move data bag encryption to enabled/disabled flag
move firewall to enabled/disabled flag
move apt upgrade to enabled/disabled flag
move keepalived checks to enabled/disabled flag