Remove dns and spam modules.
Remove https access to nginx, not intended to be accessible to the internet.
Allow ssh password login, not intended to be accessible from the internet.
Remove firewall, not intended to be accessible from the internet
Set roundcube username_domain so we can login with just the username
Don't install bind9-host