Ever tired of processes OOMing each other?
systemd has a super easy way to limit the memory any service (by cgroup) can consume.
$ systemctl set-property nginx.service MemoryMax=1G
You can find all of the other properties that can be set at systemd.resource-control(5).