That would probably the best practice. But as another post said, I don’t trust myself (and I lack the skills, although that’s pretty lame excuse).

I used this as a solid base. It’s more flexible than the AIO containers. Annoying thing about NC is that, as far as I can tell, none of the LDAP settings are exposed as environmental variables.

This is the part that gets me. I don’t know how to automate this. I periodically retrieve something from the backups, which, so far, has worked. That’s not really good insurance, though. Any suggests or resources, ideally for borg and/restic?