[Unit] Description=Detect kernel OOM-kill events and alert via Telegram After=docker.service network-online.target [Service] Type=oneshot User=root Group=root Environment="HERMES_HOME=/root/.hermes" ExecStart=/usr/local/bin/vm-oom-watchdog.sh