docs: Avoid memory bloat in some misconfigured versions of Docker/containerd Hosts (e.g. on Debian 13)

entrypoint.sh

@@ -1,8 +1,15 @@
-#!/usr/bin/env sh
+#!/usr/bin/env dash
 set -e
 
 : "${DATABASE_HOST:="127.0.0.1"}"
 : "${DATABASE_PORT:=5432}"
+: "${ULIMIT_MAX_NOFILE:=65536}"
+
+# prevent memory bloat in some misconfigured versions of Docker/containerd
+# where the nofiles limit is very large. 0 means don't set it.
+if test "${ULIMIT_MAX_NOFILE}" != 0 && test "$(ulimit -n)" -gt "${ULIMIT_MAX_NOFILE}"; then
+	ulimit -n "${ULIMIT_MAX_NOFILE}"
+fi
 
 # wait until Postgres is ready
 while ! nc -z "${DATABASE_HOST}" "${DATABASE_PORT}" 2>/dev/null; do

website/docs/advanced_guides/apache.md

@@ -48,6 +48,8 @@ services:
       - 127.0.0.1:4000:4000
     cap_drop:
       - all
+    ulimits:
+      nofile: 65536
 
   database:
     image: postgres:17

website/docs/advanced_guides/traefik.md

@@ -58,6 +58,8 @@ services:
       traefik.http.routers.teslamate.tls.certresolver: "tmhttpchallenge"
     cap_drop:
       - ALL
+    ulimits:
+      nofile: 65536
 
   database:
     image: postgres:17

website/docs/installation/docker.md

@@ -38,6 +38,8 @@ Alternatively, you can use a reverse proxy (such as Traefik, Apache2 or Caddy) w
          - ./import:/opt/app/import
        cap_drop:
          - all
+       ulimits:
+         nofile: 65536
 
      database:
        image: postgres:17-trixie