/hosts/common/
../
global
optional
secrets.yaml