ci: initial cluster state

tofu/cloud_init.cfg.yml

@@ -0,0 +1,28 @@
+#cloud-config
+# vim: syntax=yaml
+
+# Add the default user and authorized ssh key
+users:
+  - name: ${user}
+    sudo: ALL=(ALL) NOPASSWD:ALL # Grant sudo without password
+    groups: users, wheel
+    shell: /bin/bash
+    ssh_authorized_keys:
+      %{ for key in ssh_authorized_keys ~}
+      - ${key}
+      %{ endfor ~}
+
+# Optional: Run package upgrades on first boot
+package_update: true
+package_upgrade: true
+
+# Optional: Disable password authentication for SSH
+ssh_pwauth: false
+
+# Optional: Install basic packages (useful for debugging or Ansible)
+packages:
+  - vim
+  - curl
+  - wget
+  - git
+  - python3 # Usually present, but good to ensure for Ansible