nixos-modules: set LimitRSS for hunter and gatherer

nixos-module.nix

@@ -130,6 +130,7 @@ in
         LockPersonality = true;
         MemoryDenyWriteExecute = true;
         LimitNOFile = limitNOFILE;
+        LimitRSS = "2G:4G";
       };
     };
 
@@ -158,6 +159,7 @@ in
         MemoryDenyWriteExecute = true;
         LimitNOFile = limitNOFILE;
         WorkingDirectory = "${pkgs.caveman-gatherer}/share/caveman/gatherer";
+        LimitRSS = "512M:1G";
       };
     };