move sshd extra ports to class params instead of hardcoded in the template