docker: tweak systemd services