Firewalld Support

Right now snackpack leaves the droplet without any firewall rules loaded. This installs, enables, and starts firewalld, which sets up some basic firewall rules. We can/should lock this down even more later on. :door: :fire: