Since that describes it better, especially now that I have
moved the one line that wasn't about the VPN out of it.

Tom Prince authored 3 years ago and Florian Sesser committed 3 years ago

This includes the host-based metrics collector, and the VPN client setup (including key deployment).

Should be pure refactoring

This is my latest version of this, updated to work with the
packages in NixOS 21.05.

mkfs silently truncates "zkapissuer-database" to "zkapissuer-datab" and
everything falls apart.

The point is this is where PaymentServer's persistent state goes.  That
includes vouchers but might include more stuff too.

now all nodes load the issuer module so we can always supply issuer
configuration, where it makes sense to do so, even on systems where the issuer
is not going to be enabled.

if that sounds silly read the comment in default.nix

This lets other modules override these settings.

As per @jcalderone and @florian videoconf on 2021-08-06.

- Remove custom handling of Let's Encrypt certs, use NixOs' ACME
  integration instead.

- Use NGINX for TLS termination.

Also add my key to local secrets for the moment because otherwise localdev
grid cannot build itself :/

Discern make-issuer.nix from issuer.nix better.

Also put library code in a library directory

The new version of PaymentServer has incompatible changes that require this.