This method uses Subjective Alternative Names (SANs) to get one
certificate for all the subdomains that Sovereign employs, whether or
not the user configured their site with the roles.

Make a clean distinction between Debian 7 and Debian 8.  Anticipate the
next Ubuntu LTS release (Xenial) that is planned for support.

Avoid using the Include directive.  Move most of the SSL configuration
to the global configuration and leave enabling the SSL engine to each
virtual host that wants to use it.

see: http://undeadly.org/cgi?action=article&sid=2016011414

resolves #453

Conflicts:
	roles/common/tasks/ufw.yml

Fixes #406

Thanks-to: 8e693b3db3

Conflicts:
	roles/common/tasks/main.yml

see: http://undeadly.org/cgi?action=article&sid=2016011414

resolves #453

Fixes #406

Thanks-to: 8e693b3db3

Move Apache task to their own file.

Report will print: "missing whois program"

Closes #343.

Helps with issue #120.

of the "encfs" tag. This allows the user to make encfs optional.
Helps with issue #120.

removed comment line in ssh_config

Ciphers, Kex and MAC can be set via defaults.var

On fresh installs of Debian 7.6, the current order of steps will lock you
out of SSH. This will enable UFW after creating rules for http, https, ssh,
and DNS. Fix comes from @Debugreality in issue #303:

https://github.com/al3x/sovereign/issues/303