3bfecdd291
Two operator decision documents, doc-only, no live action: - docs/FRITZBOX_PORT_CORRECTION_PLAN.md prepares the three open router items: remove 80/tcp (no HTTP-01 in use), do not add 222/tcp while Tailscale remains the operator path, deactivate the UPnP self-exposure from PC-192-168-178-71. Every step waits for operator go. - docs/OFFSITE_BACKUP_OPTIONS.md compares rsync.net, BorgBase EU2 and rotating cold disk for a second offsite target. Recommends rsync.net or cold disk; BorgBase EU2 is explicitly not recommended because it does not separate the provider risk. No provider booked, no costs triggered. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>