move freeze into apt packages loop to allow for removing nginx-common from package list