rclone container
rclone/rclone, no exposed ports
mounts: /home/ubuntu/rclone-config → /config/rclone,
/home/ubuntu/obsidian-config/notes → /data (read-only)
background backup service, no web UI
vault-daemon container
vault-daemon:latest, network_mode: host
mounts: .../notes/Daemon → /daemon
background automation loop, no web UI