Refactored to remove ansible completely and provision via bash, also launch one NAT and route all zones through it