Generate a bashrc snippet with sensitive environment variables exported.
Get them from the Keepass database. For now, just the GitLab token.

The duplicate hooks were because identify wouldn't mark it as a shell
scrip. It does now so there's no point in checking it twice.

- Update hooks.
- Add .gitlab-ci.yml linter hook.

- Internal IPs.
- Remove Bastion, host was removed.

Replace with Nextcloud notifications.

The WM Class isn't set, so in Elementary OS when the application is
launched there are 2 icons in the dock.

The upstream launcher has the WM Class setting, no need to carry this
anymore.

This reverts commit 29cef1b8.

TIL about app passwords in Google. Now I can use Geary again.

That's usually what's meant. The broader approach has unexpected
behavior (and doesn't always work).

The version on Flathub doesn't work with OAuth authentication for GMail.

No longer requiring a 0.11.x Terraform for Endless.

Closing it does nothing, many processes doing god knows what linger on.
I should try running it using bubblewrap.

This reverts commit bf11adab.

Patchbay seems to be up now.

- Replace the RSA key for GitHub with an ed25519 one.
- Refactor the security configuration in 99_default. Make them easier to
  maintain by sepcifying what *not* to use.
- In the OpenSSH 8.5 release notes it is mentioned that the ssh-rsa
  signature scheme will be deperecated. Be proactive and disable it.
- Replace the RSA key for *.shore.co.il with a ed25519 one (keep to the
  ecdsa so as not to just a single key). Keep it for ea6350, Dropbear in
  OpenWRT 19.07 doesn't support other key types.

It's handled better in the toolbox-build repo.