I agree completely and that is the goal plus the lemon_setup.sh could be a systemd file on its own.
its a bit convoluted but in order to understand how all the system works (ie, podman systemd etc) is to get it working then to get it working as rootless and finally as a module.
i think ive got it working now in rootless without volumes
Using volumes for some reason didn’t work with systemd but thanks to @davidep How do you get ldap or samba details - #2 by davidep I should be able to auto generate the ad/ldap config part