From 3b0a1ac931d51dffd3b864bd8697a45cde2f6fcd Mon Sep 17 00:00:00 2001
From: DKing <15340687+DKingAlpha@users.noreply.github.com>
Date: Mon, 4 Dec 2023 01:52:06 +0800
Subject: [PATCH] root: fix 100% CPU for worker container (#7025)

Some linux users (arch linux, for example) are running docker with default service file that set NOFILES to infiite, which will cause celery to hang for hours to days taking 100% CPU to close all fds by enumerating from NOFILES to 3.

This commit override ulimit for container without touching user docker service configuration.

Signed-off-by: DKing <15340687+DKingAlpha@users.noreply.github.com>
---
 docker-compose.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docker-compose.yml b/docker-compose.yml
index 68e7530e7..df161ef2b 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -56,6 +56,10 @@ services:
     image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2023.10.4}
     restart: unless-stopped
     command: worker
+    ulimits:
+      nofile:
+        soft: 10240
+        hard: 10240
     environment:
       AUTHENTIK_REDIS__HOST: redis
       AUTHENTIK_POSTGRESQL__HOST: postgresql