use cipher groups instead of hardcoding suites
update for new resource in yum
only start shorewall after everything is in place
use "all" instead of just "net", may be safer
what is ohai plugin anyway?
add log module for php
Merge pull request #183 from phunehehe/nginx

use cipher groups instead of hardcoding suites
Merge pull request #184 from phunehehe/shorewall

Shorewall
I don't remember why smtp_tls_cafile is defaulted to /etc/postfix/cacert.pem on
Ubuntu, but according to the man page of update-ca-certificates
/etc/ssl/certs/ca-certificates.crt is the right file.
http://manpages.ubuntu.com/manpages/precise/man8/update-ca-certificates.8.html
Merge pull request #185 from phunehehe/postfix

Use the right CA file for Postfix
add attribute for shared_buffers
sort config options
perform base backup for slave