chore: add low-risk disk anti-bloat policy

docker-compose.yml

@@ -1,3 +1,9 @@
+x-unidesk-log-rotation: &unidesk-log-rotation
+  driver: json-file
+  options:
+    max-size: "${UNIDESK_DOCKER_LOG_MAX_SIZE:-20m}"
+    max-file: "${UNIDESK_DOCKER_LOG_MAX_FILE:-3}"
+
 services:
   database:
     image: postgres:16-alpine
@@ -38,6 +44,7 @@ services:
       interval: 5s
       timeout: 3s
       retries: 20
+    logging: *unidesk-log-rotation
 
   backend-core:
     image: unidesk-backend-core
@@ -73,7 +80,7 @@ services:
       UNIDESK_DEPLOY_COMMIT: "${UNIDESK_DEPLOY_COMMIT:-}"
       UNIDESK_DEPLOY_REQUESTED_COMMIT: "${UNIDESK_DEPLOY_REQUESTED_COMMIT:-}"
       LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_backend-core.jsonl"
-      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}"
+      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-512MiB}"
     volumes:
       - ${UNIDESK_LOG_DIR}:/var/log/unidesk
       - ./.state/baidu-netdisk/staging:/data/baidu-netdisk-staging
@@ -84,6 +91,7 @@ services:
       interval: 5s
       timeout: 3s
       retries: 20
+    logging: *unidesk-log-rotation
 
   code-queue-mgr:
     image: code-queue-mgr
@@ -107,7 +115,7 @@ services:
       CODE_QUEUE_WORKDIR: "/workspace"
       CODE_QUEUE_REMOTE_WORKDIR: "${UNIDESK_CODE_QUEUE_REMOTE_WORKDIR:-/home/ubuntu}"
       LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_code-queue-mgr.jsonl"
-      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}"
+      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-512MiB}"
       UNIDESK_CODE_QUEUE_MGR_DEPLOY_REF: "${UNIDESK_CODE_QUEUE_MGR_DEPLOY_REF:-deploy.json#environments.prod.services.code-queue-mgr}"
       UNIDESK_CODE_QUEUE_MGR_DEPLOY_SERVICE_ID: "${UNIDESK_CODE_QUEUE_MGR_DEPLOY_SERVICE_ID:-code-queue-mgr}"
       UNIDESK_CODE_QUEUE_MGR_DEPLOY_REPO: "${UNIDESK_CODE_QUEUE_MGR_DEPLOY_REPO:-}"
@@ -120,6 +128,7 @@ services:
       interval: 5s
       timeout: 3s
       retries: 20
+    logging: *unidesk-log-rotation
 
   code-agent-sandbox:
     image: code-agent-sandbox
@@ -155,7 +164,7 @@ services:
       UNIDESK_DEPLOY_COMMIT: "${UNIDESK_CODE_AGENT_SANDBOX_DEPLOY_COMMIT:-}"
       UNIDESK_DEPLOY_REQUESTED_COMMIT: "${UNIDESK_CODE_AGENT_SANDBOX_DEPLOY_REQUESTED_COMMIT:-}"
       LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_code-agent-sandbox.jsonl"
-      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}"
+      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-512MiB}"
     volumes:
       - ${UNIDESK_LOG_DIR}:/var/log/unidesk
       - ./.state/code-agent-sandbox:/var/lib/unidesk/code-agent-sandbox
@@ -164,6 +173,7 @@ services:
       interval: 5s
       timeout: 3s
       retries: 20
+    logging: *unidesk-log-rotation
 
   auth-broker:
     image: auth-broker
@@ -189,7 +199,7 @@ services:
       UNIDESK_DEPLOY_COMMIT: "${UNIDESK_AUTH_BROKER_DEPLOY_COMMIT:-}"
       UNIDESK_DEPLOY_REQUESTED_COMMIT: "${UNIDESK_AUTH_BROKER_DEPLOY_REQUESTED_COMMIT:-}"
       LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_auth-broker.jsonl"
-      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}"
+      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-512MiB}"
     volumes:
       - ${UNIDESK_LOG_DIR}:/var/log/unidesk
     healthcheck:
@@ -197,6 +207,7 @@ services:
       interval: 30s
       timeout: 3s
       retries: 1
+    logging: *unidesk-log-rotation
 
   todo-note:
     image: todo-note
@@ -245,6 +256,7 @@ services:
       interval: 5s
       timeout: 3s
       retries: 20
+    logging: *unidesk-log-rotation
 
