add some kind of reachability check

[samthomson]

we have a dns check, but some services weren't responding due to an external ssl/tls config (eg cloudflare not full on relayk.it relay/blossom).
ideally this could be surfaced to a user, so they know there's an issue.