[Service]
# Restart=-supervised service: cap so a leak dies small and restarts,
# instead of growing forever under its own watchdog (2026-08-04 exhaustion).
MemoryMax=4G
MemorySwapMax=1G