- name: Add SSH Key - muskduck
  tags:
    - ssh_keys
  ansible.posix.authorized_key:
    user: fern
    state: present
    key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGp2OX16VJ+G8cE5hjt2vLc8teUpE+EaN2YmEqqMx/j9 fern@muskduck"

- name: Add SSH Key - pardalote
  tags:
    - ssh_keys
  ansible.posix.authorized_key:
    user: fern
    state: present
    key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKzW4epTmK01kGVXcuAXUNJQPltnogf4uab9FA5m8S3n fern@pardalote"

- name: Add SSH Key - fairywren
  tags:
    - ssh_keys
  ansible.posix.authorized_key:
    user: fern
    state: present
    key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBEJYq1fMxVOzCMfE/td6DtWS8nUk76U9seYD3Z9RYAz u0_a399@fairywren"

- name: Add SSH Key - YubiKey
  tags:
    - ssh_keys
  ansible.posix.authorized_key:
    user: fern
    state: present
    key: "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIMoJvPcUJDVVzO4dHROCFNlgJdDZSP5xyPx2s40zcx5QAAAABHNzaDo= YubiKey5NFC"

- name: Disable root login
  become: true
  lineinfile:
    path: /etc/ssh/sshd_config
    regexp: "^PermitRootLogin"
    line: "PermitRootLogin no"
    backup: yes