Updated vpn firewall rules

- Fixed malformed rules for bridge traffic
- Added rules to allow traffic to VPN server port
Made xorg monitor configuration into a template

Different nodes may require different video drivers. The template allows for 
each node to declare a video driver as well as the location of the video card.  
Prior to this commit, the configuration assumed the video card required a radeon 
driver, thus, X would not work for any other video card. Now, a node can declare 
the appropriate video card and therefore X should work on all nodes.
Made vpn service only autostart on the vpn server

Clients may or may not be locally connected to the same subnet as the vpn 
server. Thus, it makes most sense for clients to manually start openvpn when 
they are NOT on the same subnet as that of the vpn server.
Changed mpd process group to allow access to sound card

Having mpd run as user byronsanchez prevented mpd from being able to access the 
sound card. Switching it to audio fixed the issue since the audio group can 
access the sound card.
Fixed udev USE flag for calibre

Puppet installation of calibre failed because the USE flag was not 
updated/fixed. The proper USE flag has been set to ensure udev installs properly 
as a dependency for calibre.
Added ffmpeg USE flags

These will allow more ffmpeg functionality. Currently targetting mp3 conversion 
functionality.
Added usbutils package for all nodes under base pattern

This will allow for checking usb connected devices on all nodes (for example, 
lsusb).

Also switched br0 network resource name to the full path version to match 
dependency resource declaration.