BBR needs to be used with the fq qdisc, so allow configuring the default
qdisc and set it to "fq" on soyuz (switched to BBR in a previous commit).

This is not in group_vars or similar because we currently do not use it
in playbooks and it may not be the best idea to expose it that much.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Also set it to BBR on soyuz because it seems to greatly increase my
download speeds from mirror.pkgbuild.com; example download results:

   CUBIC: 60.75M in 28s (2.18 MB/s)
     BBR: 60.75M in 12s (5.12 MB/s)

BBR gets to my line's max rate very fast while CUBIC struggles and only
very slowly scales up. Not sure if my ISP is to blame but seeing as BBR
works so well, we might as well use it.

Template only for now. Deployed manually on luna, not yet integrated
with apollo.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Max files limit causes journald to be too agressive when cleaning up
old logs because it tries to stay under the limit. If there are enough
users on the system that won't happen and it will start removing system
logs way too soon (like after a few hours or days).

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Our ansible.cfg had some settings that were using the default values,
according to ansible documentation.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Uses the nginx config from here:
https://kanboard.net/documentation/nice-urls



Signed-off-by: Florian Pritz <bluewind@xinu.at>

The HSTS header is already added by nginx. If kanboard adds its own the
reply contains a header that contains max-age twice which is invalid.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

This behaves better with non-C compilers, where we do not provide any
environment FLAGS.

It does add -O3, but I think this can be excused as an upstream choice.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

At http://www.archlinux.org/check_network_status.txt (no https)

Instead of looking at the access time of the dirs; that one is
useless for cleaning.

The tasks that use variables need them to be at least defined,
even if empty, to be able to run. Added some defaults.

When using when: on ansible, it already checks if the variable is
set or not. But the variable must still be defined.