From 56b7be608fdbbc4631b34d12e5c1f390eb69d129 Mon Sep 17 00:00:00 2001
From: Paul Buetow <paul@buetow.org>
Date: Sat, 17 Jan 2026 17:00:23 +0200
Subject: update

---
 frontends/Rexfile | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'frontends/Rexfile')

diff --git a/frontends/Rexfile b/frontends/Rexfile
index 5194265..53b1036 100644
--- a/frontends/Rexfile
+++ b/frontends/Rexfile
@@ -290,6 +290,10 @@ task 'relayd',
   sub {
     append_if_no_such_line '/etc/rc.conf.local', 'relayd_flags=';
 
+    # Increase daemon login class file descriptor limits for relayd with many TLS certs
+    run 'doas sed -i "s/:openfiles-max=1024:/:openfiles-max=4096:/; s/:openfiles-cur=1024:/:openfiles-cur=4096:/" /etc/login.conf';
+    run 'doas rm -f /etc/login.conf.db && doas cap_mkdb /etc/login.conf';
+
     file '/etc/relayd.conf',
       content => template(
         './etc/relayd.conf.tpl',
-- 
cgit v1.2.3