apache sites: Wrong ownership and filename

Merge pull request #244

Merge pull request #234

Merge pull request #245

/etc/apache2/sites-available and old (dangling) symlinks in
/etc/apaches/sites-enabled.
Also, remove unnecessary apache2 restart after creating a new
virtualhost but not yet enabling it.

Add note about editing hosts file to README

* Postfix: Trusty comes with postgresql 9.3, not 9.1
* owncloud 6.0.1 is part of the distribution, doesn't require opensuse repository
* owncloud requires libapache2-mod-php5
* uses prosody repository that matches the ansible_distribution_release (trusty, wheezy, etc)

The virtual site files must be owned by root (serious security issue)
and they must have the .conf filename suffix for a2ensite on
Ubuntu 14.04LTS (apache 2.4.7).

I guess the .conf appendix is a change introduced in apache 2.4.
This change should make it backward compatible with apache 2.2.

On Ubuntu 14.04 LTS, a2ensite automatically appends ".conf" to the filename it looks for in /etc/apache2/sites-available/
Therefore, the file "/etc/apache2/sites-available/roundcube" must be renamed to
"/etc/apache2/sites-available/roundcube.conf".

Security issue:
This file must be owned by root, otherwise it is a huge security issue (User www-data could modify the file and get root at next restart of apache).

Merge pull request #227

Conflicts:
	README.textile
	site.yml
	vars/defaults.yml

Merge pull request #239

Merge pull request #238

+ make lines < 80 chars

Removed unused status checks on UFW

Remove ahbl as it's being winded down

http://ahbl.org/content/changes-ahbl

Fixes #232

cgit dependency missing

fixes #156

fixes #156 by adding the -L flag, as suggested by @ventolin

Only install Tarsnap when requested version is missing

Fix README to reflect changes in #176

add cgi module for cgit

Checks if the exact version of Tarsnap is already installed and, if so,
skips the download and build steps.

Change instructions for creating the tarsnap key to generate it at "decrypted_tarsnap.key".

Make sure that only ZNC can read its certificate

To bring this certificate in line with how those in ssl.yml are managed.

Update OpenVPN role to generate self-contained "unified" .ovpn profiles