Another thing we hadn't considered is how this works with Tor. I guess one of the ejabberd nodes/VMs should be designated a Tor hidden service role, with the privkeys stored in an encrypted data bag. It's enough to connect to just that one from Tor then.
Here's more information about what virt-backup does under the hood, or for doing it without the tool: https://wiki.libvirt.org/page/Live-disk-backup-with-active-blockcommit
Thanks! That's a leftover from the Mastodon recipe, and the systemd resource didn't exist when I wrote that.
Can’t find a way to edit that comment since it’s a review
Yeah, I hope they fix that (if it's even still the case in the latest release).
I forgot another thing which would make a lot of sense: moving external account authentication to akkounts, and perhaps even adding more of it.
I.e. the current GitHub auth in kredits web would be easy to add here using OmniAuth. And anything there's an OmniAuth module for would be easy to add as well.
This would mostly be for updating your contributor profile, and is probably still most useful for GitHub for now.