Looks good, some minor changes needed.
Fri, Feb 21
Done manually for testing on Dwellers, but this creates the question about how to manage the wildcard certificates: should we share account and provision them in the acme config files on each server? does acme would follow several cname with contradictory information?
Requires py37-GitPython (map.jinja offers a packages dictionary to get the py37- prefix)
Thu, Feb 20
You can explain:
$ ssh dwellers sudo nginx -t nginx: the configuration file /etc/nginx/nginx.conf syntax is ok nginx: configuration file /etc/nginx/nginx.conf test is successful
+node.get_ipv6_list to get 
Drop TLS for fallback (we'll add it back later with wildcard domains)
Wed, Feb 19
Enable PEAR so we can get pecl command. -sqlite-devel
+ pecl install APCu
/bin/sh: 1: pecl: not found