Anatoliy G.

inFirewalls

We want to allow port 5432 only from servers in the app group, without listing every private IP.

inFeatures

Our CI token can delete any server. We need tokens that are read-only or limited to one project.

inVolumes

We take volume snapshots with a cron job on every VM. A built-in schedule (daily/weekly) with retention per volume would remove a lot of scripts.