htpasswd .env playbook.retry .venv hosts secret-*.yaml