diff --git a/modules/essentials/services.nix b/modules/essentials/services.nix
index 7c011a8..4559de0 100644
--- a/modules/essentials/services.nix
+++ b/modules/essentials/services.nix
@@ -8,8 +8,10 @@
 
   # All real hosts (not the bare "minimal" test config) get OOM protection
   # and a bounded journal.
-  services.earlyoom.enable = lib.mkIf (xlib.device.type != "minimal") true;
-  services.journald.extraConfig = lib.mkIf (xlib.device.type != "minimal") ''
-    SystemMaxUse=512M
-  '';
+  services = {
+    earlyoom.enable = lib.mkIf (xlib.device.type != "minimal") true;
+    journald.settings.Journal = lib.mkIf (xlib.device.type != "minimal") {
+      SystemMaxUse = "512M";
+    };
+  };
 }