host: Enable earlyoom

modules/host.nix

@@ -175,6 +175,12 @@ let
       # For debugging.
       # TODO: Lock to known IPs and keys
       sshd.enable = true;
+
+      # Prevent unexpected OOM situations with heavy swapping
+      earlyoom = {
+        enable = true;
+        enableNotifications = true;
+      };
     };
 
     # Don't wait for a network connection