Foreman » Installer

Fixes #37297 - Use SCRAM passwd encryption with PostgreSQL

PostgreSQL supports SCRAM encryption and PostgreSQL 14 will also default
to this. Moving to it sooner helps removing md5 from the system.

Fixes #37177 - Upgrade PostgreSQL to 13 on EL8

Fixes #36784 - Drop MaxRequestsPerChild tuning

Since puppetlabs-apache 9.0.0 this tuning does nothing, since the
parameter was dropped. For older versions it may also trigger
https://bugzilla.redhat.com/show_bug.cgi?id=2238325 and the default
tuning doesn't set it, so is likely unaffected.

Remove qpid tunings from tuning profiles

Remove unused key enable_katello_agent from foreman.hiera/common.yaml

katello-agent was deprecated before, now it is removed altogether

Fixes #35985 - Use Katello integration in theforeman/puppet

Fixes #35564 - Use Redis 6 on EL8

Fixes #35631 - Enable HTTP/2 by default

Apache doesn't load HTTP/2 by default since it's incompatible with the
prefork MPM. We use the event MPM where it should work. Enabling HTTP/2
allows clients to retrieve resources in parallel which means pages load...

Refs #35629 - Use built in Apache defaults on EL

Currently unreleased, but puppetlabs/apache will respect the EL8
defaults. It follows the system level configuration for TLS protocols,
which out of the box is TLSv1.2 & TLSv1.3.

It still keeps stricter security on Debian since there the default still...

Refs #35629 - Use the correct cipher profile

Fixes: 8472875da9a6b94c8c5dd3696d697e671934afc1