- [ ] BACKUPS BACKUPS BACKUPS

- [ ] nameservers for users
- [ ] read email for service accounts dmarc.report, postmaster email users, give access to infra users
- [ ] allow infra users to ssh into any machine in infra, regular users into their tilde account on himmel
- [x] allow ufw and setup wireguard on himmel
- [x] internal vpn for infra, figure out routing