- insert:
    - id: dsh-remote
      name: '@local/dsh-remote'
      config:
        # master | slave | auto (auto = slave once paired with a master, else master)
        role: auto
        # Display name of this device (defaults to the hostname); its id is the slug of it.
        deviceName: ''
        # Shown in the Devices page so other machines know where to pair.
        lanUrl: ''
        publicUrl: ''
        sync:
          # slave: pull plugins/config automatically on link-up and when the master pushes.
          auto: true
          # slave: bundle allow/deny lists (exact names or prefix*). deny wins.
          allow: []
          deny: []
          # slave: names of credential refs to accept from the master (opt-in, per secret).
          secrets: []
          # master: credential refs offered to devices (each device still opts in on the master
          # Devices page AND locally via `secrets` above).
          offerSecrets: []
          # master: never sync these bundles / cordis.patch.yml entry ids.
          excludeBundles: []
          excludePatchIds: []