Use HTTP basic auth username kopia with KOPIA_REPOSITORY_PASSWORD; document in README.
Remove compose ${VAR} overrides that blanked stack.env values and map KOPIA_REPOSITORY_PASSWORD in init-kopia; use hostname-only B2 endpoint.
Protects /config, selective labdata, and nightly DB dumps; documents homelab improvement plan briefs.