Previously the Transmission daemon and RSS fetcher were Systemd
services, now they're Docker container. Update accordingly.

- Split the sections to different files.
- Updates.

It's managed by ASpell and the whitespace keeps coming back.

Another step in avoiding secrets in cleartext in Nextcloud. Although the
whole drive in the Nextcloud host is encrypted, I find it better to not
have them in cleartext there (in case they ever find an issue with
Nextcloud itself).

Generate a bashrc snippet with sensitive environment variables exported.
Get them from the Keepass database. For now, just the GitLab token.

The duplicate hooks were because identify wouldn't mark it as a shell
scrip. It does now so there's no point in checking it twice.

- Update hooks.
- Add .gitlab-ci.yml linter hook.

- Internal IPs.
- Remove Bastion, host was removed.

Replace with Nextcloud notifications.

The WM Class isn't set, so in Elementary OS when the application is
launched there are 2 icons in the dock.

The upstream launcher has the WM Class setting, no need to carry this
anymore.

This reverts commit 29cef1b8.

TIL about app passwords in Google. Now I can use Geary again.

That's usually what's meant. The broader approach has unexpected
behavior (and doesn't always work).

The version on Flathub doesn't work with OAuth authentication for GMail.

No longer requiring a 0.11.x Terraform for Endless.