Better limiting on nextcloud, crossed things off todo.

TODO.org

@@ -209,7 +209,7 @@
    - Surname attribute: =sn=
    - Email attribute: =mail=
 
-** TODO Verify Nextcloud LDAP app configuration
+** DONE Verify Nextcloud LDAP app configuration
    After restoring the Nextcloud volume, check:
    Admin → LDAP/AD Integration — confirm the LDAP Users and Contacts app is configured.
    If reconfiguring from scratch, use the same settings as Gitea above but with
@@ -232,7 +232,7 @@
 
 * Backup Strategy
 
-** TODO Configure S3-compatible automatic backup target
+** DONE Configure S3-compatible automatic backup target
    Update =homey.backup.repository= in =hosts/pi-main/default.nix= to point at
    your S3-compatible bucket (Backblaze B2, Wasabi, AWS S3, etc.):
    #+begin_src nix