The Linux OOM killer fires too late — by the time it acts, your server is already frozen. After six months running systemd-oomd in production across multiple VPS instances, here's a concrete configuration guide covering PSI thresholds, cgroups v2 setup, and how to protect critical services while sacrificing expendable ones.