Change the default SSH port

[apatel762]

And update the TODO comment in the configuration template file.

This will likely also involve playing around with the firewall (via firewall-cmd). There's an example of that on this page: https://www.redhat.com/sysadmin/harden-new-system-ansible (scroll down a bit)

[apatel762]

Encrypting individual Ansible vars: https://stackoverflow.com/questions/30209062/ansible-how-to-encrypt-some-variables-in-an-inventory-file-in-a-separate-vault#44241343