Official roles

This commit overhauls the original code. It completely changes the workflow to make use of the official freeipa roles for IdM. Additionally, it expects to deploy two servers: a primary and a secondary/replica. Consequently, the structure of the variables have been significantly adjusted. Nonetheless, features such as let's encrypt SSL have been preserved out of necessity.