Merge remote-tracking branch 'origin/main' into perf/auth-me-quota

# Conflicts:
#	example.env
#	src/common/config.rs

example.env

@@ -34,6 +34,15 @@ OXICLOUD_SERVER_HOST=127.0.0.1
 # Maximum upload size in bytes (default: 10 GB on 64-bit)
 #OXICLOUD_MAX_UPLOAD_SIZE=10737418240
 
+# Directory for upload spool temp files. Uploads are streamed to a temp file
+# before deduplication. By default this uses the OS temp dir ($TMPDIR / /tmp),
+# which in many containers is tmpfs (RAM) — writing a large upload there fills
+# page-cache that counts against the cgroup memory limit and can OOMKill the
+# process. Point this at a real-disk path (same filesystem as the storage
+# backend is ideal) to keep the upload footprint off RAM. Leave unset to use
+# the OS default.
+#OXICLOUD_UPLOAD_TMPDIR=/var/lib/oxicloud/tmp
+
 # How often (seconds) the background sweep reconciles each user's cached
 # storage usage with the real sum of their files (default: 600 = 10 min).
 # GET /api/auth/me serves the cached value instead of recomputing per request;