Securing machines with UFW, Fail2Ban and some SSH lockdown

* ufw configuration on all machines exposing only the needed ports at this time
* fail2ban and SSH config from machine-bootstrap

/cc @samjsharpe to check that the security setting have been ported correctly from machine-bootstrap
/cc @singhgarima to look though code as paired on some of the story