# Machine-local config. Copy to ctrl/.env (gitignored) and edit.
#
# The estate's FACTS live in estate/<name>.json.
# The provider's SHAPE lives in ctrl/env.d/<target>.env.
# This file is only what differs between machines, plus credentials.

# ESTATE is required when estate/ holds more than one file.
# ESTATE=mcrn
# TARGET=aws

# ssh ALIASES, never hostnames — check.sh refuses a value containing a dot.
# HOST=mcrn              # app user, no sudo
# HOST_ADMIN=mcrn-admin  # sudo, only where genuinely required

# Credentials: names only, never values. The secrets stay in ~/.aws and
# ~/.config/gcloud where their own tooling manages them.
# AWS_PROFILE=default
# GCP_PROJECT=