Fix permissions
Several improvements, messing around with rvm, punch a hole into the strict iptables firewall to make the nginx accessible