I'm pretty proud that I've avoided using any #cloud proprietary lockin on this. I want it to be portable onto any machine, bare metal or VMs. To be more precise, there is an agent that runs on any # of machines, which talks to the API and handles provisioning of new relays using systemd-nspawn.