Реализация на отдельных двух машинах с протестированным взаимодействием по проверке сообщений

VM1_app/codebase/backend/redis/docker-compose.yml

@@ -1,14 +1,11 @@
 services:
   redis:
-    build:
-      context: .
-    image: han-chat-redis:${RELEASE_VERSION:-local}
+    image: ${REDIS_IMAGE:?REDIS_IMAGE must be pinned by digest}
     environment:
       REDIS_MAXMEMORY: ${REDIS_MAXMEMORY:-384mb}
       REDIS_EVICTION_POLICY: ${REDIS_EVICTION_POLICY:-volatile-lru}
     secrets:
       - redis_api_password
-      - redis_safety_password
       - redis_health_password
     expose: ["6379"]
     volumes:
@@ -27,7 +24,9 @@ services:
       - /tmp:size=8m,mode=1777
     security_opt: ["no-new-privileges:true"]
     cap_drop: ["ALL"]
+    pids_limit: 128
     mem_limit: 512m
+    cpus: 0.5
     ulimits:
       core: {soft: 0, hard: 0}
       nofile: {soft: 65536, hard: 65536}
@@ -38,7 +37,5 @@ services:
 secrets:
   redis_api_password:
     file: ${HAN_SECRETS_DIR:-/run/han-chat/secrets}/REDIS_API_PASSWORD
-  redis_safety_password:
-    file: ${HAN_SECRETS_DIR:-/run/han-chat/secrets}/REDIS_SAFETY_PASSWORD
   redis_health_password:
     file: ${HAN_SECRETS_DIR:-/run/han-chat/secrets}/REDIS_HEALTH_PASSWORD