diff --git a/bunfig.toml b/bunfig.toml
index 7eaa449..7660850 100755
--- a/bunfig.toml
+++ b/bunfig.toml
@@ -4,3 +4,6 @@ coverageSkipTestFiles = true
 coverageReporter = ['text', 'lcov']
 coverageDir = './.coverage'
 preload = "./test.config.ts"
+
+[install]
+minimumReleaseAge = 604800 # 7 days in seconds
\ No newline at end of file
diff --git a/nix/modules/customer-portal/flake-module.nix b/nix/modules/customer-portal/flake-module.nix
index dc066f4..4e5f9b8 100755
--- a/nix/modules/customer-portal/flake-module.nix
+++ b/nix/modules/customer-portal/flake-module.nix
@@ -109,12 +109,16 @@
               Group = cfg.group;
               UMask = "0077";
 
+              # MemoryAccounting = true;
+              # MemoryHigh = "50M";
+              # MemoryMax = "100M";
+
               NoNewPrivileges = true;
               PrivateDevices = true;
               ProtectKernelTunables = true;
               ProtectKernelModules = true;
               ProtectControlGroups = true;
-              MemoryDenyWriteExecute = true;
+              # MemoryDenyWriteExecute = true;
               LockPersonality = true;
               RestrictAddressFamilies = [
                 "AF_UNIX"