Add webserver security

Added the security.core and nginx-iptables, and verified
that it does let basic traffic into/from port 80.