diff --git a/basic_configs/debian-hetzner-init b/basic_configs/debian-hetzner-init
index d3c59e7..40d466d 100644
--- a/basic_configs/debian-hetzner-init
+++ b/basic_configs/debian-hetzner-init
@@ -1,5 +1,14 @@
 #cloud-config
 # vim: syntax=yaml
+
+users:
+  - name: ${TARGET_USERNAME}
+  - sudo: ALL=ALL
+  - lock_passwd: true
+  - ssh_authorized_keys:
+      - ${SSH_PUB_KEY}
+disable_root: true
+
 packages:
   - ufw
   - nginx