At the moment local clone is completely borked and I have no time to fix
it tonight.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

This option is no longer required (and it causes conflicts) on Django
versions >= 1.8.

This is handled in devtools now.

This also adds location / {} blocks to make the letsencrypt include
work.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

BBR needs to be used with the fq qdisc, so allow configuring the default
qdisc and set it to "fq" on soyuz (switched to BBR in a previous commit).

This is not in group_vars or similar because we currently do not use it
in playbooks and it may not be the best idea to expose it that much.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Also set it to BBR on soyuz because it seems to greatly increase my
download speeds from mirror.pkgbuild.com; example download results:

   CUBIC: 60.75M in 28s (2.18 MB/s)
     BBR: 60.75M in 12s (5.12 MB/s)

BBR gets to my line's max rate very fast while CUBIC struggles and only
very slowly scales up. Not sure if my ISP is to blame but seeing as BBR
works so well, we might as well use it.

Template only for now. Deployed manually on luna, not yet integrated
with apollo.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Max files limit causes journald to be too agressive when cleaning up
old logs because it tries to stay under the limit. If there are enough
users on the system that won't happen and it will start removing system
logs way too soon (like after a few hours or days).

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Our ansible.cfg had some settings that were using the default values,
according to ansible documentation.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Uses the nginx config from here:
https://kanboard.net/documentation/nice-urls



Signed-off-by: Florian Pritz <bluewind@xinu.at>

The HSTS header is already added by nginx. If kanboard adds its own the
reply contains a header that contains max-age twice which is invalid.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>