The one rule: isolate the layer before you debug it. Drive, share, container, proxy, tunnel: each keeps its own logs. Pick what you're seeing; it checks from the bottom up and stops at the layer that's wrong.
0/8pre-ignition
Ticks are kept on this device only. The log stays open until the last one.
A starting stack in the Monstrosity's shape: Traefik watching Docker, NextCloud as the first tenant, and a Cloudflare Tunnel as the only door. Fill in your domain and where the shared pool is mounted.
docker-compose.yml
.env
then, in Cloudflare