This patch reduces the network access from the monitoring namespaces to
only prometheus.

The upgrade from postgresql-operator 1.7.1 to 1.8.0 failed due to
missing settings for CRD upgrades. This patch fixes it, but explicitly
configuring flux to allow CRD upgrades.

This patch introduces a postgresql exporter and adds a PodMonitor to
scrape the sources as expected.

This patch fixes the wrong identation of the `extraSecrets` key to make
it functional as expected.

It turns out, the `hosts` value in the matrix-synapse helm chart is only
for additional hosts. One is supposed to use `csHosts` and `s2sHosts` as
variables to properly utilse settings like `includeUnderscoreSynapse`.

This patch enabled _synapse paths to allow synapse specific SSO support.

This patch should fix nextcloud's own wrong perception of being
available over http instead of https.

This patch extends the nextcloud storage to provide allow more growth of
backups and more.

This patch adds an additional replica of the database, which should help
to prevent reduce risks of a single Database being down.

This patch adds various cert-mananger alerts and dashboards these are
inspired by uneeq-oss and monitoring-mixins on GitHub.

References:
https://github.com/monitoring-mixins/website

This patch introduces a Grafana dashboard for MetalLB.