From 5bd296ab6ceb49da226c36c73a506e5ef31410b0 Mon Sep 17 00:00:00 2001
From: Max <max@privatevoid.net>
Date: Wed, 5 Jun 2024 01:20:24 +0200
Subject: [PATCH] cluster/services/dns: heavily limit cpu and memory

---
 cluster/services/dns/authoritative.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/cluster/services/dns/authoritative.nix b/cluster/services/dns/authoritative.nix
index deebe73..8ac345a 100644
--- a/cluster/services/dns/authoritative.nix
+++ b/cluster/services/dns/authoritative.nix
@@ -106,6 +106,11 @@ in {
 
   systemd.services.coredns = {
     after = [ "acme-dns.service" ];
+    serviceConfig = {
+      MemoryMax = "200M";
+      MemorySwapMax = "50M";
+      CPUQuota = "25%";
+    };
   };
 
   consul.services = {