Separate issue list: firewalld Nym ports, nym bond, podman-restart untested, stray containers, API bind, cleanup candidates.
Record podman-restart.service, unless-stopped policies, and per-container user units.