For convenience, now that a number of people are using libvirt.

The chdir attr on a non-existing directory causes the task to fail in
check mode.

sshca_sign: python3 compat

See merge request !50

log-collector: turn logrotate config into template

See merge request !48

Replace custom-errors.conf and site-limits.conf with a more generic
site-common.conf, that also includes HSTS and other top-level site
functionality.

The restore scripts will run only once per dataset and server. It is
an initial part of the eventual solution for rescheduling (small)
datasets along with their services.

Start by moving the docker run scripts there.

The command will automatically set the right user ID.

Reduce dissemination of user credentials

See merge request !49

Introduce a sub-role "auth-server-users" that is a dependency of
the sso-server role. Other auth-server instances won't have the
user credentials.

nginx: match cache directory permissions

See merge request !45

# Conflicts:
#   roles/nginx/files/nginx.service

log-collector: tunable retention days

See merge request !47

Haproxy ejabberd firewall

See merge request !46