- Opt-in access logging (off by default for privacy) - Configurable relay idle-timeout (default 600s) - Web UI caches all assets in memory at startup - deb: web assets are conffiles; service auto-starts on install, restarts on upgrade, stops on removal - systemd: LimitNOFILE raised for high connection counts - clang-format style + CI format gate