This secret is needed to allow login on graf using normal Lysator
accounts via keycloak on login.lysator.liu.se.

Generate a new keytab for Diskus with fewer allowed enctypes to see if
NFS against Linux machines work better. The old kernel in Rocky seems to
be causing issues.

Keytab generated with aes256-cts-hmac-sha1-96 and
aes128-cts-hmac-sha1-96 enabled.

The updated version of the letsencrypt module manages the nginx plugin
package by default.

Our code for managing the package (in profiles/manifests/letsencrypt.pp)
supports more distributions, so disable the module's management of the
package.

The eyaml packaged in Fedora is currently broken:

    $ eyaml
    /usr/share/gems/gems/hiera-eyaml-3.2.0/lib/hiera/backend/eyaml/plugins.rb:37:in `block (2 levels) in find': undefined method `dependencies' for #<Gem::StubSpecification:0x00007f8083b50a80 @extension_dir=nil, @full_gem_path=nil, @gem_dir=nil, @ignored=nil, @loaded_from="/usr/share/gems/specifications/default/abbrev-0.1.0.gemspec", @data=#<Gem::StubSpecification::StubLine:0x00007f8083b577e0 @name="abbrev", @version=#<Gem::Version "0.1.0">, @platform="ruby", @extensions=[], @full_name="abbrev-0.1.0", @require_paths=["lib"]>, @name=nil, @spec=nil, @base_dir="/usr/share/gems", @gems_dir="/usr/share/gems/gems", @default_gem=true> (NoMethodError)

                  dependency = spec.dependencies.find { |d| d.name == "hiera-eyaml" }
                                   ^^^^^^^^^^^^^
            from /usr/share/gems/gems/hiera-eyaml-3.2.0/lib/hiera/backend/eyaml/plugins.rb:34:in `each'
            from /usr/share/gems/gems/hiera-eyaml-3.2.0/lib/hiera/backend/eyaml/plugins.rb:34:in `block in find'
            from /usr/share/gems/gems/hiera-eyaml-3.2.0/lib/hiera/backend/eyaml/plugins.rb:31:in `each'
            from /usr/share/gems/gems/hiera-eyaml-3.2.0/lib/hiera/backend/eyaml/plugins.rb:31:in `find'
            from /usr/share/gems/gems/hiera-eyaml-3.2.0/bin/eyaml:10:in `<top (required)>'
            from /usr/bin/eyaml:25:in `load'
            from /usr/bin/eyaml:25:in `<main>'