mirror of
https://github.com/NetworkCats/rustyip.git
synced 2026-11-13 16:17:46 +00:00
The firewall role's "Reload systemd" handler shadowed the docker role's handler of the same name, and its flush_handlers ran the pending Docker restart right after base lowered fs.nr_open, without a daemon-reload. Docker then started without its LimitNOFILE override and systemd could not apply the default limit (status=205/LIMITS). Reload systemd inline in the firewall role instead of through a handler, so other roles' handlers keep running at the end of the play, and reload before ensuring Docker is running so a host left in this state recovers on the next deploy. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>