New environment

Pick the services this environment runs

Anything left out can be attached later without a rebuild.

Every selected service is provisioned inside the same private network. Nothing is exposed publicly until you add a route.