refactor(role): security, fail2ban updated
refactor(apt): disable all but update

For now don't install any additional source file.
Need to find a way to adjust that for debian:
stable vs testing vs experimental + pinning