---
# ── Admin groups ───────────────────────────────────────────────────────────────
# Add new users here. Each entry requires:
#   username  — Linux username
#   ssh_key   — public SSH key string (optional, but strongly recommended)
#
# To allow a group on a specific host/group, override `users_allowed_admin_groups`
# in the corresponding group_vars/<group>/vars.yml or host_vars/<host>/vars.yml.

users_admin_groups:
  super_admin:
    - username: mrwho
      # Note: key comment says a.kazantsev — verify the key owner if needed
      ssh_key: >-
        ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAlQz8IhTEQ0utmWmwOC7FijieQULbeyXLDkjmYwSyptqj+7u0qyPPStQzN9leIISSKJ1/eJ5UbETTvc1R1Jg1tdTg5xZTMoz0jwruDP73vYIxLdeO4cZvjJIGyzS2PemUM+016uf4DLZ3jmK4hwEi2mF6UX+NYRPNIuPpr96gP1kYb1vrlG7P0cEk7EbGO6Deda3S64L0lDherSqc/Z7cn8nr6iemTdsBfl303vqFgXf/aWijuvVPUSpSiI3fR0NwvX/RW7oDIFls1dVU5CPkcwaX25Fu3voJ6e3lmduW+1s/vL1nMd5ourET+1Std3S75jqzkVsV3R74Xkgq5avn7w==
    - username: m.kudryashov
      ssh_key: >-
        ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEvaPsU1iT306USihvyYYVEdmr2CjLAaSUxyQy1QSEqF


  middle_admin:
    []
    # Example:
    # - username: m.ivanov
    #   ssh_key: "ssh-rsa AAAA..."

  junior_admin:
    []
    # Example:
    # - username: j.petrov
    #   ssh_key: "ssh-rsa AAAA..."

# ── Default access policy ──────────────────────────────────────────────────────
# Which admin groups are provisioned on hosts by default.
# Override in group_vars/<os_group>/vars.yml or host_vars/<host>/vars.yml
# to restrict access on specific servers.
users_allowed_admin_groups:
  - super_admin
  - middle_admin
  - junior_admin