[Unit]
Description=5-minute public fleet hardening posture collect

[Timer]
# A short boot delay so the network + wg0 are settled before the first pass; the
# random spread keeps this off the same second as the status publisher and the
# SSH-ledger collect (45s here vs the ledger's 30s, so the two never collide).
OnBootSec=2min
OnUnitActiveSec=5min
RandomizedDelaySec=45s

[Install]
WantedBy=timers.target