# Seed exercising the # purple:vault-addr parser path alongside the existing
# vault-ssh role comment. Covers both "host with role + address" and "host
# with only address" (which is meaningless but must round-trip).

Host primary
  HostName 10.40.0.20
  User debian
  IdentityFile ~/.ssh/id_ed25519
  # purple:vault-ssh ssh-client-signer/sign/engineer
  # purple:vault-addr http://127.0.0.1:8200
  # purple:tags prod,infra
  CertificateFile ~/.purple/certs/primary-cert.pub

Host replica
  HostName 10.40.0.21
  User debian
  # purple:vault-addr https://vault.example.com:8200
  # purple:provider proxmox:qemu:402

Host bastion
  HostName 1.2.3.4
  User admin
  # purple:vault-ssh ssh-client-signer/sign/admin
