# syncthing ~~ roles/syncthing/tasks/_openbsd.yml

---

- name: ensure sysctl configuration file exists
  file:
    path: /etc/sysctl.conf
    owner: "0"
    group: "0"
    mode: "0644"
    state: touch

- name: ensure sysctl memory optimizations
  blockinfile:
    path: /etc/sysctl.conf
    block: |
      kern.shminfo.shmall=3145728
      kern.shminfo.shmmax=1073741823
      kern.shminfo.shmmni=1024
      kern.shminfo.shmseg=1024
      kern.seminfo.semmns=4096
      kern.seminfo.semmni=1024
    marker: "# memory {mark} - managed by Ansible"

- name: ensure sysctl process optimizations
  blockinfile:
    path: /etc/sysctl.conf
    block: |
      kern.maxfiles=102400
      kern.maxproc=32768
      kern.maxfiles=65535
      kern.bufcachepercent=90
      kern.maxvnodes=262144
      kern.somaxconn=2048
    marker: "# process - {mark} managed by Ansible"

- name: ensure login.conf configuration for syncthing
  blockinfile:
    path: /etc/login.conf
    block: |
      syncthing:\
          :openfiles-max=120000:\
          :tc=daemon:
    marker: "# syncthing - {mark} managed by Ansible"

- name: apply login.conf to binary format
  shell: cap_mkdb /etc/login.conf