On-box health check every 60s via systemd timer. Slack alerts on state changes. External dead man's switch via healthchecks.io.