Move base::hosts::self to hiera
enable firewall