This patch should create the inital Admin with the correct role.

Reference / Cherry-pick from:
https://github.com/mastodon/chart/pull/1/commits/3bf6c8af2d13114d1954d33931bf90886eb6ded2

Adjusted from upstream commit:
https://github.com/mastodon/chart/pull/1/commits/518634b4ab78f4bafa73b30c7b9ec87df828e5a7

This patch finally upstreams the currently used terraform setup for the
gateway machine at Hetzner. This should provide better insights into the
infrastructure and help people to learn from the setup.

It also helps to keep the automation level high and using terraform more
actively to keep these servers running.

The gateway server is the frontend reverse proxy for all web-originating
traffic and provides a simple setup, that runs a L4 HAProxy to forward
all traffic to the Kubernetes cluster, where it's terminated and handled.

This allows to keep the cloud server stupid and not being able to
compromise a connection (at least not more than any other middlebox).
This keeps the trust away from the cloud provider.

This patch implements a trivial syncthing setup, which should provide a a good place to sync data to.

This patch tries to use the GitLab CI feature that allows to
detect changes from a specific branch, in this case the default
branch, and this way hopefully reduces the amount of
unnecessarily build images that originate from gitlab starting
a full build by default on a new branch.

References:
https://docs.gitlab.com/15.4/ee/ci/yaml/#ruleschangescompare_to

This patch adjusts the room climate dashboard to use a shared
cursor to make it easier to cross reference temprature and
humidity. throughout time.

This patch fixes the problem, that prometheus keeps alerts
around in the pending state, before actually triggering an
alert as "firing" this the query-exposer has to account for
that in order to be useful.

Since in the Kubernetes manifest the args are already escaped
quoting a string will just send the quotes to the application,
with the result that they cause problems, e.g. when suddenly
starting to query a string, instead of valid promql grammar as
happening here.

The "low temprature" alert should obviously check for
tempratures BELOW a threshold, not above.

This patch moves the query from the query-exposer to the a
prometheus rule in order to reduce complexity for the
query-exposer.