Move ufw to it's own role