If you use containers with health checks (including with curl), you need to tell docker (or podman) to provide an init process to reap child processes. For docker that means providing --init when running a container. It's a pretty common problem.

Modal dialogs. Making it impossible to move the window or reference something else in the same interface.

Toasts on android. No idea where the toasts came from and no way to look up what the toast said after it disappears.

Historical reasons I believe and also because packages are signed. Though there's been a few vulnerabilities that have made TLS (IMHO) a necessity. As well as just preventing snooping. Modern debian and apt should support TLS out of the box now.

Unlikely to be the problem, but I'd switch the config to use https URLs.

Do you have an example of the incorrect metadata external ids if they are set? And what is the format of the files that was midentified?