From bc626a2d8936d5b999db05d7d0036ca1e50db5ee Mon Sep 17 00:00:00 2001
From: Viktor Barzin <vbarzin@gmail.com>
Date: Mon, 29 Jun 2026 15:28:11 +0000
Subject: [PATCH] =?UTF-8?q?rightsize:=20raise=20OOM-tight=20memory=20limit?=
 =?UTF-8?q?s=20(batch=203/N=20=E2=80=94=20spike=20protection)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

shlink 512->704Mi, linkwarden 1Gi->1280Mi, chrome-service 2Gi->2624Mi, forgejo 4Gi->5Gi, f1-stream 256->384Mi. All were request==limit with 30d peak at 91-100% of the ceiling — a spike would OOM-kill them. Raising the limit (now Burstable, request<limit) gives real burst headroom. This is the genuine 'don't OOM on occasional spike' fix. Small add (~2.2Gi limits) vs the ~20Gi of fat removed in batches 1-2, so net overcommit keeps dropping.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 stacks/chrome-service/main.tf | 2 +-
 stacks/f1-stream/main.tf      | 2 +-
 stacks/forgejo/main.tf        | 2 +-
 stacks/linkwarden/main.tf     | 2 +-
 stacks/url/main.tf            | 2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/stacks/chrome-service/main.tf b/stacks/chrome-service/main.tf
index 82e8fe45..e1234b5f 100644
--- a/stacks/chrome-service/main.tf
+++ b/stacks/chrome-service/main.tf
@@ -321,7 +321,7 @@ resource "kubernetes_deployment" "chrome_service" {
               memory = "1500Mi"
             }
             limits = {
-              memory = "2Gi"
+              memory = "2624Mi"
             }
           }
         }
diff --git a/stacks/f1-stream/main.tf b/stacks/f1-stream/main.tf
index bcd66c7f..eb237398 100644
--- a/stacks/f1-stream/main.tf
+++ b/stacks/f1-stream/main.tf
@@ -143,7 +143,7 @@ resource "kubernetes_deployment" "f1-stream" {
           # 256Mi = upperBound x ~1.3 (bursty); requests=limits per convention.
           resources {
             limits = {
-              memory = "256Mi"
+              memory = "384Mi"
             }
             requests = {
               cpu    = "50m"
diff --git a/stacks/forgejo/main.tf b/stacks/forgejo/main.tf
index c43a3af1..a8b2bb24 100644
--- a/stacks/forgejo/main.tf
+++ b/stacks/forgejo/main.tf
@@ -347,7 +347,7 @@ resource "kubernetes_deployment" "forgejo" {
               memory = "4Gi"
             }
             limits = {
-              memory = "4Gi"
+              memory = "5Gi"
             }
           }
           port {
diff --git a/stacks/linkwarden/main.tf b/stacks/linkwarden/main.tf
index d950163c..556fde96 100644
--- a/stacks/linkwarden/main.tf
+++ b/stacks/linkwarden/main.tf
@@ -201,7 +201,7 @@ resource "kubernetes_deployment" "linkwarden" {
               memory = "1Gi"
             }
             limits = {
-              memory = "1Gi"
+              memory = "1280Mi"
             }
           }
         }
diff --git a/stacks/url/main.tf b/stacks/url/main.tf
index f7959808..d80e8089 100644
--- a/stacks/url/main.tf
+++ b/stacks/url/main.tf
@@ -232,7 +232,7 @@ resource "kubernetes_deployment" "shlink" {
           # }
           resources {
             limits = {
-              memory = "512Mi"
+              memory = "704Mi"
             }
             requests = {
               cpu    = "25m"