- mediagoblin
    https://issues.mediagoblin.org/ticket/5455
    https://issues.mediagoblin.org/ticket/5441
- SSL with let's encrypt
- nginx default config: gzip, sendfile, autoindex, etc
- email...

- prosody
- a workstation target? eg, with "my" package list
- gh-mirror (?)
- import old cruft/README from nsa commissioning repo
- review/refactor to ensure "copy" and "templates" are force=no when
  appropriate (user-modifiable stuff)
- cgit: front-page README ("about"), logo?