[Fixes #54676186] mirror security

- adds everyone with prod access
- installs fail2ban and ufw
- includes ssh module which ensures only key-based login