Harley
b253d49afe
The stealth-browser fallback container was created by hand with docker run, so no rebuild could reproduce it and browser-profile state was discarded on every recreate. Declare it under virtualisation.oci-containers (docker backend) instead: - image camofox-browser:152.0.4-x86_64, pull = never (locally built, no registry) - ports 9377:9377 on 0.0.0.0 (ESP32 status dashboard probes it over the LAN) - volume state -> /root/.camofox so sessions survive a recreate - extraOptions --restart=unless-stopped, matching every other Docker workload - autoRemoveOnStop = false: --rm conflicts with --restart (docker refuses both) Verified: docker-camofox-browser.service enabled+active, systemd restart recreates the container end-to-end, /health + LAN 200, 15/15 REST checks.