earlyoom is your friend, if you don't care that the process with highest memory usage by default gets killed when shit hits the fan. You can protect processes of your choice if you configure it beyond a apt install.

http://manpages.ubuntu.com/manpages/bionic/man1/earlyoom.1.h...