Architecture decision records

ADR	Status
ADR-0001: Rootless Podman application standard	Accepted
ADR-0002: Dedicated DNS and ingress LXCs	Accepted
ADR-0003: OPNsense firewall	Accepted
ADR-0004: Dedicated Headscale subnet router	Accepted
ADR-0005: Forgejo Actions documentation build	Accepted
ADR-0006: Static backend behind ingress Caddy	Accepted
ADR-0007: Secrets remain outside documentation	Accepted

ADRs record consequential rationale. Operational values remain in canonical reference pages.