@stacksjs/ts-cloud 0.7.33 → 0.7.34

package/dist/{chunk-m0zayf6n.js → chunk-e6xhm3qe.js}

@@ -1011,6 +1011,8 @@ function buildRpxProvisionScript(options) {
   const poolEnv = [`Environment=RPX_UPSTREAM_TIMEOUT=${upstreamTimeout}`];
   if (typeof proxy.maxUpstreamConns === "number")
     poolEnv.push(`Environment=RPX_MAX_UPSTREAM_CONNS=${proxy.maxUpstreamConns}`);
+  const memoryHigh = proxy.memoryHigh ?? "512M";
+  const memoryMax = proxy.memoryMax ?? "768M";
   return [
     "set -euo pipefail",
     `mkdir -p ${RPX_DIR} ${RPX_SITES_DIR} ${certsDir} ${RPX_INSTALL_DIR}`,
@@ -1035,6 +1037,10 @@ function buildRpxProvisionScript(options) {
       `WorkingDirectory=${RPX_INSTALL_DIR}`,
       `Environment=BUN_INSTALL=/root/.bun`,
       ...poolEnv,
+      "MemoryAccounting=true",
+      `MemoryHigh=${memoryHigh}`,
+      `MemoryMax=${memoryMax}`,
+      "OOMPolicy=stop",
       "Restart=always",
       "RestartSec=5",
       "LimitNOFILE=1048576",
@@ -1476,7 +1482,8 @@ function buildUbuntuBootstrapScript(options = {}) {
     servicesProvision,
     caddyfile,
     rpxProvision,
-    baked = false
+    baked = false,
+    swapGb = 2
   } = options;
   const packages = new Set(systemPackages);
   if (database === "sqlite")
@@ -1488,6 +1495,25 @@ function buildUbuntuBootstrapScript(options = {}) {
   let script = `#!/bin/bash
 set -euo pipefail
 `;
+  const swapSizeGb = Math.floor(swapGb);
+  if (swapSizeGb > 0) {
+    script += `
+# Swap: a swapless box under memory pressure lets the kernel OOM killer choose
+# victims box-wide (the gateway, a tenant app, postgres). A modest swapfile
+# with low swappiness gives the kernel headroom without hurting responsiveness.
+if ! swapon --show=NAME --noheadings 2>/dev/null | grep -qx '/swapfile'; then
+  if [ ! -f /swapfile ]; then
+    fallocate -l ${swapSizeGb}G /swapfile || dd if=/dev/zero of=/swapfile bs=1M count=${swapSizeGb * 1024} status=none
+    chmod 600 /swapfile
+    mkswap /swapfile >/dev/null
+  fi
+  swapon /swapfile
+fi
+grep -qE '^/swapfile\\s' /etc/fstab || echo '/swapfile none swap sw 0 0' >> /etc/fstab
+echo 'vm.swappiness=10' > /etc/sysctl.d/99-ts-cloud-swap.conf
+sysctl -w vm.swappiness=10 >/dev/null
+`;
+  }
   if (!baked) {
     script += `
 export DEBIAN_FRONTEND=noninteractive
@@ -2466,7 +2492,8 @@ class HetznerDriver {
       phpProvision: provision.phpProvision,
       servicesProvision: provision.servicesProvision,
       rpxProvision,
-      baked
+      baked,
+      swapGb: compute.swapGb
     });
     const userData = wrapCloudInitUserData(bootstrap);
     const serverType = resolveHetznerServerType(compute.size);
@@ -2537,7 +2564,7 @@ class HetznerDriver {
       { direction: "in", protocol: "tcp", port: "7700", source_ips: [network.ip_range] }
     ]);
     const servicesProvision = buildFleetServicesBoxProvision(config);
-    const servicesUserData = wrapCloudInitUserData(buildUbuntuBootstrapScript({ runtime: "php", servicesProvision, baked }));
+    const servicesUserData = wrapCloudInitUserData(buildUbuntuBootstrapScript({ runtime: "php", servicesProvision, baked, swapGb: compute.swapGb }));
     const all = await this.client.listServers().catch(() => []);
     const newServerIds = [];
     let svcServer = all.find((s) => matchesTsCloudLabels(s.labels, slug, environment, "services"));
@@ -2573,7 +2600,7 @@ class HetznerDriver {
       optimizeForProduction: compute.php?.optimizeForProduction,
       ini: compute.php?.ini
     });
-    const appUserData = wrapCloudInitUserData(buildUbuntuBootstrapScript({ runtime: "php", phpProvision: appPhp, servicesProvision: appProvision, baked }));
+    const appUserData = wrapCloudInitUserData(buildUbuntuBootstrapScript({ runtime: "php", phpProvision: appPhp, servicesProvision: appProvision, baked, swapGb: compute.swapGb }));
     const existingApp = all.filter((s) => matchesTsCloudLabels(s.labels, slug, environment, "app"));
     const appServerIds = existingApp.map((s) => s.id);
     if (existingApp.length > topology.appServers) {
@@ -2707,7 +2734,7 @@ class HetznerDriver {
         { direction: "in", protocol: "tcp", port: "7700", source_ips: [network.ip_range] }
       ]);
       const servicesProvision = buildFleetServicesBoxProvision(config);
-      const servicesUserData = wrapCloudInitUserData(buildUbuntuBootstrapScript({ runtime: "bun", servicesProvision, baked }));
+      const servicesUserData = wrapCloudInitUserData(buildUbuntuBootstrapScript({ runtime: "bun", servicesProvision, baked, swapGb: compute.swapGb }));
       let svcServer = all.find((s) => matchesTsCloudLabels(s.labels, slug, environment, "services"));
       if (!svcServer) {
         const { server, action } = await this.client.createServer({
@@ -2739,7 +2766,8 @@ class HetznerDriver {
       systemPackages: compute.systemPackages,
       database: config.infrastructure?.database,
       servicesProvision: appProvisionScripts.servicesProvision,
-      baked
+      baked,
+      swapGb: compute.swapGb
     }));
     const existingApp = all.filter((s) => matchesTsCloudLabels(s.labels, slug, environment, "app"));
     const appServerIds = existingApp.map((s) => s.id);

