- The serivice can be reached by other machines.
- The metrics cannot be reached by other machines.

[Copy pasta](https://whetstone.privatestorage.io/privatestorage/PrivateStorageio/-/blob/ca44204076983ce02fd3e0dacd940514e0821e23/nixos/modules/spending.nix#L130) - Thanks @tomprince!

Since !146, PaymentServer is proxied behind nginx, so there is no need to wait
for certificates or network interfaces before starting the server.

... so it can be used in the nginx config instead of duplicating the number

As per @jcalderone and @florian videoconf on 2021-08-06.

- Remove custom handling of Let's Encrypt certs, use NixOs' ACME
  integration instead.

- Use NGINX for TLS termination.

Jean-Paul Calderone authored 3 years ago and Florian Sesser committed 3 years ago

This causes NixOS to generate the systemd timer unit for us and saves us
having to explain a lot of subtle systemd features.

It does pin execution to midnight on Monday but scaling to handle load spikes
is Let's Encrypt's problem, I guess.

This causes NixOS to generate the systemd timer unit for us and saves us
having to explain a lot of subtle systemd features.

It does pin execution to midnight on Monday but scaling to handle load spikes
is Let's Encrypt's problem, I guess.

The nixpkgs fork already contains all of the changes our overlays were
responsible for - but as direct nixpkgs changes instead.

And test for (kind of) SSH availability

The new version of PaymentServer has incompatible changes that require this.