{
  "allowRawHosts": false,
  "defaultConfirmDestructive": true,
  "hosts": {
    "nextcloud-vm": {
      "remote": "piagent@192.168.0.110",
      "remoteCwd": "/home/piagent",
      "description": "Nextcloud guest VM",
      "roles": [
        "nextcloud",
        "vm"
      ],
      "allowWrite": true,
      "allowBash": true,
      "confirmDestructive": true
    },
    "amp-gameserver": {
      "remote": "piagent@192.168.0.90",
      "remoteCwd": "/home/piagent",
      "description": "AMP game server host",
      "roles": [
        "amp",
        "gameserver",
        "docker"
      ],
      "allowWrite": true,
      "allowBash": true,
      "confirmDestructive": true
    },
    "vaultwarden-vm": {
      "remote": "piagent@192.168.0.238",
      "remoteCwd": "/home/piagent",
      "description": "Vaultwarden dedicated VM (VMID 102) - LAN-only bootstrap, self-signed TLS at vw.dropcutstud.io",
      "roles": [
        "vaultwarden",
        "vm",
        "secrets"
      ],
      "allowWrite": true,
      "allowBash": true,
      "confirmDestructive": true
    },
    "nimrod-lxc": {
      "remote": "piagent@192.168.0.222",
      "remoteCwd": "/home/piagent/projects/nimrod",
      "description": "Dedicated Nimrod/Pi LXC (CTID 104) - manual SSH workflow",
      "roles": [
        "nimrod",
        "pi",
        "lxc",
        "assistant-workspace"
      ],
      "allowWrite": true,
      "allowBash": true,
      "confirmDestructive": true
    },
    "reverse-proxy": {
      "remote": "piagent@192.168.0.137",
      "remoteCwd": "/home/piagent",
      "description": "Central Nginx reverse proxy LXC (CTID 105) - LAN-only MVP, temporary self-signed TLS for search.dropcutstud.io",
      "roles": [
        "reverse-proxy",
        "nginx",
        "lxc"
      ],
      "allowWrite": true,
      "allowBash": true,
      "confirmDestructive": true
    },
    "unbound-dns": {
      "remote": "piagent@192.168.0.124",
      "remoteCwd": "/home/piagent",
      "description": "Standalone Unbound internal DNS LXC (CTID 106) - LAN-only MVP for dropcutstud.io overrides",
      "roles": [
        "dns",
        "unbound",
        "lxc"
      ],
      "allowWrite": true,
      "allowBash": true,
      "confirmDestructive": true
    },
    "homepage-dashboard": {
      "remote": "piagent@192.168.0.241",
      "remoteCwd": "/home/piagent",
      "description": "Homepage dashboard LXC (CTID 107) - config-as-code service dashboard",
      "roles": [
        "dashboard",
        "homepage",
        "lxc"
      ],
      "allowWrite": true,
      "allowBash": true,
      "confirmDestructive": true
    }
  }
}