feat: add password for twirre user

group_vars/all/main.yml

@@ -29,6 +29,7 @@ ssh_admin_users:
   - name: twirre
     shell: /bin/bash
     groups: "{{ ssh_admin_groups }}"
+    password: "{{ vault_twirre_password_hash }}"
     authorized_keys:
       - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKSmroAJ4SDziZtwg+PCNITuhPim8oseq/sNwW0jTLJc twirre@gwen
       - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIfapo7P0vmwkTdD9kkHaalk9U+JYIZuCp/hFTnPRqTp twirre@ben

group_vars/all/vault.example.yml

@@ -15,6 +15,10 @@ vault_gitea_secret_key: REPLACE_ME
 vault_gitea_internal_token: REPLACE_ME
 vault_gitea_lfs_jwt_secret: REPLACE_ME
 
+# Store a hash here, not the plaintext password.
+# Generate a SHA-512 password hash with: `openssl passwd -6`
+vault_twirre_password_hash: REPLACE_ME
+
 vault_mailserver_accounts: |
   # One account per line: email|{SCHEME}hashed-password
   # Example: