put backend containerfile in backend folder + add sidecar to limit network

Author: iTrooz

.github/workflows/ci.yml

@@ -62,7 +62,7 @@ jobs:
       if: github.event.repository.fork == false && github.ref_name == 'main'
       with:
         context: .
-        file: backend.Containerfile
+        file: backend/backend.Containerfile
         push: true
         cache-from: type=gha
         cache-to: type=gha,mode=max

backend.Containerfile backend/backend.Containerfilebackend.Containerfile renamed to backend/backend.Containerfile

@@ -1,6 +1,10 @@
-FROM oven/bun:1 AS base
+# Context is ..
+FROM oven/bun:1-debian AS base
 WORKDIR /src
 
+# Install tc for traffic control
+RUN apt-get update && apt-get install -y iproute2 && rm -rf /var/lib/apt/lists/*
+
 # Install deps
 COPY package.json bun.lock ./
 COPY backend/package.json backend/package.json
@@ -18,4 +22,5 @@ WORKDIR /src/backend
 ENV NODE_ENV=production
 EXPOSE 3000
 USER bun
+
 CMD ["bun", "run", "start:prod"]

backend/compose.yaml

@@ -0,0 +1,32 @@
+services:
+  app:
+    container_name: modpackcreator-backend
+    image: ghcr.io/itrooz/modpackcreator/backend:latest
+    build:
+      context: ..
+      dockerfile: backend/backend.Containerfile
+    ports:
+      - "3000:3000"
+    restart: unless-stopped
+    deploy:
+      resources:
+        limits:
+          cpus: '0.50'
+          memory: 512M
+        reservations:
+          cpus: '0.10'
+          memory: 128M
+
+  sidecar:
+    image: none.local/anythingispwa-sidecar:latest
+    pull_policy: never
+    build:
+      context: .
+      dockerfile: sidecar.Dockerfile
+    environment:
+      - TC_RATE=500kbit
+      - TC_BURST=500kbit
+      - TC_LATENCY=400ms
+    network_mode: service:app
+    cap_add:
+      - NET_ADMIN

backend/sidecar.Dockerfile

@@ -0,0 +1,5 @@
+FROM alpine:latest
+
+RUN apk add --no-cache iproute2
+
+CMD ["/bin/sh", "-xc", "tc qdisc del dev eth0 root || true; tc qdisc add dev eth0 root tbf rate $TC_RATE burst $TC_BURST latency $TC_LATENCY"]