Add super-basic nginx + ufw roles.
bootstrap.yml playlist for running against hosts once and getting them into a known-good state, and then we can just run site.yml every time thereafter.