General stability updates

1. set up icron to watch for change to nginx 
1. force usage of usa mirrors where possible
1. reorder when iptables is turned on just to speed things up