This means migrating the following nodes:
- bardo.internaladmin.swh.network: the actual node serving hedgedoc
- rp1.internal.admin.swh.network: the reverse proxy in charge of publicly exposing hedgedoc
plan:
```
$ puppet agent --disable
$ sed -i -e 's/buster/bullseye/' /etc/apt/sources.list.d/*
$ sed -i -e 's,bullseye/updates,bullseye-security,' /etc/apt/sources.list.d/debian-security.list
$ apt update
$ apt upgrade -y
$ apt dist-upgrade -y
$ reboot
$ puppet agent --enable && puppet agent --test
# check everything still runs fine
```