Move Zerotier controller

It's running on fornax now, and the VMs have been deleted. This way,
there's no internal routing needed for it to be publicly accessible by
any network member nodes.

nodes/fornax.kosmos.org.json

@@ -2,7 +2,7 @@
   "name": "fornax.kosmos.org",
   "normal": {
     "knife_zero": {
-      "host": "10.1.1.187"
+      "host": "10.1.1.147"
     }
   },
   "automatic": {
@@ -12,7 +12,8 @@
     "hostname": "fornax",
     "ipaddress": "148.251.83.201",
     "roles": [
-      "nginx_proxy"
+      "nginx_proxy",
+      "zerotier_controller"
     ],
     "recipes": [
       "kosmos-base",
@@ -26,6 +27,9 @@
       "kosmos_website::default",
       "kosmos-ejabberd::nginx",
       "kosmos-akkounts::nginx_api",
+      "kosmos_zerotier::controller",
+      "kosmos_zerotier::firewall",
+      "kosmos_zerotier::zncui",
       "apt::default",
       "timezone_iii::default",
       "timezone_iii::debian",
@@ -71,6 +75,7 @@
   "run_list": [
     "recipe[kosmos-base]",
     "recipe[kosmos_kvm::host]",
-    "role[nginx_proxy]"
+    "role[nginx_proxy]",
+    "role[zerotier_controller]"
   ]
 }