Get a green build with it mostly how I like it.
Add fail2ban recipe. Seperate user creation and configuration into user recipe. Add ssh_know_hosts file. Update metadata and attributes.