I use my external FQDN of the host.
Did not change the default.
Same here. Kept the default. Just changed the passphrase entry to make sure to be on the save side in case it would be a service that is running at my end.
Kept the defaults here but changed the password to be on the save side for security reasons.
This might help.
Have a look here. I quickly scanned through and it looks like that doc would help.
I entered a user and a related password to make sure that it is not readable/guessable by others.