the FUCKING bytemark image fucking recursively chowns everything you
mount to its fucking directory, which if collossally fucking stupid.
now i've gotta go build my own fucking image and test it and make sure
it works and fuck :(
all of this is required for the synology LE role to work. this is
still a massive WIP commit.
synology LE works, but synology webdav using that LE cert does not
yet work. there appears to be some cipher mismatch issue by default.
