Copy everything from how the issuer does it.

The Blackbox exporter can be used to check whether some services do answer;
We'll use it for our HTTPS endpoints.
Especially handy is it's checking for TLS cert expiry.

Epiphany: Systemd reads more than a single environment file. This
lets me improve the file naming much.

Unfortunately still prints a bold warning on deployment.

This will store the supposedly secret URL in the Nix Store and
print a honking big warning about it.

This should let it work for both enabled and disabled configurations

... we'll need this later for the TLS cert.

update the localdev grid's secrets and other configuration to reflect this

testing and production are broken by this commit since they have not been
updated similarly

update the localdev grid's secrets and other configuration to reflect this

testing and production are broken by this commit since they have not been
updated similarly