New host with different interface names. Some updates for OpenBSD 7.6.
While I'm here, set the correct time and date for the OpenBSD bootstrap
role so that things like OCSP stapling work.

This reverts commit d47ea572.

- Mark the Synapse data volume for snapshot by `dvb` (it just a bunch of
  files anyway).
- Do weekly backups of the database.

Don't fail if there are no Docker volumes to backup. When running
manually it makes sense, but in the scope of a Cron job, the job fails
on hosts that don't have volumes marked for backup which is just noise.

Same as the previous commit.

Get an email for failed CSRs.

Seems unmaintained and fails to run with Python 3.12.

Rather cool. I've seen it before and had it on my todo list.

Use GBM and remove X.org. Some small updates too.

Forgot the rules to only run when needed.

If the clock drift is too big (I've seen a month) then certificate
validation fails and fetching updates fails.

Fix the SpamAssassin error: `HELO does not match SPF record`.

It breaks the Let's Encrypt renewal workflow.

My SSH config uses port 443 which is great for breaking out from
restricted networks, but not so great when restarting HAProxy and the
SSH connection breaks during an Ansible run.

Remove services that have been decomissioned.

Use the HTTPS port so I can break out from restricted networks.

HAProxy is used to inspect the SNI and route to the correct backend
without needing the SSL certificates and keys. Because it opens a new
TCP connection, the source IP at the other side is always the router's
internal IP so we can't filter there based on the source IP.

Maybe this will help with finding other users.

It's not part of the listen directive anymore, it's now a separate
directive.