- Add an explicit service state=started enabled=true task so the role is self-healing if the unit is disabled or stopped, rather than relying solely on the restart handler.
- Default ddclient_protocols to [] so the template's for-loop no longer errors when the var is omitted.
- README: note service management in the tagline and document the new ddclient_protocols default.
- Template now emits `exec=` so ddclient_exec actually toggles dry-run (was documented and defaulted but never written to the config).
- Rename fw_login/fw_password defaults to ddclient_fw_login/ddclient_fw_password to match what the template reads; previous names were silently dead.
- Drop unused address/interface/command/skip keys from the ddclient_ipv{4,6}_detection defaults — the template only reads method/source/skip_pattern. Fix the `# Method:` comments to list the v4/v6-suffixed names actually in use.
patrick
hiperman