WIP: add acmebot role

Implements configuration of the acmebot package we built. Some TODOs and testing left.

sentry/defaults/main.yml

@@ -6,7 +6,9 @@ sentry_user: sentry
 sentry_group: sentry
 sentry_db_name: sentry
 sentry_db_user: sentry
-sentry_db_password: null
+# sentry_db_password: null
+# yamllint disable-line rule:line-length
+sentry_db_password: "{{ lookup('passwordstore', 'db/{{sentry_db_host}}-pgsql-sentry create=true length=20') }}"
 sentry_db_host: null
 sentry_redis_url: redis://localhost:6379/0
 sentry_web_host: localhost
@@ -27,3 +29,5 @@ sentry_ldap_deny_group: null
 sentry_ldap_require_group: null
 sentry_ldap_bind_dn: "cn=admin,cn=Users,dc=example,dc=com"
 sentry_ldap_bind_password_lookup: ""
+# yamllint disable-line rule:line-length
+sentry_ldap_bind_password: "{{ lookup('passwordstore', sentry_ldap_bind_password_lookup) }}"