Make firewall public recipe and remove it from _common_system.
Added mysql_admin_subdomain attribute.