Reviving to say I moved one of my boxes to timers after this thread and then moved it back when I realised I'd forgotten how to read the journal on a read-only rescue boot. journalctl -D /mnt/var/log/journal for next time.