All the attribute does right now is, it will skip host allocation for
the service.

We run 'apt full-upgrade' whenever sources.list changes, so that the
rest of the playbook can execute with the new packages according to
float_debian_dist.

Fixes issue #117.

Since the repository name changes with the release, the previous
logic would leave float/buster around when float/bullseye was
installed. This change fixes that.

The debian/bullseye64 image does not start properly with graphics_type
set to 'none'.

Pass the host CPU type unchanged, explicitly disable graphics,
and other small tweaks.

playbooks: force 'yes' as a string for apt/upgrade

See merge request !231

Silence the following warning from 'apt':

[WARNING]: The value True (type bool) in a string field was converted to
u'True' (type string). If this does not look like what you expect, quote
the entire value to ensure it does not change.

Otherwise 'tabacco query' will time out on large datasets.

Extends the alert description with a link to the specific prober dashboard.

infra-prometheus: add alert for fs utilization > 99%

See merge request !224

Catch slow-filling filesystems (e.g. prometheus).

Switch to 'available' (to users) bytes to determine usage. This leaves
reserved space available for root and emergencies.

float-base-docker: cleanup Alias symlinks

See merge request !223

Add DNS tests

See merge request !227

Use "listen ... ssl" syntax for nginx vhosts

Closes prod#251

See merge request !225

Systemd will mark the docker-<service>.service unit as 'inactive' and
the ansible systemd module fails to 'systemctl enable' these units.

float-base-docker: remove Alias from units

See merge request !222

Unused and 'systemctl status' doesn't take aliases into consideration

haproxy: set logging options and install hatop

See merge request !221

Previously the 'log global' directive would be ignored

  [WARNING] 245/155647 (2615) : config : log format ignored for frontend
  'XXX' since it has no log address.

haproxy: fix configuration option typo

See merge request !220

The typo is no longer valid in haproxy 2.2

Use KillMode=control-group for systemd container units

Closes prod#241

See merge request !218

These will conflict with the new signed-by versions.

Use release-specific APT URLs for ai3 packages

See merge request !219

Bind-mount /etc/ssl/certs and ca-certificates onto all containers

Closes #112

See merge request !209

Part of issue #115.