   oa-event-flow:
     image: oa-event-flow
@@ -269,7 +281,7 @@ services:
       PIPELINE_OA_BRIDGE_INTERVAL_MS: "${UNIDESK_PIPELINE_OA_BRIDGE_INTERVAL_MS:-15000}"
       PIPELINE_OA_BRIDGE_RUN_LIMIT: "${UNIDESK_PIPELINE_OA_BRIDGE_RUN_LIMIT:-50}"
       LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_oa-event-flow.jsonl"
-      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}"
+      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-512MiB}"
       UNIDESK_DEPLOY_REF: "${UNIDESK_OA_EVENT_FLOW_DEPLOY_REF:-deploy.json#environments.prod.services.oa-event-flow}"
       UNIDESK_DEPLOY_SERVICE_ID: "${UNIDESK_OA_EVENT_FLOW_DEPLOY_SERVICE_ID:-oa-event-flow}"
       UNIDESK_DEPLOY_REPO: "${UNIDESK_OA_EVENT_FLOW_DEPLOY_REPO:-}"
@@ -282,6 +294,7 @@ services:
       interval: 5s
       timeout: 3s
       retries: 20
+    logging: *unidesk-log-rotation
 
   project-manager:
     image: project-manager
@@ -300,7 +313,7 @@ services:
       DATABASE_URL: "postgres://${UNIDESK_DATABASE_USER}:${UNIDESK_DATABASE_PASSWORD}@database:5432/${UNIDESK_DATABASE_NAME}"
       DATABASE_POOL_MAX: "${UNIDESK_PROJECT_MANAGER_DATABASE_POOL_MAX:-1}"
       LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_project-manager.jsonl"
-      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}"
+      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-512MiB}"
       UNIDESK_DEPLOY_REF: "${UNIDESK_PROJECT_MANAGER_DEPLOY_REF:-deploy.json#environments.prod.services.project-manager}"
       UNIDESK_DEPLOY_SERVICE_ID: "${UNIDESK_PROJECT_MANAGER_DEPLOY_SERVICE_ID:-project-manager}"
       UNIDESK_DEPLOY_REPO: "${UNIDESK_PROJECT_MANAGER_DEPLOY_REPO:-}"
@@ -313,6 +326,7 @@ services:
       interval: 5s
       timeout: 3s
       retries: 20
+    logging: *unidesk-log-rotation
 
   baidu-netdisk:
     image: baidu-netdisk
@@ -336,7 +350,7 @@ services:
       BAIDU_NETDISK_APP_ROOT: "${UNIDESK_BAIDU_NETDISK_APP_ROOT:-/}"
       BAIDU_NETDISK_STAGING_DIR: "/data/staging"
       LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_baidu-netdisk.jsonl"
-      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}"
+      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-512MiB}"
       UNIDESK_DEPLOY_REF: "${UNIDESK_BAIDU_NETDISK_DEPLOY_REF:-deploy.json#environments.prod.services.baidu-netdisk}"
       UNIDESK_DEPLOY_SERVICE_ID: "${UNIDESK_BAIDU_NETDISK_DEPLOY_SERVICE_ID:-baidu-netdisk}"
       UNIDESK_DEPLOY_REPO: "${UNIDESK_BAIDU_NETDISK_DEPLOY_REPO:-}"
@@ -350,6 +364,7 @@ services:
       interval: 5s
       timeout: 3s
       retries: 20
+    logging: *unidesk-log-rotation
 
   frontend:
     build:
@@ -377,7 +392,7 @@ services:
       UNIDESK_DEPLOY_COMMIT: "${UNIDESK_FRONTEND_DEPLOY_COMMIT:-}"
       UNIDESK_DEPLOY_REQUESTED_COMMIT: "${UNIDESK_FRONTEND_DEPLOY_REQUESTED_COMMIT:-}"
       LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_frontend.jsonl"
-      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}"
+      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-512MiB}"
     volumes:
       - ${UNIDESK_LOG_DIR}:/var/log/unidesk
     healthcheck:
@@ -385,6 +400,7 @@ services:
       interval: 5s
       timeout: 3s
       retries: 20
+    logging: *unidesk-log-rotation
 
   dev-frontend-proxy:
     build:
@@ -401,6 +417,7 @@ services:
       interval: 10s
       timeout: 5s
       retries: 12
+    logging: *unidesk-log-rotation
 
   provider-gateway:
     image: unidesk_provider-gateway
@@ -431,7 +448,7 @@ services:
       PROVIDER_UPGRADE_SERVICE: "${UNIDESK_PROVIDER_UPGRADE_SERVICE}"
       PROVIDER_UPGRADE_RUNNER_IMAGE: "${UNIDESK_PROVIDER_UPGRADE_RUNNER_IMAGE}"
       LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_provider-gateway.jsonl"
-      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}"
+      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-512MiB}"
       HOST_SSH_HOST: "${UNIDESK_HOST_SSH_HOST}"
       HOST_SSH_PORT: "${UNIDESK_HOST_SSH_PORT}"
       HOST_SSH_USER: "${UNIDESK_HOST_SSH_USER}"
@@ -445,6 +462,7 @@ services:
       - ${UNIDESK_LOG_DIR}:/var/log/unidesk
     extra_hosts:
       - "host.docker.internal:host-gateway"
+    logging: *unidesk-log-rotation
 
 volumes:
   unidesk_pgdata_10gb: