removed redshift as it will be managed by a dotfiles repo for workstations; it will no longer be used by servers
added password management for local user byronsanchez on workstations
Added kernel update script to binhost

The kernel update script loops through each kernel configuration file in a 
specified directory, compiles a kernel as well as kernel mods, and packages them 
as a tarbz2. The kernel is then stored on the binhost server
so that nodes may updated their kernels using these tarbz2 packages.
Updated workstation use flags for imagemagick and libreoffice

- imagemagick use flags updated to support screenshot functionality
- libreoffice use flags updated to allow proper installation (otherwise, the 
  installation does not successfully complete)
Changed the media server host from sol to mira

The media server was previously hosted by sol. However, a workstation running 
the media server allows for seperation of server functionality (software 
development support) from user functionality (software development and misc 
user-specific services).

This will allow for cleaner backups (user backups and server backups can be 
logically separated) as well as improved organization across nodes.
Changed OpenVPN configuration from routed to bridged mode; minor updates

Bridged mode allows for client nodes to be on the same subnet as all other nodes 
on the target network. This allows the client node to access the various network 
services that is needed for software development.

This commit includes the following changes:

- new "vpn" network_type defined for base pattern for vpn bridge mode support
- mira client certificates have been declared
- bridge-utils package declared in vpn pattern
- dh parameter and ta key have been declared in vpn pattern
- iptables has been configured to allow traffic on virtual network devices used 
  by OpenVPN
- OpenVPN has been reconfigured to use bridged mode

Other minor changes unrelated to the VPN changes include:

- Python USE flags have been added to base pattern. Sqlite will be used by all 
  nodes for security (fail2ban requires it).
- Backup type has been changed in node mira. It is now declared as having type 
  workstation. This will be used to distinguish "server" backups from 
  "workstation" backups.
- iptables rules have been updated to allow traffic to the new MPD server for 
  MPD control (port 6600) as well as the MPD HTTP stream (port 12000).