[zokier]

One of the key observations is that you should basically always run your applications with some memory limits so that the system and management services will remain responsive etc even if the application is misbehaving. Luckily stuff like docker and systemd makes setting limits pretty easy

[omerban]

Writer of the blog post here. Great point, that's exactly what we did. Setting a "C Group" in docker compose is easily done with the "mem_limit" field.