Service password generation: use base64 instead of hex encoding, double size of password (128 bytes -> 256 bytes).
Add log rotation to each package, via a reusable `include/logrotate` setup helper.