Three documents written before the container migration, all referenced from the
service readmes, so they belong in the tree:
- podman-compat-audit.md -- a read-only audit of the monoco fleet: every image's
architecture, privileges and namespaces; the four things that actually break
(anonymous volumes, per-container uids, tooling that assumes Docker, image
naming); and the per-container uid matrix that the UserNS=keep-id lines in the
Quadlet units come from.
- podman-migration.md -- the plan: target architecture, the ownership/chown
pass, the Quadlet unit shape, and the low-port and lingering prerequisites.
- backup-plan.md -- per-service irreplaceable state, the consistency problems
(live SQLite WAL, hot Postgres, the stale bitwarden SQLite), and the 3-2-1
architecture.
caddy, postgres, tandoor and bitwarden each link into these from their readme,
so leaving them untracked left those links dead.
