cloudformation: add additional public and internal ports
add nginx frontend service