[tracking] remaining vault secrets

[classabbyamp]

should be migrated to nomad variables

• apps/devspace
  • secret/devspace/ssh
• apps/ircbot
  • secret/ircbot/credentials
  • secret/ircbot/webhook
• apps/maddy
  • secret/lego/data/certificates/_.voidlinux.org.crt
  • secret/lego/data/certificates/_.voidlinux.org.key
• build/signing
  • secret/repomgmt/signing
• infrastructure/lego
  • secret/lego/do_api
• infrastructure/nginx-*
  • secret/lego/data/certificates/_.voidlinux.org.crt
  • secret/lego/data/certificates/_.voidlinux.org.key
• monitoring/alertrelay
  • secret/alertrelay/credentials

[the-maldridge]

The maddy and nginx ones should use the certs that are already in nomad vars, and the lego job should just be removed. We had two different processes for renewing certs, and we should dedup down to just the one we're using.

[the-maldridge]

All remaining tasks do not make use of vault policies. We should do another sweep, then un-hook the legacy vault integration and update nomad.