# felhom-mgmt-watchdog.timer (TASK G1) — install as /etc/systemd/system/felhom-mgmt-watchdog.timer. # # Drives felhom-mgmt-watchdog.service on a ~60s cadence (the auto-heal tick). OnBootSec fires shortly # after boot (belt-and-suspenders with the tmpfiles layer); OnUnitActiveSec=60s gives the ≤1-tick # heal budget the G1 acceptance drill measures. Persistent=true runs a missed tick immediately after a # resume/late boot. The oneshot is idempotent, so a fast cadence never churns a healthy host. [Unit] Description=Felhom management-plane watchdog timer (~60s privsep-dir auto-heal tick) [Timer] OnBootSec=30s OnUnitActiveSec=60s AccuracySec=5s Persistent=true Unit=felhom-mgmt-watchdog.service [Install] WantedBy=timers.target