Handbook
These notes assume one Debian or Ubuntu host running systemd, administered over SSH. Commands run as root unless stated otherwise, and paths follow distribution defaults.
Conventions
Configuration under /etc, mutable state under /var/lib, logs under
/var/log. Anything produced at build time is treated as disposable and is never
edited in place.
What is left out
Only deviations from upstream defaults are recorded. Where the packaged default is already sensible it is left alone rather than repeated here, because a copied default silently rots the moment upstream changes it.