re-add profile::firewall include to profile::base