diff --git a/morph/lib/issuer-aws.nix b/morph/lib/issuer-aws.nix
index afda7930ee7dce8faf1d85045f2b379384d3c48d..9767e1ad27f8de58898786a0b70955a07e16e4fb 100644
--- a/morph/lib/issuer-aws.nix
+++ b/morph/lib/issuer-aws.nix
@@ -9,7 +9,7 @@
   boot.kernel.sysctl = { "vm.swappiness" = 1; };
   swapDevices = [ {
     device = "/var/swapfile";
-    size = 4096; # megabytes
+    size = 1024; # megabytes
     randomEncryption = true;
   } ];
 
diff --git a/nixos/modules/monitoring/exporters/promtail.nix b/nixos/modules/monitoring/exporters/promtail.nix
index 8c4080343efc1be0fad29bf58763bbd4c645edb7..75994b68da9e3a28ee81090538c25c2215ec0a77 100644
--- a/nixos/modules/monitoring/exporters/promtail.nix
+++ b/nixos/modules/monitoring/exporters/promtail.nix
@@ -47,6 +47,12 @@ in {
       # for further details about these options.
       #
       MaxFileSec=1day
+
+      # This asks journald to not use more than 500M of disk space.  Due to
+      # journald's characteristics this might only be a week of logs, but that
+      # should be okay since we ship all logs to a central server that keeps
+      # them for a while longer.
+      SystemMaxUse=500M
     '';
 
     services.promtail.configuration = {