CHANGELOG++

CHANGELOG.md

@@ -1,6 +1,7 @@
 ## v1.9.2
 
 - Nomad v0.10.1
+- Production hardening of systemd unit (thanks @bdossantos)
 - Update documentation
 
 ## v1.9.1

CONTRIBUTORS.md

@@ -21,3 +21,4 @@ Thank you to all these fine folk for helping with ansible-nomad!
 - [@pxsloot](https://github.com/pxsloot)
 - [@rbjorklin](https://github.com/rbjorklin)
 - [@camskkz](https://github.com/camskkz)
+- [@bdossantos](https://github.com/bdossantos)

tasks/main.yml

@@ -119,6 +119,21 @@
     mode: 0755
   when: not ansible_service_mgr == "systemd" and ansible_os_family == "Debian"
 
+- name: extract systemd version
+  shell: |
+    set -o pipefail
+    systemctl --version systemd | head -n 1 | cut -d' ' -f2
+  args:
+    executable: /bin/bash
+  changed_when: false
+  check_mode: false
+  register: systemd_version
+  when:
+    - ansible_service_mgr == "systemd"
+    - not ansible_os_family == "FreeBSD"
+    - not ansible_os_family == "Solaris"
+  tags: skip_ansible_lint
+
 - name: systemd script
   template:
     src: nomad_systemd.service.j2

templates/nomad_systemd.service.j2

@@ -10,6 +10,7 @@
 
 [Unit]
 Description=nomad agent
+Documentation=https://nomadproject.io/docs/
 Wants=basic.target
 After=basic.target network.target
 
@@ -20,8 +21,16 @@ ExecStart={{ nomad_bin_dir }}/nomad agent -config={{ nomad_config_dir }}
 
 ExecReload=/bin/kill -HUP $MAINPID
 KillMode=process
+KillSignal=SIGINT
+LimitNOFILE=infinity
+LimitNPROC=infinity
 Restart=on-failure
 RestartSec=42s
+StartLimitBurst=3
+StartLimitIntervalSec=10
+{% if systemd_version.stdout is version('226', '>=') %}
+TasksMax=infinity
+{% endif %}
 
 [Install]
 WantedBy=multi-user.target