package/dist/{chunk-1nfkggdw.js → chunk-jvp3s3na.js}

@@ -29,7 +29,7 @@ import {
   resolveSiteKind,
   resolveUiSource,
   siteInstallBase
-} from "./chunk-m0zayf6n.js";
+} from "./chunk-e6xhm3qe.js";
 import {
   artifactKey,
   composeServerlessAppTemplate,

package/dist/deploy/index.js

@@ -12,7 +12,7 @@ import {
   sanitizeCloudConfig,
   setMaintenance,
   startLocalDashboardServer
-} from "../chunk-1nfkggdw.js";
+} from "../chunk-jvp3s3na.js";
 import {
   buildAndPushServerlessImage
 } from "../chunk-tskj9fay.js";
@@ -30,7 +30,7 @@ import {
   resolveUiSource,
   siteInstallBase,
   validateDeploymentConfig
-} from "../chunk-m0zayf6n.js";
+} from "../chunk-e6xhm3qe.js";
 import"../chunk-stt1z5cx.js";
 import"../chunk-93hjhs78.js";
 import {

package/dist/drivers/index.js

@@ -50,7 +50,7 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "../chunk-m0zayf6n.js";
+} from "../chunk-e6xhm3qe.js";
 import"../chunk-stt1z5cx.js";
 import"../chunk-93hjhs78.js";
 import"../chunk-qpj3edwz.js";

package/dist/drivers/shared/ubuntu-bootstrap.d.ts

@@ -47,6 +47,16 @@ export interface UbuntuBootstrapOptions {
      * boot near-instant. @default false
      */
     baked?: boolean;
+    /**
+     * Swapfile size in GB, from `compute.swapGb`. Small shared boxes run several
+     * tenants + services with no swap at all, so a memory spike (deploy, bun
+     * install, on-box builds) leaves the kernel OOM killer picking victims
+     * box-wide. Provisioned at the very top of the bootstrap — BEFORE the
+     * memory-hungry installs — on cold and baked boots alike (a golden image
+     * deliberately bakes no swap; see the image recipe). Idempotent: skipped
+     * when `/swapfile` is already active. `0` disables. @default 2
+     */
+    swapGb?: number;
 }
 /**
  * Build the Ubuntu provisioning bash script (with `#!/bin/bash` shebang).

package/dist/index.js

@@ -55,7 +55,7 @@ import {
   sanitizeCloudConfig,
   setMaintenance,
   startLocalDashboardServer
-} from "./chunk-1nfkggdw.js";
+} from "./chunk-jvp3s3na.js";
 import {
   buildAndPushServerlessImage
 } from "./chunk-tskj9fay.js";
@@ -105,7 +105,7 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "./chunk-m0zayf6n.js";
+} from "./chunk-e6xhm3qe.js";
 import {
   ABTestManager,
   AI,