Set up fail2ban for nginx, move IPFS gateway to proxy role

nodes/fornax.kosmos.org.json

@@ -35,6 +35,7 @@
       "kosmos-akkounts::nginx_api",
       "kosmos-hubot::nginx_botka_irc-libera-chat",
       "kosmos-hubot::nginx_hal8000_xmpp",
+      "kosmos-ipfs::nginx_public_gateway",
       "remotestorage_discourse::nginx",
       "kosmos_zerotier::controller",
       "kosmos_zerotier::firewall",
@@ -66,7 +67,10 @@
       "discourse::nginx",
       "git::default",
       "git::package",
-      "kosmos-base::letsencrypt"
+      "kosmos-base::letsencrypt",
+      "firewall::default",
+      "chef-sugar::default",
+      "fail2ban::default"
     ],
     "platform": "ubuntu",
     "platform_version": "20.04",