Split task files

Confirmed as working on prod4.
No logic is changed in this PR just the way things are grouped.
This makes it easier to, for example, find everything that pokes ufw, as it is all in ufw.yml files etc.