refs sysadmin#17988

refs sysadmin#17988

refs sysadmin#17988

refs sysadmin#17988

see tails#18953

This reverts commit dae4754e.

This service uses a dynamic user, we need an alternate way to protect
the file.

That file contains the Mirrorbits RPC password, so it should only be
readable by members of the `mirrorbits` system group.

As requested by sajolida on the tails-sysadmins@ list.

See: tails!1007

Now that there's a separate Weblate module, it makes more sense to
manage such config in hiera so multiple Puppet modules can have access
to the same data.

refs sysadmin#16958

refs sysadmin#16958

refs sysadmin#16958

Note: cleanup of hooks, remotes and clone will be made manually.

refs tails#18263

It's been superseeded by the CI config in the puppet-weblate module:

    https://gitlab.tails.boum.org/tails/puppet-weblate

refs sysadmin#16958

Use the new module:

    https://gitlab.tails.boum.org/tails/puppet-weblate

Keep the staging website and reverse proxy configurations around because it depends
on our current legacy config.

refs sysadmin#16958

refs sysadmin#17978

refs sysadmin#17972

refs sysadmin#17792

refs sysadmin#17792

Such configuration is being moved from Hiera to Puppet manifests, as
they're common to all isowokers.

refs sysadmin#17972

otherwise, build works but it's still considered to fail, which lead to
no test being run