chore: harden gunicorn timeouts to prevent client RSTs

naltatis · naltatis · commit 29dce045ecc2 · 2026-04-07T06:33:49.000+02:00
diff --git a/infra/main.bicep b/infra/main.bicep
@@ -75,7 +75,7 @@ resource containerApp 'Microsoft.App/containerApps@2025-01-01' = {
           env: [
             { name: 'OPTIMIZER_TIME_LIMIT', value: '25' }
             { name: 'OPTIMIZER_NUM_THREADS', value: '1' }
-            { name: 'GUNICORN_CMD_ARGS', value: '--workers 4 --max-requests 32' }
+            { name: 'GUNICORN_CMD_ARGS', value: '--workers 4 --timeout 60 --max-requests 32 --max-requests-jitter 8' }
             { name: 'JWT_TOKEN_SECRET', secretRef: 'jwt-token-secret' }
           ]
           probes: [

Original file line number	Diff line number	Diff line change
`@@ -75,7 +75,7 @@ resource containerApp 'Microsoft.App/containerApps@2025-01-01' = {`
`75`	`75`	`env: [`
`76`	`76`	`{ name: 'OPTIMIZER_TIME_LIMIT', value: '25' }`
`77`	`77`	`{ name: 'OPTIMIZER_NUM_THREADS', value: '1' }`
`78`		`- { name: 'GUNICORN_CMD_ARGS', value: '--workers 4 --max-requests 32' }`
	`78`	`+ { name: 'GUNICORN_CMD_ARGS', value: '--workers 4 --timeout 60 --max-requests 32 --max-requests-jitter 8' }`
`79`	`79`	`{ name: 'JWT_TOKEN_SECRET', secretRef: 'jwt-token-secret' }`
`80`	`80`	`]`
`81`	`81`	`probes: [`