diff --git a/.github/workflows/test-deploy.yaml b/.github/workflows/test-deploy.yaml
index ee52818a..da0cadb6 100644
--- a/.github/workflows/test-deploy.yaml
+++ b/.github/workflows/test-deploy.yaml
@@ -1,4 +1,4 @@
-name: Test-deploy
+name: Test deploy
 
 on:
   workflow_dispatch:
diff --git a/infrastructure/.gitignore b/infrastructure/.gitignore
index 22ebdac3..d49ee98d 100644
--- a/infrastructure/.gitignore
+++ b/infrastructure/.gitignore
@@ -11,13 +11,6 @@
 crash.log
 crash.*.log
 
-# Exclude all .tfvars files, which are likely to contain sensitive data, such as
-# password, private keys, and other secrets. These should not be part of version
-# control as they are data points which are potentially sensitive and subject
-# to change depending on the environment.
-*.tfvars
-*.tfvars.json
-
 # Ignore override files as they are usually used to override resources locally and so
 # are not checked in
 override.tf
diff --git a/infrastructure/environments/poc/variables.tfvars b/infrastructure/environments/poc/variables.tfvars
new file mode 100644
index 00000000..8c55e584
--- /dev/null
+++ b/infrastructure/environments/poc/variables.tfvars
@@ -0,0 +1,10 @@
+features                              = {
+  front_door         = false
+  hub_and_spoke      = false
+  private_networking = false
+}
+postgres_backup_retention_days        = 7
+postgres_geo_redundant_backup_enabled = false
+private_networking                    = false
+protect_keyvault                      = false
+vnet_address_space                    = "10.65.0.0/16"