Taken from the 18.12.1 default config
No Let's Encrypt cert generation recipe for now Hardcoded PostgreSQL password too