Remove hardcoded paths to commands on the host machine

Synapse v.1.14.0

Depending on the distro, common commands like sleep and chown may either
be located in /bin or /usr/bin.

Systemd added path lookup to ExecStart in v239, allowing only the
command name to be put in unit files and not the full path as
historically required. At least Ubuntu 18.04 LTS is however still on
v237 so we should maintain portability for a while longer.

fix for importing sqllite database

the current version fails the import, because the volume for the media is missing. It still fails if you have the optional shared secret password provider is enabled, so that might need another mount. Commenting out the password provider in the hoimeserver.yaml during the run works as well.

Clarify documentation on port forwarding of Jitsi/TRP behind NAT

Using the older one likely leads to issues like #517.

Fix/mx puppet bridge

Update postgres (12.2 -> 12.3, etc)

enable by default v2 api prefix for ma1sd

We can undo this once https://github.com/ma1uta/ma1sd/issues/44 gets
resolved.

Related to #508 (Github Pull Request).

Jitsi 4548-1 update

Typo STMP -> SMTP

Prevent 404s when Riot tries to retrieve domain-specific config.json

Riot unconditionally asks for a config.${document.domain}.json, c.f.
https://github.com/vector-im/riot-web/blame/develop/src/vector/getconfig.ts#L24

Document how to administer synapse database via tunneled web-frontend

Fixes #494 (Github Issue).

Add note about ask-become-pass

This flag is necessary for Ansible to ask for the sudo password when using the non-root option as documented in the `hosts` file. Otherwise, Ansible errors out with `missing sudo password`.