I set this up to force myself to stop SSHing to boxes all the time and trust in my own automation. It took some effort and setup is frustrating but it ended up being a net positive.

I baked everything with Ansible and did last touch setup with user-data, and deployed it all with Terraform.