Adding firewall_allow_rules to services. Changing dependencies to pick up base from nimbus-cloud.