Pass KOPIA_REPOSITORY_PASSWORD into snapshot create; use MARIADB_ROOT_PASSWORD for romm and bookstack app user for bookstack root mismatch.
Protects /config, selective labdata, and nightly DB dumps; documents homelab improvement plan briefs.