Comment by jo-m

I have a somewhat similar setup on the application layer (rootless podman, quadlet), but it's NixOS, and there still is SSH ;)

https://github.com/jo-m/fluffy