move data bag encryption to enabled/disabled flag
move firewall to enabled/disabled flag
move apt upgrade to enabled/disabled flag
move keepalived checks to enabled/disabled flag
add some comments about what all the bools do