- db:
    linux_user:
      username: 'foo_db'
      allowed_ssh_public_keys: ['ssh-ed25519 <snip> my special ssh key']
      # files not listed will be deleted when script is re-run.
      # relative paths are resolved from /home/<db.linux_user.username>
      persist: ['data']
    network:
      # valid values for interface: ['public', 'local']
      interface: 'public'
      port: 1
      domain: 'db.foo.org'
      ip: '8.8.8.8'
      ssl: false
    postgres:
      username: 'postgres'
      password: 'password'
      data_dir: '/home/foo_db/data'
- api:
    linux_user:
      username: 'foo_api'
      allowed_ssh_public_keys: ['ssh-ed25519 <snip> my special ssh key']
      persist: []
    network:
      interface: 'public'
      port: 2
      domain: 'api.foo.org'
      ssl: true
- ui:
    linux_user:
      username: 'foo_ui'
      allowed_ssh_public_keys: ['ssh-ed25519 <snip> my special ssh key']
      persist: []
    network:
      interface: 'public'
      port: 3
      domain: 'foo.org'
      ssl: true