Raise a warning if puppet is disabled for 4h and a critical alert
if it's disabled for more than 24h

Related to T2566

This also renames explicitely the script from swh-puppet-master-clean-certificate to
swh-puppet-master-decomission.

This uninstalls the old script to install the new one.

Related to T3027

Related to T3027

This makes the Sign in button "Sign in via Software Heritage", instead
of "Sign in via OAuth2".

It will allow to regroup the apache's logs by application independently
of their vhosts, for example there is 2 different vhost for the webapp
in production.

Related to T2787

The bytes field also needs to be converted to an integer
to be able to compute sum or average operations on it

Related to T2787

Related to T2787

This disables user registration using email addresses.

It will add some visibility on the monitoring

Related to T2787

It will allow to monitor the front responses time per requests.
The conversion of the request and duration fields to integer is
mandatory to use them in some aggregation.
The ES indexes will have to be reindexed if we want to have the full
history.

Related to T2787

- fix a hardcoded path to the apache log file, filebeat was not reading
  it when the vhost name is not webapp.
- add an `environment` field to easily identify the origin of a log entry
- add a `vhost` field to easily regroup the logs of a vhost (can be
  also added on varnish side)

- ensure java is installed before trying to install logstash as
  the postinstall script is failing if not
- add missing dependencies and notification between the logstash
  package, the configuration and the service
- Restart the service in case of notification change
- code format

Related to T2787

The out of memory situations continue...

Git loaders are currently restarting in a loop because they're running
out of memory...

It will allow to update the storage locally without interrupting
the service on saam

Related to T2993

The last increase was not sufficient, let's go one step further

Related to T2976

This defined a vhost which explicitely refuses access when an unknown vhost is detected.

This will allow to fix the current caveat, access to "hedgedoc" (default vhost) from
http(s)://swh-rproxy3.inria.fr or from the associated ip.

The other vhosts are still responding appropriately.

Related to T2962

Related to T2978

and reformat the file

The threashold was choosen regarding the duration of the previous
tests. Most of the time they are aroung ~300s

Related to T2976

- Add a base scheduler manifest that will be used for all the scheduler
  related services
- Move all the scheduler related
  configurations (backend/listener/runner/archive) to an unique
  scheduler directory
- Cleanup the old files
- add missing dependencies on config directory
- few reformats

Related to T2978