Drop the memory reservation down to 1.75 GiB
Write up the S3 restoration procedure
Add the puppetlabs firewall module
Fix #90: Add a firewall

Caveat emptor: this protects ONLY IPv4.

Currently we're on a machine without IPv6 access anyway, but it's worth
being aware of.
Persist the firewall to the correct directory
Half the VM memory, matching the dedicated box
Merge branch 'master' into dedicated-server