Nebula-Sync, Pi-hole v6 API keys, and the app_sudo teleporter gotcha
After rotating credentials, Nebula-Sync started failing with auth and teleporter errors. The replica needed webserver.api.app_sudo enabled, not just updated API keys in the env file.