ceph: set up firewall

Still need to drop the hardcoded allowed set.

roles/ceph/tasks/firewall.yml

@@ -1,3 +1,7 @@
+- name: Retrieve service list
+  set_fact:
+    services: '{{ query("netbox.netbox.nb_lookup", "clusters", raw_data=true, api_filter="name="+cluster) | map(attribute="custom_fields.services") | flatten }}'
+
 - name: Install nftables
   package:
     name: nftables