Public repository?

[bbezak]

Does this repo needs to be public?

[oneswig]

I don't mind if it is taken private. It leaks usernames, which isn't great.

[cityofships]

We could move users to the TF Cloud vars. Otherwise, it does not have to be public.

[cityofships]

I'm tempted to say it's a good exercise to keep repository like this public; this encourages applying best practices like decoupling variables (secrets) from the code. E.g. each of the bastions could have a different set of users, still using the same source code. Besides, this warning:

[priteau]

Having it public has the nice side-effect that we can pull the authorized keys from anywhere.