Notes

Small things I learned while tinkering with servers.

Keeping systemd services lean

MemoryHigh is a gentle way to make a service reclaim memory before it ever gets near the hard limit. Pair it with MemoryMax and you rarely need to think about OOM again.

Why I stopped tuning TCP buffers by hand

Modern kernels autotune well. BBR plus fq covers most of what I used to do with a dozen sysctl lines.

Renewing certificates without downtime

A webroot challenge and a reload hook are all you need. No restarts, no dropped connections.