Memory limit configuration for Smart ID services

This article is new for Smart ID 26.04.

This article describes how to set memory limits for docker services.

Overview

Smart ID now supports optional memory limits for all docker services. This allows administrators to control the maximum amount of memory each service is allowed to consume, helping to prevent any single service from using excessive system resources.

By default, no memory limits are applied, so existing deployments are not affected.

Each service has a corresponding configuration variable in the smartid.env file. These variables are commented out (disabled) by default. When uncommented and set to a value (for example, 3g for 3 gigabytes), the service will be restricted to that amount of memory. If a variable is not set, the service runs without any memory constraint, preserving the current behavior.

Configure memory limit

To apply a memory limit to a service, open smartid.env, find the relevant line, remove the # comment character, and set the desired value.

Example:

Before(no limit):

#POSTGRES_MEM_LIMIT=3g

After (limit applied):

POSTGRES_MEM_LIMIT=3g

Values use standard docker memory notation: 512m (megabytes), 1g (gigabytes), 2g, etc.

Available settings

General

Setting	Service
`POSTGRES_MEM_LIMIT`	PostgreSQL Database
`TRAEFIK_MEM_LIMIT`	Traefik Reverse Proxy

Digital Access

Setting	Service
`DA_POLICY_MEM_LIMIT`	Policy Service
`DA_ADMIN_MEM_LIMIT`	Administration Service
`DA_AUTH_MEM_LIMIT`	Authentication Service
`DA_DIST_MEM_LIMIT`	Distribution Service
`DA_ACCESSPOINT_MEM_LIMIT`	Access Point

Identity Manager

Setting	Service
`IDM_OPERATOR_MEM_LIMIT`	Operator
`IDM_ADMIN_MEM_LIMIT`	Admin
`IDM_TENANT_MEM_LIMIT`	Tenant
`IDM_UPDATEDB_MEM_LIMIT`	Database Update Tool
`MOBILE_IRON_MEM_LIMIT`	Mobile Iron

Connectors

Setting	Service
`ARIAD_NEXT_CONNECTOR_MEM_LIMIT`	Ariad Next Connector
`OSIP_CONNECTOR_MEM_LIMIT`	OSIP Connector
`WORKSPACE_ONE_CONNECTOR_MEM_LIMIT`	Workspace One Connector
`ENTRA_ID_CONNECTOR_MEM_LIMIT`	Entra ID Connector

Messaging

Setting	Service
`MESSAGING_MEM_LIMIT`	Hermod Messaging Service

Smart ID Self-Service

Setting	Service
`SELFSERVICE_MEM_LIMIT`	Smart ID Self-Service Portal

Physical Access

Setting	Service
`PA_SCIMAPI_MEM_LIMIT`	SCIM API
`PA_RABBITMQ_MEM_LIMIT`	RabbitMQ
`PA_MAINTENANCE_MEM_LIMIT`	Maintenance
`PA_ARX_MEM_LIMIT`	ARX
`PA_OMNIS_MEM_LIMIT`	Omnis
`PA_INTEGRA_MEM_LIMIT`	Integra
`PA_ISECURE_MEM_LIMIT`	iSecure
`PA_RCOM5_MEM_LIMIT`	RCOM5
`PA_RCO_MEM_LIMIT`	RCO
`PA_SALTO_MEM_LIMIT`	Salto
`PA_SIPORT_MEM_LIMIT`	Siport
`PA_UNILOCK_MEM_LIMIT`	Unilock
`PA_UNISON_MEM_LIMIT`	Unison
`PA_SIPASS_MEM_LIMIT`	SiPass
`PA_DEMO_MEM_LIMIT`	Demo
`PA_INTERFLEX_MEM_LIMIT`	Interflex
`PA_KABAEXOS_MEM_LIMIT`	Kaba Exos
`PA_BABYLON_MEM_LIMIT`	Babylon

All settings are disabled by default. No action is required to maintain current behavior.
To remove a memory limit after enabling it, comment the line out again by adding # at the beginning.