Don't forget Let's encrypt in TLS block

Already done as a part of D1970

Deploy redis now

New containers roadmap is to wait Fedora CoreOS or a RHEL downstream before to provision and keep CentOS meanwhile.

Use require to set order, remerge zfs blocks (require can solve the state order, previous require block was an onchanges actually)

zfs allow should occur when user is created

tank → zfs_tank

Plan is to move nasquenautes to 3005 as not currently deployed (mediawiki is)

Don't hardcore arcology as tank name

Allow to replace /usr/home by /home

FreeBSD uses /usr/home, but other OSes can directly use /home instead (e.g. Linux).

Migrating existing home directories

zfs allow isn't currently available in salt.states.zfs, and it's not really a problem to run again the permission command, so probably a cmd.run with require state to the ZFS create dataset operation.