Playbook for taking DECNET into the wild on geographically dispersed
VPSes with management bound to tailscale0 and decoys on the public NIC.
Covers bind cheat sheet, ACL recipe, firewall belt-and-suspenders,
SWARM + UNIHOST walkthroughs, live-QA hardening checklist, and
troubleshooting.