# A child the kernel kills for memory is the child's failure, not the
# forge's. systemd's default OOMPolicy=stop stops the whole unit when the
# OOM killer takes ANY process in it: on 2026-11-02 a Linux kernel import
# (zit import-git, marked as the first to go by zitcli's oomFirst) ran out
# of memory and took the forge down with it. With continue, the import
# fails on its own, the forge reports it, and every page keeps serving. If
# the killer takes quarry itself, the main process has died and
# Restart=on-failure restarts it as before.
[Service]
OOMPolicy=continue