add LWRPs for application deployment
gitlab: cleanup + ci support
deploy: fix minor issues
openssl: create and deploy wildcard certs for infrastructure domain
systemd: fix a bunch of chef warnings
update production env