# SSH Host Configuration

This directory contains project-local SSH configuration for pi extensions.

## Files
- `hosts.json` — active host inventory and policy
- `hosts.example.json` — example structure

## Goals
- use stable aliases instead of raw host strings
- keep host policy close to the repo
- support read-only vs writable targets
- require confirmation for risky commands

## Usage
Launch pi with an alias from `hosts.json`:

```bash
pi --ssh pve1
pi --ssh nextcloud-vm
pi --ssh nextcloud-vm:/etc
```

Raw `user@host` targets are blocked unless `allowRawHosts` is enabled in `hosts.json`.

## Notes
- prefer aliases for all important infrastructure
- prefer SSH keys with BatchMode/no password prompts
- treat Proxmox hosts more carefully than guest VMs