vps-root config files

There are two groups of branches, named dev-* and prod-.

Use git-crypt to unlock secrets.

Recommended to clone repo in /vps-root and copy configs out to / (taking care of permissions and ownership flags).