[DO NOT MERGE/WIP] Configure nine

Adds a few new roles:

* nginx (not complete yet)
* supervisor (complete)
* supervisor-service (work in progress)
Could you also require the 'supervisor' role here?  Then users would only need to set up the `supervisor-service` role.