Lessons
Earlier
Docker masks a missing persistent ip_forward sysctl, so Tailscale exit nodes and subnet routers work by accident until they don't
tailscale docker sysctl networking linux 680 tokens
dashdot v6 reports -1 for all storage on ZFS; fix with FS_VIRTUAL_MOUNTS + FS_DEVICE_FILTER
docker dashdot zfs monitoring regression 451 tokens