diff --git a/platform-infra/ansible/group_vars/all.yml b/platform-infra/ansible/group_vars/all.yml
index 1e0e065..86e4e10 100644
--- a/platform-infra/ansible/group_vars/all.yml
+++ b/platform-infra/ansible/group_vars/all.yml
@@ -66,7 +66,8 @@ smtp_relay_host: ""                      # optional: allow SMTP only to this hos
 # ⚠️  If ssh_disable_password_auth is true you MUST provide admin_authorized_keys
 #     for admin_user, or you will lock yourself out. The playbook asserts this.
 admin_user: "{{ ansible_user }}"
-admin_authorized_keys: []                # list of public key strings
+admin_authorized_keys:                   # list of public key strings
+  - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFHUeM0s5kNSRLQOjBjAVONtRJAnSwcFvvXWLwAXAec4 bart@kaluna2023"
 ssh_disable_password_auth: false         # flip to true once key login is verified
 
 # --- Backups / DR (Phase 5) -------------------------------------------------