group_vars/*.yml files contain user-specific configuration (domain names, email, port/cipher preferences). Like the inventory, they should be .example templates in git with the actual files gitignored.
group_vars/{all,relay,landing}.yml to .yml.example via git mvgroup_vars/*.yml (excluding .example) to .gitignore(none)
(none — this is a file organization change, not a behavior change)
group_vars/*.yml gitignoredgroup_vars/*.yml.example committed as templates