Activate FAIL2BAN recidive jail

Add alias for abuse@

don't install bind9-host when setting hostname

also remove an incorrect comment

fail2ban: whitelist our machine's public ip address so status checks dont cause bans of the machine itself

make the system SSL certificate a symlink so we never have to replace a certificate file, and flatten the directory structure of user-installed certificates

GCE installs some Python-2-only boto plugin that conflicts with boto running under Python 3. It gives a SyntaxError in /usr/share/google/boto/boto_plugins/compute_auth.py (https://github.com/GoogleCloudPlatform/compute-image-packages).

Disabling boto's default configuration file prior to importing boto so that GCE's plugin is not loaded.

See https://discourse.mailinabox.email/t/500-internal-server-error-for-admin/942.

Typo on 'weirdly'

use /dev/urandom for roundcube/owncloud key generation, see #596, partially reverts #115 (69f0e1d0)

use /dev/urandom for DNSSEC key generation, fixes #596, partially reverts #115 (69f0e1d0)

ensure /dev/urandom is seeded with a blocking call to /dev/random and using Ubuntu's pollinate servers

add comments about how openssl generates random numbers for genrsa and what could create a perfect storm to make the key not random

see #596

the >'s in pip install package names might be interpreted as shell redirects and was creating files name '=1.0.0' '=2.0.0' and '=1.0.2' (I'm not sure how this was ever working)

the explanatory text for setting up secondary nameservers was hidden until a secondary nameserver is added, so that wasn't helpful

Change Z-Push log level to error

Add log rotation to z-push

During the backup you will get login failures which will confuse iOS

During the backup you will get login failures which will confuse iOS, so it is better to stop php-fpm as well

Change 'Wosign' to 'WoSign'