From 96e0df25234692cacbf05da04fa7cbc985b54c31 Mon Sep 17 00:00:00 2001
From: Patrick Mulligan <patjmulligan@protonmail.com>
Date: Fri, 9 Jan 2026 22:56:19 +0100
Subject: [PATCH] Add KillMode=process, TasksMax/MemoryMax=infinity

---
 modules/lamassu-lnbits.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/modules/lamassu-lnbits.nix b/modules/lamassu-lnbits.nix
index a738d75..763a747 100644
--- a/modules/lamassu-lnbits.nix
+++ b/modules/lamassu-lnbits.nix
@@ -336,6 +336,10 @@ in
         Group = cfg.group;
         # Build can take a while, especially on first run
         TimeoutStartSec = "30min";
+        # Don't kill child processes when main process exits
+        KillMode = "process";
+        # Send SIGTERM instead of SIGINT
+        KillSignal = "SIGTERM";
         # Completely disable sandboxing for build (npm scripts need full access)
         PrivateTmp = false;
         PrivateDevices = false;
@@ -350,6 +354,9 @@ in
         LockPersonality = false;
         # Don't restrict syscalls
         SystemCallFilter = "";
+        # No resource limits
+        TasksMax = "infinity";
+        MemoryMax = "infinity";
       };
 
       script = ''