The first time unbound-anchor is run the exit code is 1.

This reverts commit 49549b66.

It's complaining about missing modules but they exist. Also, it doesn't
find the requirements.yml file inside the Ansible directory.

It's been created by Ansible now since it's been used by multiple
project, all complaining that the labels are wrong.

This reverts commit a3ea3389.

I was the impression that soft updates improve reliability but in fact
they reduce it (had a couple of power outages and it would only boot in
single user mode and all of the partitions required an fsck).

Per https://zonemaster.net/en/result/472d8d42df31e2d8, implement _some_
of the recommendations:
- Limit AXFR availability.
- Raise some of the SOA values.

The Am I Live checks routinely fail because of it.

It's been decomissioned.

It overrides /etc/resolv.conf and I don't need it (I run my own DNS
resolver).

Also set the region, Am I Live is running in a region different to the
default.

- Update the Terraform documentation.
- Update Vouch.
- Cleanup the GitLab CI file.

This is a copy of the web-proxy-docker repo but the base image is now in
the [dockerfiles](https://git.shore.co.il/shore/dockerfiles) repo.

Faulty motherboard, good Asus support, new MAC address.

Because of the convoluted way I'm running tasks, there's only 1 host in
the play but the handlers are for the remote hosts. Run them even if
there's a failure to restart whatever is needed since the failure will
always be for the local host.

The ECS cluster and ASG instances.

Docker Compose changed the names of the containers a while back, update
the names in the playbook as well.

Backups across the different services have been changed. There are now
snapshots for each services with copies saved for a few weeks. All of
them under /var/backups. The backup script doesn't need to work around
btrfs subvolumes. Instead just snapshotting /var/backups and rsync'ing
to a removable media. The old script is kept in source for reference.

It's a good compromise between size and speed.

Instead of having the Docker package as part of the general utility
package installation.

Script, Systemd service and timer to backup Docker volumes marked as
such.

- Apply tagging to all included tasks.
- Restart the Docker service after updating the container restart
  drop-in, in case there are containers in need of a restart.
- Reload Systemd after updating the btrfs scrub and check units, simple
  omission.

New in OpenBSD 7.1, list services that are running but shouldn't (are
disabled). Send the list as part of the daily email.