Gitlab CI manual deployments

Vault for managing Ansible secrets and SSH keys
- We can use it for directly manage or as a source of SSH key's passwords.
- Integration with GitLab CI
ARA, for record both CI and manual deployments:
- ARA Records Ansible | ara.recordsansible.org
Gitlab
- Write a template with the deployment job
  - Only runs on manual trigger
  - Maybe, we can also require a env var to be defined. Then, we can schedule a pipeline with that env preconfigured and trigger it manually.
#task Self host Vault
#task Self host ARA
#task Configure Vault for Ansible Secrets
#task Test if Vault-managed SSH is compatible with long-term keys
#task Create a docker image for make deployments (Ansible, ARA config, ...)
#task Write the .gitlab-ci.yml template
- #task Retrieve secrets from Vault
- #task Deploy: notify both success and failure