mirror of
https://github.com/turnstonelabs/turnstone.git
synced 2026-08-12 23:12:23 -06:00
Patrick Buckley
04b3a3abe4
Hardened service + slice + node-identity drop-in template + a README for running a turnstone-server outside Docker that joins the compose cluster — the production-shaped counterpart to the one-liner in docs/docker.md. Secrets stay in config.toml; per-host identity + cluster URLs go in the drop-in. The README notes the cross-host mTLS caveat (turnstonelabs/lacme#22).
16 lines
688 B
SYSTEMD
16 lines
688 B
SYSTEMD
# Shared resource budget for the colocated Turnstone units. Without a slice each
|
|
# unit's MemoryMax= is enforced independently — three units at 85% each can sum
|
|
# to 255% of host RAM before any throttles. Under a shared slice the cap is
|
|
# hierarchical: the slice ceiling is the real limit. (A bare-metal node that runs
|
|
# only turnstone-server still benefits — and keeps the unit's Slice= reference
|
|
# valid.) Adjust if the host runs other meaningful workloads alongside Turnstone.
|
|
[Unit]
|
|
Description=Turnstone services slice (server + console + channel)
|
|
Documentation=https://github.com/turnstonelabs/turnstone
|
|
Before=slices.target
|
|
|
|
[Slice]
|
|
MemoryHigh=70%
|
|
MemoryMax=85%
|
|
TasksMax=16384
|