Fix a bunch of glitches

• have only one changelog
• Actually deploy the template for configuration file
• Prefer unpriviliged port (verify within stdlib datatypes)
• Add a "require" between package and service resources