## Context

Same pattern as `inventory/hosts.yml.example` — ship templates, gitignore instances.

## Goals / Non-Goals

**Goals:**
- All three group_vars files become `.example` templates
- Actual `.yml` files gitignored

**Non-Goals:**
- Changing variable names or defaults

## Decisions

### 1. Gitignore pattern: `group_vars/*.yml` with negation for `.example`

Use `group_vars/*.yml` in `.gitignore` and `!group_vars/*.yml.example` to ensure only the actual config files are ignored while templates remain tracked.

## Risks / Trade-offs

- **[Forgotten copy step]** → Ansible will fail clearly if files are missing. README documents the step.