Harden FreeBSD with few common configurations using Lynis.
Change SSH port to the given port. Note Ansible run will fail if port was changed. Remember to update inventory file accordingly after a failed run.
Disable Hyper-Threading to mitigate side-channel attack via speculative execution. Turning this on will affect performance.