From f471cfc43846fbfad23d00e6e8e8067a85ed609e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?L=C3=A9ana=20=E6=B1=9F?= <leana.jiang+git@icloud.com>
Date: Thu, 1 Jan 2026 21:40:59 +0100
Subject: [PATCH] vanadium/sane-nix: init

Setup memory && storage protection mechanisms
---
 nix/configurations/vanadium.nix                |  1 +
 nix/configurations/vanadium/nixos/sane-nix.nix | 13 +++++++++++++
 2 files changed, 14 insertions(+)
 create mode 100644 nix/configurations/vanadium/nixos/sane-nix.nix

diff --git a/nix/configurations/vanadium.nix b/nix/configurations/vanadium.nix
index 92b50443..aeb22f45 100644
--- a/nix/configurations/vanadium.nix
+++ b/nix/configurations/vanadium.nix
@@ -88,6 +88,7 @@ in
     # NixOS modules
     #
     ./vanadium/nixos/hardware-configuration.nix # generated
+    ./vanadium/nixos/sane-nix.nix
     ./vanadium/nixos/fs.nix
     ./vanadium/nixos/restic.nix
 
diff --git a/nix/configurations/vanadium/nixos/sane-nix.nix b/nix/configurations/vanadium/nixos/sane-nix.nix
new file mode 100644
index 00000000..83c080d8
--- /dev/null
+++ b/nix/configurations/vanadium/nixos/sane-nix.nix
@@ -0,0 +1,13 @@
+# Protect my system from running out of storage or memory
+{
+  nix.settings = {
+    min-free = 50 * 1024 * 1024 * 1024;
+    max-free = 100 * 1024 * 1024 * 1024;
+  };
+
+  systemd.services.nix-daemon.serviceConfig = {
+    MemoryAccounting = true;
+    MemoryMax = "90%";
+    OOMScoreAdjust = 500;
+  };
+}