install iptables-persistent (firewall module wants it).
apache into common module, to not always install it
public key export requires key generation
add local gateway_ipaddr to peer file for distribution