{
  # Unbounded by default (Storage=persistent, no SystemMaxUse) -- found
  # 2026-07-31 after blunix's journal alone had grown to 3.8G and pinix's
  # to 1.6G with no cap in sight. A modest size limit keeps plenty of
  # history for `journalctl -u <unit> -b` debugging without letting it
  # grow indefinitely again.
  services.journald.settings.Journal = {
    SystemMaxUse = "500M";
  };
}