Punch hole for icinga servers to monitor all

Add icinga definition for our one at this point server and then punch a
hole in the ferm configuration next to the bastion SSH hole

Change-Id: I61c702d50cadb95c444130613512f1a850b41bb4