- Always build from the checkout (`up --build`, `pull_policy: build`)
instead of reusing a stale local image or pulling an old registry one.
- --render-only writes to rendered/ and no longer touches the live
Traefik dynamic directory; the route is installed after health check.
- Join the Traefik network via a generated docker-compose.override.yaml
rather than `docker network connect` after startup, which raced the
control-plane's startup call to wg-easy and was lost on recreate.
- Add --non-interactive, check the public HTTPS endpoint, and point the
closing instructions at Settings -> Gateway (the suggested
`furtka gateway connect` command doesn't exist).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>