# ssh.service drop-in: keep sshd alive when RAM runs out (rules of the previous server).
# OOMScoreAdjust=-1000  the kernel OOM killer never selects sshd.
# MemoryMin=256M        reclaim protection for the daemon's own cgroup. Login sessions
#                       live in user.slice (logind), so this cannot reserve RAM for an
#                       interactive shell — earlyoom is what frees memory in time.
[Service]
MemoryMin=256M
OOMScoreAdjust=-1000