Allow installing firewall without having a web role
All server types can benefit from being able to send mail

As any server could have a cron job that would need to notify
developers of a failure to complete it's task.
Configuration for DB servers should also be in source control

So give them Git as well. And set up the deploy user.