diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index ffced1e..aca9eb3 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -23,7 +23,7 @@ repos:
     rev: v3.92.5
     hooks:
       - id: trufflehog
-        entry: trufflehog git file://. --no-verification --fail
+        entry: trufflehog git file://. --since-commit HEAD --no-verification --fail
         stages: [pre-commit, pre-push]
 
   # YAML linting
diff --git a/docs/changelog.d/fix-flyio-proxy-oom.bugfix.md b/docs/changelog.d/fix-flyio-proxy-oom.bugfix.md
new file mode 100644
index 0000000..75fc8a0
--- /dev/null
+++ b/docs/changelog.d/fix-flyio-proxy-oom.bugfix.md
@@ -0,0 +1 @@
+Bump Fly.io proxy VM memory from 256MB to 512MB to prevent Alloy OOM kills.
diff --git a/docs/how-to/plans/operationalize-reolink-camera.md b/docs/how-to/plans/operationalize-reolink-camera.md
index a235168..46006a6 100644
--- a/docs/how-to/plans/operationalize-reolink-camera.md
+++ b/docs/how-to/plans/operationalize-reolink-camera.md
@@ -172,9 +172,9 @@ ReoLink cameras need go2rtc as an intermediary (direct RTSP from Frigate can dro
 go2rtc:
   streams:
     front_floodlight:
-      - "ffmpeg:http://admin:password@192.168.3.X/flv?port=1935&app=bcs&stream=channel0_main.bcs#video=copy#audio=copy#audio=opus"
+      - "ffmpeg:http://admin:<your-password>@192.168.3.X/flv?port=1935&app=bcs&stream=channel0_main.bcs#video=copy#audio=copy#audio=opus"
     front_floodlight_sub:
-      - "ffmpeg:http://admin:password@192.168.3.X/flv?port=1935&app=bcs&stream=channel0_sub.bcs"
+      - "ffmpeg:http://admin:<your-password>@192.168.3.X/flv?port=1935&app=bcs&stream=channel0_sub.bcs"
 
 cameras:
   front_floodlight:
diff --git a/fly/fly.toml b/fly/fly.toml
index 9399c8b..17e3de8 100644
--- a/fly/fly.toml
+++ b/fly/fly.toml
@@ -3,6 +3,9 @@ primary_region = "sjc"
 
 [build]
 
+[[vm]]
+memory = "512mb"
+
 [deploy]
 strategy = "bluegreen"