Add Fail2ban to initial setup

Also removed root config tags and changed all inital tasks
to use root.