{
  "default_key_path": "${SSH_KEY_PATH}",
  "allowed_hosts": [
    "10.0.*",
    "*.internal.example.com"
  ],
  "profiles": [
    {
      "alias": "prod-web",
      "host": "10.0.1.10",
      "username": "deploy",
      "port": 22,
      "key": "${PROD_SSH_KEY}"
    },
    {
      "alias": "bastion",
      "host": "bastion.example.com",
      "username": "deploy"
    },
    {
      "alias": "db-via-pam",
      "host": "pam-gateway.example.com",
      "username": "operator",
      "target": "10.0.2.20",
      "target_password": "${DB_TARGET_PASSWORD}"
    }
  ]
}