railiance-infra/ansible/inventory/host_vars/CoulombCore.yml
codex b93af8cc78
Some checks failed
CI Smoke / source-contract (push) Failing after 2s
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Implement reproducible S1 handoff contracts
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018
2026-08-23 12:02:23 +02:00

18 lines
649 B
YAML

# Host-specific variables for CoulombCore (92.205.130.254)
# k3s single-node cluster host — HostEurope
# Do not enable or rewrite UFW on this host. Live filter is iptables INPUT
# DROP with a Plesk-era accept list (UFW status: inactive). Enabling UFW
# here would take down 80/443 and the rest of the accepted surface unless
# every live accept is declared first. RAIL-HO-WP-0009-T03.
# Swapfile (T01)
swap_size_gb: 4
swap_swappiness: 10
# Resource limits (T02) — prevents runaway agents (see INC-002)
resource_limit_user: tegwick
resource_limit_uid: 1000
nproc_soft: 512
nproc_hard: 1024
user_memory_max: "1500M"
user_memory_swap_max: "512M"