diff --git a/bootstrap.sh b/bootstrap.sh
index ca2a0a6..e4a2532 100644
--- a/bootstrap.sh
+++ b/bootstrap.sh
@@ -136,10 +136,11 @@ chmod 600 /root/.ssh/authorized_keys
 
 
 ### 8. Création du script first-login
-cat << 'EOF' > /root/first-login.sh
+cat << 'EOF' > /etc/profile.d/first-login.sh
 #!/bin/bash
 
-KEYFILE="/root/.ssh/id_ed25519"
+HOSTNAME=$(hostname)
+KEYFILE="/root/.ssh/$HOSTNAME"
 
 echo
 echo "==============================="
@@ -165,12 +166,11 @@ systemctl restart sshd
 rm -f /root/.bash_firstlogin
 EOF
 
-chmod +x /root/first-login.sh
+chmod +x /etc/profile.d/first-login.sh
 
-# Hook pour exécuter first-login au premier login root
-echo "/root/first-login.sh" > /root/.bash_firstlogin
 
-# Ajout dans .bashrc
-if ! grep -q bash_firstlogin /root/.bashrc; then
-    echo '[ -f /root/.bash_firstlogin ] && bash /root/.bash_firstlogin' >> /root/.bashrc
+FLAG="/root/.firstlogin_done"
+if [ ! -f "$FLAG" ]; then
+    /etc/profile.d/first-login.sh
+    touch "$FLAG"
 fi