openvpn package resource needs to be ensure => latest to accommodate upgrades

Change-Id: I8caad9b4ac15dcce8ab74ad6d22dd6ad9f6efb14
add known issues, making this the canonical place, which we will bring
over to the website, when necessary (#4373)

Change-Id: I296dd9d3cee1b84bd141cbf63ccaecea24916cc1
added simple shorewall whitebox test (close #5649)
openvpn server config: script-security should be "1", since we don't need "2"; add tcp-nodelay to tcp servers.
Revert "update cipher configuration for openvpn to use the IANA name"

This reverts commit ae50675e9095750cee9810237fb6b9f60030dae4.

Older openssl implementations (wheezy, android, others) aren't able to
parse this newer string, so reverting to the deprecated name until we
are sure the support is there
use hash for provider service levels

We want to access service levels by means of the id stored in the user record. With a hash we don't have to loop through all elements to find the one with a given id and still can use arbitrary strings and do not rely on the order of the array.

Also it's the format the webapp is expecting right now.
revert accidental change to webapp config template
change rsyslog pin from leaps debian repo to backports (fixes #5533)
fixes #5533 and updates rsyslog Merge branch 'rsyslog_backport' into develop
static: pin amber version to 0.3.0
fix bug with empty tor families
changed the default service levels to be more minimal, because it is currently impossible to entirely overwrite the service.levels hash.
add support for webapp on subdomain
added support for environmentally scoped services and tags, when using latest leap_cli.
fix resolv.conf on virtualbox

virtualbox sends the domain with the dhcp-answer.
If the wrong domain ends up in /etc/resolv.conf bigcouch fails.
fix haproxy config if webapp and mx run on the same host

the problem was, that both site_mx::haproxy and site_webapp::haproxy
declared the same resource.
I fixed it by moving that resource to site_haproxy.
Since that gets included by both classes, everything works like
a charm
remove old classes

site_mx::haproxy and site_webapp::haproxy only
included site_haproxy. They didn't do anything else.
So just include site_haproxy in manifests/init.pp and
remove the unused classes
Move rsyslog preferences snippet to site_apt::preferences::rsyslog, to
group it with the other preferences snippets

Change-Id: I83928c6b82cd6218a80c95475729cb57f146ff85
Install wheezy-backports version of unbound, this is necessary to solve #2328

Change-Id: Ie28de8d3f7a8c8cf52ce30365379a476d48dc88b
lint cleanup of site_config::caching_resolver

Change-Id: I3f6a4db26e064a520a08822cf23fc3288b31af62