diff --git a/obsidian-sync/couchdb/local.ini b/obsidian-sync/couchdb/local.ini
index 88d3321..1daba8e 100644
--- a/obsidian-sync/couchdb/local.ini
+++ b/obsidian-sync/couchdb/local.ini
@@ -24,6 +24,8 @@ require_valid_user = true
 
 [httpd]
 WWW-Authenticate = Basic realm="couchdb"
+# Required in CouchDB 3.x — without this the [cors] section below is ignored.
+enable_cors = true
 
 # --- CORS -------------------------------------------------------------------
 # LiveSync runs inside browsers with DIFFERENT origins:
diff --git a/obsidian-sync/docker-compose.yml b/obsidian-sync/docker-compose.yml
index 2521b2e..d49bc59 100644
--- a/obsidian-sync/docker-compose.yml
+++ b/obsidian-sync/docker-compose.yml
@@ -23,9 +23,9 @@ services:
       # top of CouchDB's defaults without us editing the base file.
       - ./couchdb/local.ini:/opt/couchdb/etc/local.d/10-livesync.ini:ro
 
-    # Guardrail on a RAM-tight box. CouchDB idles ~150-300MB; cap keeps a runaway
-    # query from eating your headroom. Swap still absorbs brief spikes.
-    mem_limit: 768m
+    # mem_limit intentionally omitted: on a swap-heavy box the cgroup OOM killer
+    # fires before the Erlang VM writes its first log line (kernel kills it, so
+    # docker inspect shows OOMKilled:false — misleading). Re-add once swap < 50%.
 
     healthcheck:
       # _up is CouchDB's lightweight liveness endpoint (no auth needed).