infra/TODO.md

• nameservers for users
• read email for service accounts dmarc.report, postmaster email users, give access to infra users
• allow infra users to ssh into any machine in infra, regular users into their tilde account on himmel
• allow ufw and setup wireguard on himmel
• internal vpn for infra, figure out routing