https://roadmap.sh/projects/bastion-host
You can find the full README to use it here
Create the script init.sh (see default_init.sh to view what you must put inside) to use your own hostname and identityfile and run it.
It will create the ssh config to access your bastion and secure server
ssh bastion # to access the bastion
ssh secure-server # to access the server with the bastionFrom the ansible dir, run
ansible-playbook config/bastion.yml # configuration for the bastion
ansible-playbook config/secure-server.yml # configuration for the server