- db:
    linux_user:
      username: 'foo_db'
      allowed_ssh_public_keys: ['ssh-ed25519 <snip> my special ssh key']
    # files not listed will be deleted when script is re-run.
    # relative paths are resolved from /home/<db.linux_user.username>
    persist: ['data']
    network:
      # valid values for interface: ['public', 'local']
      interface: 'public'
      port: 1
      domain: 'db.foo.org'
      ssl: false
    pg_admin:
      username: 'postgres'
      password: 'password'
- api:
    linux_user:
      username: 'foo_api'
      allowed_ssh_public_keys: ['ssh-ed25519 <snip> my special ssh key']
    persist: []
    network:
      interface: 'public'
      port: 2
      domain: 'api.foo.org'
      ssl: true
- ui:
    linux_user:
      username: 'foo_ui'
      allowed_ssh_public_keys: ['ssh-ed25519 <snip> my special ssh key']
    persist: []
    network:
      interface: 'public'
      port: 3
      domain: 'foo.org'
      ssl: true