roles/postgres: Create a new postgres_ssl_hosts variable that will be used to determine which hosts can login using ssl

roles/archweb: Memcached service.
roles/postgresql: Initial work on SSL support.

roles/archweb: Make archweb install and use it's own memcached service, running as the archweb user and using a socket.

This boils down to changing the comments and commenting things that are
default anyway, to reduce the distance to the packaged config.

roles/postgres: Added default values to the max_connections and shared_buffers variables.

roles/security-tracker: Idempotency fix. No need to enable and start a service when it is started by a timer.

playbooks/apollo: Added the sudo role and the security_tracker role. Also changes the posgres to include the new variables.
roles/postgres: Merged the new configuration (from 9.6) and added two new variables for making it easier to test the role on a vm/container.

roles/security-tracker: changed the secret key and added a initial make setup that creates the database.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

This reverts commit 4e0074f177622cf825c343b63db5d1b51b1ec9f4.

The commit also adds the phpinfo role for testing purposes.

I don't use that machine to do Arch stuff; no need to have its key here.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Suppress nginx's stdout/stderr because it's not possible to stop nginx
from logging to stderr once it has been enabled, and it's enabled by
default (via compilation option).

Move the error_log to the root context as it applies to more than http.

The logrotate setup installed by nginx doesn't actually rotate the text
log files we've been using.

planet and sources roles still install configs that use text log files.

This is currently only covered by playbooks/all-hosts-basic.yml

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>