6907d0bef5
Traefik often misses backends after a reboot or daemon swap because (a) its docker provider debounces / drops events when 30+ containers start in a burst, and (b) backends can be `Created` on the docker socket but not yet attached to traefik-net when traefik scans. The empirical workaround is `docker restart traefik` once the topology settles — this unit bakes that in. Type=oneshot, After=docker.service, ExecStartPre=/bin/sleep 60, ExecStart=docker restart traefik. Runs once per boot. delay_seconds and container name are tunable via --var. Verify phase: file mode, enabled state, ExecStart references the right container, container actually exists on the host, and systemd-analyze parses the unit cleanly (lint without executing — avoids needlessly bouncing traefik on healthy hosts). In scope: esh-docker-vm, ana-docker (the two hosts that run traefik).