Canonical hosts for this site live in config. The field kit can print HOST lines from an env file and skip secrets.