Split out into roles, and add firewall rules
Re-enable etckeeper; working this time
We only support Debian-based distros
Remove old iptables rules
Make ryan use common role