Some apps may require others to already be installed

This is weak protection against crawlers

This makes it easier to potentially replace apt-get in future

This seems to cause problems when building images

Don't enable port 443 on ipv6 for nginx. This seems to cause problems which cause web server down time

Retire support for keybase.io gpg version 2.x doesn't appear to work well with it, but beyond that there's the really concerning issue that the site asks users to upload their *private keys*. Even if the private keys are client side passphrase encrypted this gives that site a full time opportunity to crack private keys. Even if they don't so that, a leak happens and suddenly letter agencies have your private key. Not a good way to go.

Obnam restores with the full path. duplicity restores with the relative path

This isn't ideal because it means you can't set up the system from an onion address