update foreman manifest with firewall config and disabled apache decode mod