---
# Hardened SSH settings
debian_baseline_ssh_allow_users:
  - admin

# Example key rotation entries. Replace with your real users and keys.
debian_ssh_rotation_users:
  - name: admin
    home: /home/admin
    state: present
    keys:
      - "ssh-ed25519 AAAAEXAMPLE_REPLACE_ME admin@workstation"