preparing for extra images
setup /run directories during build, not run
ssh host keys are stored under /db, not /www/keys, to avoid being subject of the main data backup
MySQL backup stores only non-system databases and users.

This allows to restore into new db instance without interfering with system tables. In addition, the MySQL root password is generated during initial DB setup avoiding and is not needed to be preserved between db instances.
image with rsync daemon for backup
patch for fedora host to enable backup login

This adds hippyru-backup account to the host that can only be used to connect to rsyncd port from the backup container. This is an alternative to running own ssh inside the backup container.That requires an extra port to expose on the host and the backup client may not be able to connect to non-default ssh client due to the firewall restrictions.
support for building/restarting the backup container