[Unit]
Description=Monthly chaos validation — break a container, verify watchdog restores it
After=docker.service docker-health-watchdog.timer
Requires=docker.service

[Service]
Type=oneshot
User=root
Group=root
Environment="HERMES_HOME=/root/.hermes"
ExecStart=/usr/local/bin/chaos-validation.sh
TimeoutStartSec=2700