Set up host: verdigris

verdigris will host services that I want available privately on my Tailnet. Currently, that includes:

• ActualBudget
• Linkding
• Miniflux
• Atuin
• Forgejo

There's going to be a few differences from cerulean.

1. I'll need Podman/Docker
2. I can't use HTTP or TLS-ALPN challenges as these services won't be publicly reachable. I'll either have to trust Caddy's local root certificate or patch caddy from nixpkgs with the Cloudflare DNS plugin before deployment.
3. Following on from 1., I need to find out if I can configure the containers and networks I want from within Nix.