TODO

Update Readme (CI, Git, plantuml, etc.)
Split docker/web/docker-compose.yaml into different configs (e.g. web, gitlab, drone) using the same network
Use /var/lib/pbri/docker/... instead of Docker volumes (makes backups easier)
- Make it inaccessible to anyone but root (-rw------)
Add Drone runner
Figure out how to dependably store .env files (Ansible vault? Something else?)
Check out docker swarm and current best practices for Ansible
Use Gitea instead of GitLab
Add drone exec runner for Nix builds with shared /nix