fixup systemd rules

fixup firewall hardening rules

allow TLS for coturn

block root login, support netbird proxy + wildcard SNI handshake routing

enable atuin daemon, netbird mgmt server

disable password reset

swap to lldap user backend

remove grafana tailscale auth

two factor config by default

use starttls port

format

spelling is hard

drop sysdo in favor of nh for all system management + bootstrapping

add weave git merge driver config

setup auth smtp notifier