Overhaul how variables are set so that testing environment-specific variable overrides are possible; expand logwatch configurability (and put the config file in the right place :/).
Passwordless sudo for the deploy user.