Na página de manual systemd.unit(5)
, em StartLimitIntervalSec=, StartLimitBurst=
:
Note that units which are configured for Restart= and which reach the start limit are not attempted to be restarted anymore; however, they may still be restarted manually at a later point, from which point on, the restart logic is again activated. Note that systemctl reset-failed will cause the restart rate counter for a service to be flushed, which is useful if the administrator wants to manually start a unit and the start limit interferes with that.
… então parece que a limitação da taxa de início do systemd faz o que você quer.