukas.pupkalipinski/bangui/frontend:latest
|
|
container_name: bangui-frontend
|
|
restart: unless-stopped
|
|
environment:
|
|
- PUID=1011
|
|
- PGID=1001
|
|
ports:
|
|
- "${BANGUI_PORT:-8080}:80"
|
|
depends_on:
|
|
backend:
|
|
condition: service_started
|
|
networks:
|
|
- bangui-net
|
|
deploy:
|
|
limits:
|
|
cpus: '0.5'
|
|
memory: 128M
|
|
reservations:
|
|
cpus: '0.25'
|
|
memory: 64M
|
|
|
|
networks:
|
|
bangui-net:
|
|
name: bangui-net |