Initial commit - realms platform

devops/forgejo-server/docker-compose.yml

@@ -24,6 +24,12 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
+    deploy:
+      resources:
+        limits:
+          memory: 256M
+        reservations:
+          memory: 128M
 
   # ---------------------------------------------------------------------------
   # Forgejo Git Server
@@ -105,6 +111,14 @@ services:
       timeout: 10s
       retries: 3
       start_period: 60s
+    security_opt:
+      - no-new-privileges:true
+    deploy:
+      resources:
+        limits:
+          memory: 384M
+        reservations:
+          memory: 192M
 
   # ---------------------------------------------------------------------------
   # Caddy Reverse Proxy
@@ -128,6 +142,14 @@ services:
       - forgejo-public
     environment:
       FORGEJO_DOMAIN: ${FORGEJO_DOMAIN}
+    security_opt:
+      - no-new-privileges:true
+    deploy:
+      resources:
+        limits:
+          memory: 64M
+        reservations:
+          memory: 32M
 
   # ---------------------------------------------------------------------------
   # Forgejo Actions Runner
@@ -161,6 +183,12 @@ services:
         fi
         forgejo-runner daemon --config /data/config.yaml
       '
+    deploy:
+      resources:
+        limits:
+          memory: 256M
+        reservations:
+          memory: 128M
 
   # ---------------------------------------------------------------------------
   # Docker-in-Docker for Runner
@@ -184,6 +212,8 @@ services:
       resources:
         limits:
           memory: 512M
+        reservations:
+          memory: 256M
 
 # =============================================================================
 # Networks