Docker Swarm Instead of Kubernetes: The Exact Bill

Описание и применение

Swarm позволяет запускать DevSecOps‑платформу за ~30 € в месяц, но управление узлами остаётся ручным, а VPN критически важен.

Задача

Choosing an orchestrator that balances cost, simplicity, and operational overhead for small teams or solo builders.

Результат

Swarm delivers a low‑cost, low‑complexity platform (~30 €/month) suitable for small teams, but node changes are manual and the VPN is a critical dependency.

Рабочий процесс

• Provision VMs with Terraform
• Configure VMs with Ansible (install Docker, set up Swarm manager, join workers, set labels, create networks and secrets)
• Render Docker Compose files with Jinja2 (avoid .env with docker stack deploy)
• Deploy services with docker stack deploy
• Adjust Docker daemon MTU to account for VXLAN + WireGuard encapsulation (mtu_docker = mtu_vpn - 50)
• Monitor and drain services manually when removing nodes
• Maintain VPN and Swarm control plane together

Доказательства

My complete DevSecOps platform runs on Docker Swarm, on top of a WireGuard mesh, for about 30 euros a month, real invoice.

Источник

Trap 1: docker stack deploy ignores your .env

Источник

MTU is the maximum packet size on a link. Each encapsulation eats a piece of it.

Источник