override vars/Fedora.yml as we want to keep firewalld

it is required for fail2ban, but the service should be disabled

inventory/host_vars/copr-fe.cloud.fedoraproject.org

@@ -1,4 +1,7 @@
 ---
+# this overrides vars/Fedora.yml
+base_pkgs_erase: 'PackageKit*', 'sendmail', 'at']
+
 instance_type: ms1.medium
 image: "{{ fedora21_x86_64 }}"
 keypair: fedora-admin-20130801

roles/copr/frontend/tasks/main.yml

@@ -24,6 +24,9 @@
   tags:
   - config
 
+- name: disable firewalld
+  service: name=firewalld enabled=no state=stopped
+
 - name: enable and start redis  # TODO: .service in copr-backend should depend on redis
   service: name=redis enabled=yes state=started