hoftfix

Author: joshuamotoaki

.env.production.example

@@ -14,7 +14,16 @@ DATABASE_URL=
 REDIS_URL=redis://redis:6379/1
 REDIS_MAXMEMORY=128mb
 REDIS_MAXMEMORY_POLICY=allkeys-lru
+REDIS_MEM_LIMIT=192m
 
 # Optional runtime settings
 PYTHONUNBUFFERED=1
 CACHE_DEFAULT_TIMEOUT=300
+
+# Gunicorn / container tuning for low-resource EC2 instances
+GUNICORN_WORKERS=2
+GUNICORN_THREADS=2
+GUNICORN_TIMEOUT=600
+GUNICORN_MAX_REQUESTS=1000
+GUNICORN_MAX_REQUESTS_JITTER=100
+WEB_MEM_LIMIT=768m

.github/workflows/cd-ec2.yml

@@ -17,7 +17,8 @@ jobs:
   deploy:
     if: ${{ github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success' }}
     runs-on: ubuntu-latest
-    environment: production
+    environment:
+      name: production
 
     steps:
       - name: Validate required secrets

DEPLOYMENT.md

@@ -75,6 +75,27 @@ docker compose -f docker-compose.prod.yml ps
 
 App listens on `127.0.0.1:8000` on host (intentionally not public).
 
+### If EC2 is memory-constrained
+
+For small instances, tune `.env` before `docker compose up`:
+
+- `GUNICORN_WORKERS=2` (or `1` on very small instances)
+- `GUNICORN_THREADS=2`
+- `WEB_MEM_LIMIT=768m`
+- `REDIS_MAXMEMORY=128mb`
+- `REDIS_MEM_LIMIT=192m`
+
+Optional but recommended: add swap (example: 2 GB):
+
+```bash
+sudo fallocate -l 2G /swapfile || sudo dd if=/dev/zero of=/swapfile bs=1M count=2048
+sudo chmod 600 /swapfile
+sudo mkswap /swapfile
+sudo swapon /swapfile
+echo '/swapfile none swap sw 0 0' | sudo tee -a /etc/fstab
+free -h
+```
+
 ## 6. Configure Nginx Reverse Proxy
 
 Create `/etc/nginx/sites-available/tigerpath`:

Dockerfile

@@ -25,17 +25,21 @@ COPY frontend .
 EXPOSE 3000
 CMD ["bun", "run", "dev", "--host", "0.0.0.0"]
 
+# ---------- frontend build assets ----------
+FROM oven/bun:1.3.8 AS frontend-build
+WORKDIR /opt/tigerpath/frontend
+COPY frontend/package.json frontend/bun.lock ./
+RUN bun install --frozen-lockfile --ignore-scripts
+COPY frontend .
+RUN bun run build
+
 # ---------- production ----------
 FROM base AS production
 
-# Build frontend assets (requires bun)
-RUN apt-get update && apt-get install -y --no-install-recommends curl unzip \
-    && curl -fsSL https://bun.sh/install | bash \
-    && export PATH="$HOME/.bun/bin:$PATH" \
-    && cd frontend && bun install --frozen-lockfile && bun run build \
-    && apt-get purge -y curl unzip && apt-get autoremove -y && rm -rf /var/lib/apt/lists/*
+# Copy prebuilt frontend assets from dedicated Bun stage
+COPY --from=frontend-build /opt/tigerpath/assets/dist /opt/tigerpath/assets/dist
 
 RUN python manage.py collectstatic --noinput
 
 EXPOSE 8000
-CMD ["gunicorn", "config.wsgi:application", "-w", "4", "--bind", "0.0.0.0:8000", "--timeout", "600"]
+CMD ["gunicorn", "config.wsgi:application", "-w", "2", "--bind", "0.0.0.0:8000", "--timeout", "600"]

docker-compose.prod.yml

@@ -2,11 +2,12 @@ services:
   redis:
     image: redis:7-alpine
     restart: unless-stopped
+    mem_limit: ${REDIS_MEM_LIMIT:-192m}
     command:
       [
         "redis-server",
         "--maxmemory",
-        "${REDIS_MAXMEMORY:-256mb}",
+        "${REDIS_MAXMEMORY:-128mb}",
         "--maxmemory-policy",
         "${REDIS_MAXMEMORY_POLICY:-allkeys-lru}",
       ]
@@ -24,7 +25,9 @@ services:
       dockerfile: Dockerfile
       target: production
     restart: unless-stopped
-    command: gunicorn config.wsgi:application -w 4 --bind 0.0.0.0:8000 --timeout 600
+    init: true
+    mem_limit: ${WEB_MEM_LIMIT:-768m}
+    command: gunicorn config.wsgi:application --worker-class gthread --workers ${GUNICORN_WORKERS:-2} --threads ${GUNICORN_THREADS:-2} --bind 0.0.0.0:8000 --timeout ${GUNICORN_TIMEOUT:-600} --max-requests ${GUNICORN_MAX_REQUESTS:-1000} --max-requests-jitter ${GUNICORN_MAX_REQUESTS_JITTER:-100}
     ports:
       - "127.0.0.1:8000:8000"
     env_file: