Code Review
/
csit.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
review
|
tree
raw
|
inline
| side by side
Infra: Backend infra upgrade
[csit.git]
/
fdio.infra.ansible
/
roles
/
nomad
/
templates
/
nomad_systemd.service.j2
diff --git
a/fdio.infra.ansible/roles/nomad/templates/nomad_systemd.service.j2
b/fdio.infra.ansible/roles/nomad/templates/nomad_systemd.service.j2
index
2a87c65
..
61f07df
100644
(file)
--- a/
fdio.infra.ansible/roles/nomad/templates/nomad_systemd.service.j2
+++ b/
fdio.infra.ansible/roles/nomad/templates/nomad_systemd.service.j2
@@
-1,21
+1,28
@@
[Unit]
[Unit]
-Description=Nomad
Service
-Documentation=https://
www.
nomadproject.io/docs/
+Description=Nomad
+Documentation=https://nomadproject.io/docs/
Wants=network-online.target
After=network-online.target
Wants=network-online.target
After=network-online.target
+# When using Nomad with Consul it is not necessary to start Consul first. These
+# lines start Consul before Nomad as an optimization to avoid Nomad logging
+# that Consul is unavailable at startup.
+#Wants=consul.service
+#After=consul.service
+
[Service]
[Service]
-# TODO: Decrease privilege
-Exec
Reload=/bin/kill -SIGHUP $MAINPID
-ExecStart={{ nomad_bin_dir }}/nomad agent -config={{ nomad_config_dir }}
-KillSignal=SIG
TERM
+ExecReload=/bin/kill -HUP $MAINPID
+Exec
Start={{ nomad_bin_dir }}/nomad agent -config {{ nomad_config_dir }}
+KillMode=process
+KillSignal=SIG
INT
LimitNOFILE=infinity
LimitNPROC=infinity
Restart=on-failure
LimitNOFILE=infinity
LimitNPROC=infinity
Restart=on-failure
-RestartSec=1
-User=root
-Group=root
-Environment="GOMAXPROCS=2"
+RestartSec=2
+StartLimitBurst=3
+StartLimitInterval=10
+TasksMax=infinity
+OOMScoreAdjust=-1000
[Install]
[Install]
-WantedBy=multi-user.target
+WantedBy=multi-user.target
\ No newline at end of file