Also clarify a comment and remove an unneeded type check

Backup location and maximum age can now be configured in the admin panel.
For now only S3 is supported, but adding other duplicity supported backends should be straightforward.

see https://discourse.mailinabox.email/t/bug-present-for-ages/694/3

Some users report munin is broken because munin and munin-node disagree about the name of the machine. I think this occurs if hostname (used by munin-node) reports a different name than PRIMARY_HOSTNAME (which we put in the munin config).

Hard-code PRIMARY_HOSTNAME in munin-node.conf.

Fixes #474.
See https://discourse.mailinabox.email/t/404-not-found-on-admin-munin/623/24.

dont run network checks during upgrades since this is a bad reason to block an upgrade from going through

forgot a 'continue' statement
see 216acb0e
fixes #497

fix occ upgrade to not bail when occ returns 'ownCloud is already latest version' exit code 3, see #496

v0.12c

remove live dependency on Sourceforge

everything was already on master

use a temporary mirror for roundcube while Sourceforge is recovering from an outage https://twitter.com/sfnet_ops/status/622171668497076224

hard-code pyzor sevice URL because 'pyzor discover' is failing because Sourceforge is offline, fixes #496

use a temporary mirror for roundcube while Sourceforge is recovering from an outage https://twitter.com/sfnet_ops/status/622171668497076224

hard-code pyzor sevice URL because 'pyzor discover' is failing because Sourceforge is offline, fixes #496

Add TLSA record for SSL connections.

While not widely supported, there are some browser addons that can
validate DNSSEC and TLSA for additional out-of-band verification of
certificates when browsing the web.  Costs nothing to implement and
might improve security in some situations.

outgoing_mail_header_filters use local hostname and ip

Optimise FAIL2BAN jail.local

closes #476

Explicitly set the timings and counts for the dovecot jail rather than change the global [DEFAULT] and inherit it for this one jail. These settings are far too safe so a future PR should increase security here.