Stood up some podman services. Using cloud init to provision the VMs, and podman quadlets to translate docker compose into systemd files. Really solid, just need to make them rootless now.

Also looking at a tailscale deployment for zero trust. The feature set is a lot wider than I thought.