Regarding my question about mail failover, I decided for now that receiving mail (ie, making sure no mail is getting lost) is more important than sending mail (i can always use another external smtp for that) so I've configured a small postfix setup on my hetzner node and configured a secondary MX record.