removed comment line in ssh_config

Ciphers, Kex and MAC can be set via defaults.var

Disable SSLv3 in Dovecot imap server

Correct SMTP port number in mail autoconfig

Disable SSLv3 in Dovecot imap server to avoid POODLE vulnerability

Configure all Apache vhosts to disable SSLv3

Use openssl to verify the certificate

Using openssl is consistent with previous instructions and has the notable
virtue of being cross-platform.

Merge pull request #302

Vagrant provisioning currently fails without irc_timezone set in
vars/testing.yml.  This is probably due to changes introduced in
al3x/sovereign#300 to permit the znc timezone to be configured.  The
file vars/users.yml already has a TODO entry for irc_timezone.

Use native Ansible modules in the OpenVPN role to seed the serial and database files

Fix privilege error in monit tomcat6 config

database files.

The tomcat6 user doesn't have the right privileges to run the
/etc/init.d/tomcat6 script.  Removing these lines allows monit to
restart tomcat if it stops for any reason, and makes the tomcat6 monit
config more consistent with other monit configs elsewhere.

Merge pull request #300

Since 1.0, znc has allowed you to specify the user's timezone:
conveniently, in tzinfo format.  This allows the user to configure and
specify that timezone.

This matters because it affects the timestamps that znc issues when
playing back the buffer after a disconnection.

for more info see:
- http://wiki.znc.in/ChangeLog/1.0#Timezones
- http://wiki.znc.in/Configuration

There is also a zpush_timezone configuration option, which could at some
point be unified with irc_timezone into a common configuration item.

Add instructions for making crypt salted hashes using Python and passlib

Quotes removed around salts and hashes in existing examples because, AFAIK,
base64-encoded strings contain no characters which must be escaped in YAML (the
following are not in base64: '!', ':', '|', '>').

Closes #293

ZNC: don't make install if configure or make fail

ZNC module compilation can fail on memory-limited systems, causing ZNC
to not work properly. But even after the failure, make install still
creates /usr/local/bin/znc. Thus Ansible would skip the ZNC build and
install step on future runs, despite ZNC not being correctly installed,
causing the playbook to appear to complete successfully and requiring
manual troubleshooting.

Merge pull request #291

Merge pull request #290

Installs python-lxml as a newebe dependency.

Related to issue #289 .

Merge pull request #287

Merge pull request #288

Resolves #114

This commit moves the monitoring role to the bottom of site.yml so that
it is executed after all other roles.

This is needed because the monitoring role conditionally installs Monit
configuration file based on whether some other packages have been
installed or not (such as ZNC).

This patch also adds a comment to the "monitoring" entry within the
"roles" list and a `roles/monitoring/README.md` file telling users why
the monitoring role has to come last.

Resolves #284

Merge pull request #283

The other services monitored by the default monit task should always be present except in very custom setups.

Resolves #255.

New release of roundcube-carddav

Resolves #266.

Merge pull request #280

Merge pull request #281. Awesome.

Merge pull request #282

Merge pull request #278

refs #278

- Add test
- Fixed Newebe's playbook failing on first run on a fresh Debian 7 VM
- Restart supervisord on changes
- Security: Use /usr/sbin/nologin as login shell for newebe user
- Speed: Consolidate all 'apt' entries into one
- Strip trailing whitespaces
- Update to take advantage of apache2_module from Ansible 1.6
- Use file path=... state=absent instead of "rm" command to delete files