Make firewall configuration optional

[conorsch]

In production environments, there will likely be other tools addressing firewall needs. Leave the ufw tasks enabled by default, but provide a single var that disables the firewall config, in case another tool is managing the firewall rules.

• [x] create default var for firewall enabling
• [ ] create default var for firewall rules
• [x] conditionally include ufw tasks