diff --git a/metrics/ops/exit-ops.mdwn b/metrics/ops/exit-ops.mdwn
index 27aa9db6cd0719925a3a1747b4802c3dbe741297..e7c69f266df9901ea07b6037a16097b894a746a9 100644
--- a/metrics/ops/exit-ops.mdwn
+++ b/metrics/ops/exit-ops.mdwn
@@ -187,6 +187,16 @@ There are no Nagios checks for this service beyond the standard TPA systems chec
 
 # Disaster Recovery
 
+## Service needs restart
+
+The service can be restarted, as the tordnsel user, with:
+
+```
+XDG_RUNTIME_DIR=/run/user/`id -u` systemctl --user restart exitscanner.service
+```
+
+## Total Loss
+
 The exit scanner service does not need to maintain any state between runs.
 It's nice if it can in order to cope with a relay that happened to be down at the time we tried to measure
 it but in the event of a failure it is perfectly acceptable to throw away the old box and provision a new one.