Add self-signed SSL cert section to README
Change database to PostgreSQL

Remove all configuration for MySQL and configure PostgreSQL as the main
database.

All *_mysql_* options have been changed to *_db_* options.

Postgres requires the database user to have a password in order to
connect via localhost. The db_admin_password option is used to set the
password of the admin user (usually postgres).
Convert all varchars to text

PostgreSQL works similarly with varchar and text columns. Rather than
limiting the amount of characters a column can hold simply use text
columns.

Because this sql is now PostgreSQL specific, there's no need to maintain
what was set in the mysql settings.
Merge pull request #129 from ssoriche/postgres_only

Change database to PostgreSQL
Reflect change to Postgres in README
Merge pull request #126 from yuvadm/self-signed-ssl

Add self-signed SSL cert section to README
* Made the OpenVPN port and protocol (tcp/udp) configurable
* Added 'cipher' and 'auth' lines to the generated client configs
Merge pull request #131 from jlund/openvpn-improvements

OpenVPN improvements
Changed port to reflect MySQL -> Postgres change

Updated the default port to reflect MySQL to Postgres change (port 3306 to 5432)
Merge pull request #132 from jplock/patch-1

Changed port to reflect MySQL -> Postgres change
Enabled POP3S for old-timeys who dig that

added dovecot-pop3d
allowed in the firewall
monitored with monit
added relevant tests
Enabled unattended-upgrades

This works on Debian/Ubuntu only.

There are similar packages for other distributions, but they still
need manual configuration. It seemed better to go for the common
denominator. unattended-upgrades is usually installed by default
anyway, so we are just reinforcing best practices.
Merge pull request #134 from tilsammans/unattended-upgrades

Enabled unattended-upgrades
Merge pull request #133 from tilsammans/pop3s

Enabled POP3S for old-timeys who dig that
added pop3s and imaps ports to fail2ban.

Otherwise only pop and imap (un-secured) are blocked.
Which we don't use.
Merge pull request #135 from tilsammans/fail2ban-imaps-pop3s

added pop3s and imaps ports to fail2ban.
extract NTP logic
make NTP pool configurable

use the world-wide pool by default, but specify north-america in
user.yml. Also, documentation. This way Sovereign will still behave the
same, but the NTP servers can be changed when desired.
use the geo located ntp servers for everyone

still allow people to override them in defaults.yml
Merge pull request #138 from tilsammans/ntp

Make the ntp pool configurable